Privacy Notice

Last updated: August 12, 2026

1. Data controller

APIS·MX (hereinafter, "APIS·MX", "we", "us"), operator of the platform available at apismx.com, is the controller responsible for the processing of the personal data described in this notice, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP). For any matter related to the privacy of your data, you can contact us at the email address given in this notice.

2. The most important thing: we don't store your data

APIS·MX is a tool that generates the official INM file from the file you upload. We want to be very clear about this:

• When you use the passport-reading feature, the photo you upload is sent to a Microsoft Azure document-processing service (Azure AI Document Intelligence) to automatically extract the passport data. The image is processed for the sole purpose of reading that data and is not used for any other purpose.
• The file you upload (with passenger and crew data) is processed in the server's memory solely to generate the INM file, and is not stored permanently.
• Once your file is generated and delivered, the input data is discarded. We do not keep copies of the passports or of the data of the people you include.
• In the case of pay-per-file, the generated file is kept temporarily (2 hours maximum) only so you can download it after completing payment, and it is then deleted automatically.
• One exception you control: if you have an account, you may choose to save a flight as a reusable template. Only then do we store the flight data and crew you decide to keep. This is optional, never automatic, and explained in detail in section 3. Everything above still applies to every file you generate without saving it as a template.

3. Saved templates for recurring flights (optional)

If you have an account, APIS·MX lets you save a flight as a reusable template, so you don't have to re-enter the same aircraft and crew on every recurring flight. This feature is entirely optional and only happens when you explicitly choose "Save as template".

• A template stores the flight and aircraft data (registration, owner, operator, airports), the responsible contact, and the crew members you include (name, travel document, nationality, dates). This means a template does contain personal data of the crew.
• Passengers are never saved in a template, since they usually change on every flight.
• Templates are tied to your account and are only visible to you. We use them for no purpose other than pre-filling your next flight.
• They are kept until you delete them. You can review, rename, and delete your templates at any time from the "My templates" page, or by deleting your account (section 8).
• If you don't save any templates, nothing about your flights or crew is stored: the general rule in section 2 applies in full.

By choosing to save a template, you consent to APIS·MX storing that flight and crew data in your account for this purpose until you delete it.

4. Personal data we process

We distinguish two situations:

a) Your account data (if you register): email address, operator or company name, and password (stored encrypted). This is retained while you keep your account, so we can give you access to the service.

b) Data contained in the files you upload: may include names, dates of birth, nationality, and identity-document or passport data of passengers and crew. Some of this may be considered sensitive data (for example, data revealing origin or nationality). As explained, this data is not stored once your file is generated — unless you deliberately save it as a template (section 3).

5. Purposes of processing

We process the data solely to:

• Generate the file in the official format required by the INM (primary purpose).
• Manage your user account and give you access to the service (if you register).
• Process payments through our payment provider (Stripe).

We do not use your data for purposes other than those stated here, nor do we process it for marketing purposes without your consent.

6. Transfers

We do not sell or share your data with third parties for their own purposes. To operate, we use service providers acting on our behalf: payment processing is carried out by Stripe (which receives the data needed to charge you, in accordance with its own privacy policy); the automatic reading of passports is carried out by Microsoft Azure AI Document Intelligence (which receives the passport image only to extract its data); and the infrastructure is hosted on Microsoft Azure. These providers process the data solely to provide the service to us, in accordance with their own privacy policies and security measures.

7. Your rights (ARCO)

You have the right to Access, Rectify, Cancel, or Object to (in Spanish, the "ARCO" rights) the processing of your personal data, as well as to withdraw your consent. Because we do not store the data in the files, these rights apply mainly to your account data. To exercise them, write to us at APISMX@outlook.com, stating your request and a means for us to reply to you.

8. Your account data and its deletion

If you have an account and wish to delete it along with your associated data, you can request this at the contact email. Deleting your account also removes any flight templates you saved (section 3). We retain account data only while you keep it active or as required by legal or tax obligations (for example, payment records).

9. Changes to this notice

We may update this privacy notice. We will post any changes on this same page, indicating the date of the last update.

This document describes our privacy practices clearly and in good faith. For specific legal matters, we recommend consulting a professional.