Privacy Policy

Last updated: January 15, 2026

At Retucsos S.A. (hereinafter 'Retucsos', 'we', or 'the Platform'), we are committed to protecting the privacy and security of our users' personal data. This policy describes how we collect, use, store, and protect your personal information in accordance with Ecuador's Organic Law on Personal Data Protection (LOPDP) and its regulations.

1. Data controller

Retucsos S.A., domiciled at Av. 12 de Octubre N24-562 y Cordero, Mirage Building, Floor 8, Quito, Pichincha, Ecuador. RUC: 1792847361001. Data Protection Officer email: privacidad@retucsos.com.

2. Data we collect

We collect identification data (name, national ID or passport, nationality), contact data (email, phone, address), financial data (banking information for transfers), browsing data (IP address, browser type, pages visited), and data voluntarily provided through contact forms.

3. Purposes of processing

We use your data to: manage your registration and identity verification, process and execute investment operations, comply with legal and regulatory obligations before the Superintendency of Companies (SCVS), send communications about the status of your investments, improve our services and user experience, and prevent fraud and money laundering in accordance with Ecuadorian regulations.

4. Legal basis for processing

The processing of your data is based on: your express consent given upon registration, the execution of the contractual relationship, compliance with legal obligations (Companies Law, SCVS regulations, Anti-Money Laundering Law), and our legitimate interest in preventing fraud and improving services.

5. Data retention period

We retain your personal data for the duration of the contractual relationship and, subsequently, for the applicable legal periods (minimum 10 years for financial records under Ecuadorian tax legislation). Browsing data is retained for a maximum of 24 months.

6. International transfers

We may transfer data to technology service providers located outside Ecuador (cloud hosting, analytics services). In such cases, we ensure an equivalent level of protection through standard contractual clauses and impact assessments where applicable.

7. Your rights (ARCO+)

In accordance with the LOPDP, you may exercise your rights to: Access your personal data, Rectification of inaccurate data, Cancellation or deletion of data, Opposition to processing, Data portability, and the right not to be subject to automated decisions. To exercise these rights, send your request to privacidad@retucsos.com attaching a copy of your identity document.

8. Security measures

We implement appropriate technical and organizational measures: data encryption in transit (TLS 1.3) and at rest, role-based access controls, continuous security monitoring, encrypted backups, and periodic security audits by independent third parties.

9. Contact and complaints

If you have questions about the processing of your data or wish to file a complaint, you may contact us at privacidad@retucsos.com or address the Superintendency of Personal Data Protection of Ecuador as the competent supervisory authority.