COOKIES POLICY
FÁBRICA DE INDICADORES S.A. DE C.V.
Effective Date: 01 de marzo de 2026
Versión: 1.0
This Cookies Policy (the "POLICY") is issued by FÁBRICA DE INDICADORES S.A. DE C.V. (Tax ID: FIN1704055Z2), with address at Calle 29 #147 Int. 3 por 32 y 34, Colonia Buenavista, Mérida, Yucatán, México, C.P. 97127 (hereinafter "YUNABAI" or the "CONTROLLER"), as personal data controller, in compliance with the transparency principle of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP, last amendment DOF Nov-14-2025). This POLICY forms an integral part of YUNABAI's Comprehensive Privacy Notice and Terms and Conditions of Use. Contact: privacy@fabricadeindicadores.com.
1. WHAT ARE COOKIES?
Cookies are small text files that a website stores on the user's device (computer, tablet or phone) when they access that site. They allow the site to remember the user's actions and preferences for a determined period. Cookies that collect IP addresses, session identifiers or device identifiers constitute personal data under Article 2(V) of the LFPDPPP and their processing is subject to that Law's provisions.
2. LEGAL BASIS FOR COOKIE USE
YUNABAI's use of cookies is based on: (i) Article 9(IV) LFPDPPP, for strictly necessary cookies (processing required for the legal relationship between YUNABAI and the USER, without additional consent); (ii) Article 7 LFPDPPP, for analytics, preference and marketing cookies (processing subject to the USER's tacit or express consent as applicable); and (iii) Articles 5 and 14 LFPDPPP, which impose on the Controller the duty to inform about all personal data processing, including that performed through tracking technologies.
3. CATEGORIES OF COOKIES USED BY YUNABAI
3.1 Strictly Necessary Cookies
Strictly necessary for the technical operation of the Platform. Without them, the Platform cannot function correctly. They do NOT require additional USER consent (Art. 9(IV) LFPDPPP). They include: session management and USER authentication; maintenance of login status and access tokens; server load balancing; and CSRF (cross-site request forgery) prevention. These cookies are deleted when the browser is closed or within the maximum period indicated in section 4 table.
3.2 Preference and Functionality Cookies
Allow the Platform to remember the USER's choices and provide enhanced, personalized functionalities. Their use is based on the USER's tacit consent under Article 7 LFPDPPP. They include: selected language and region; interface settings and visual preferences; cookie banner status; and USER's personalized Platform settings. If the USER rejects these cookies, some personalization features may not be available.
3.3 Analytics and Performance Cookies
Collect information on how USERS use the Platform, with the aim of improving its operation. Data collected is statistical and treated anonymously or pseudonymously. Their use is subject to the USER's tacit consent (Art. 7 LFPDPPP) and may be revoked at any time. They include: most visited pages and features; session duration; detected technical errors; navigation flows; and Platform performance metrics.
3.4 Marketing and Retargeting Cookies
Allow showing the USER relevant advertising based on their interests. YUNABAI uses these cookies in a limited manner and only with the USER's express consent, as they involve user profiling (secondary purpose per section 5.2 of the Comprehensive Privacy Notice). The USER may withdraw consent at any time through the cookies preference panel or by writing to privacy@fabricadeindicadores.com. Rejection of these cookies does not affect access to or operation of the Platform.
4. SPECIFIC COOKIES TABLE
The cookie categories YUNABAI installs are set out below. Specific third-party cookies may change as those providers update their services; YUNABAI will update this section with at least 30 days' prior notice.
First-party cookies:
a) session_id, yunab_auth_token: strictly necessary session cookies for authentication and access management. Deleted automatically when the browser is closed.
b) yunab_lang, yunab_prefs: store the user's language and visual preferences. Duration: 12 months.
c) yunab_cookie_consent: records the user's decision regarding non-essential cookies so it is not requested on every visit. Duration: 12 months.
d) csrf_token: security token required to prevent cross-site request forgery (CSRF) attacks. Session duration.
Third-party cookies:
e) _ga, _gid, _gat (Google Analytics): measure anonymized traffic and user behavior. _ga: 24 months; _gid: 24 hours; _gat: 1 minute. Provider: Google LLC — https://policies.google.com/privacy.
f) Technical support cookies (Intercom or equivalent platform): enable the user assistance widget. Duration varies by provider, maximum 12 months.
5. THIRD-PARTY COOKIES AND INTERNATIONAL TRANSFERS
Some cookies are installed by external service providers ("third parties") acting as data processors under confidentiality agreements equivalent to those required by the LFPDPPP. Third-party analytics cookie providers may be located in the United States of America or other countries. In these cases, YUNABAI verifies that such providers have adequate protection mechanisms (such as the EU-US Data Privacy Framework or standard contractual clauses), pursuant to Article 37 of the LFPDPPP. YUNABAI does not control cookies installed directly by third parties and recommends consulting their individual privacy policies.
6. CONSENT MANAGEMENT, CONTROL AND REVOCATION
6.1 Cookie Preference Panel
Upon first entering the Platform, the USER will see a cookie banner allowing them to: (i) accept all cookies; (ii) reject non-essential cookies; or (iii) customize their selection by category. The USER can change their preferences at any time from the cookies settings panel accessible in the Platform footer.
6.2 Browser Settings
The USER may also manage or delete cookies directly from their browser settings. Steps vary by browser. For more information see: Google Chrome (chrome://settings/cookies); Mozilla Firefox (about:preferences#privacy); Safari (Preferences > Privacy); Microsoft Edge (edge://settings/privacy).
6.3 Consent Revocation
The USER may revoke at any time the consent granted for non-essential cookies, without retroactive effects, using the Platform preference panel or writing to privacy@fabricadeindicadores.com. Revocation does not affect the lawfulness of processing based on consent prior to its revocation. Revocation of analytics and marketing cookies will not affect access to or main functionalities of the Platform.
7. IMPLICATIONS OF COOKIE REJECTION
a) Strictly necessary cookies: cannot be rejected. Their use is indispensable for Platform operation. If the USER blocks these cookies from their browser, the Platform may not function correctly or at all.
b) Preference cookies: rejection will prevent the Platform from remembering the USER's language, visual settings and other customized preferences in subsequent visits.
c) Analytics cookies: rejection will not affect Platform functionality. YUNABAI will have less information to improve user experience.
d) Marketing cookies: rejection will prevent personalization of commercial communications and advertising related to YUNABAI.
8. COOKIE DURATION AND RETENTION PERIODS
Personal data collected through cookies will be retained only for the time necessary to fulfill the purpose for which they were collected, pursuant to Article 10 of the LFPDPPP and the periods indicated in section 4 table. Session cookies are automatically deleted when the browser is closed. Persistent cookies are deleted within the periods indicated in the table. The USER may delete cookies stored on their device at any time from browser settings.
9. ARCO RIGHTS REGARDING COOKIE-COLLECTED DATA
Where cookies collect personal data, the data subject may exercise their ARCO rights (Arts. 21–34 LFPDPPP) and withdraw consent by sending a request to privacy@fabricadeindicadores.com with their full name, a copy of their official ID and the right they wish to exercise. YUNABAI will respond within 20 business days at no charge.
10. MODIFICATIONS TO THE COOKIES POLICY
YUNABAI may update this POLICY at any time. Modifications affecting non-essential cookies will be notified via: (i) updated cookie banner upon entering the Platform; (ii) email to the registered account address; and (iii) publication at www.yunabai.ai/cookies with at least 30 days' notice. The version and date published on the portal are the only current ones.
11. COMPETENT AUTHORITY
If you believe your personal data protection right has been violated, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno (SABG), the competent authority under Articles 2(XV) and 43 of the LFPDPPP (last amendment DOF Nov-14-2025). The SABG assumed all functions of the former INAI pursuant to the March 2025 Decree transitional provisions. Website: www.sabg.gob.mx.
12. APPLICABLE LAW AND JURISDICTION
This NOTICE is governed by the LFPDPPP (new law DOF Mar-20-2025, last amendment DOF Nov-14-2025), its Regulations and the Privacy Notice Guidelines of the Secretaría Anticorrupción y Buen Gobierno (SABG). For disputes, the parties submit to the federal courts sitting in Mérida, Yucatán, México, with the Código Civil Federal applying suppletorily.
Version 1.0 — Effective Date: 01 de marzo de 2026