Privacy notice

This translation is for convenience. The Spanish version prevails. Ver la versión en español.

Part A. Comprehensive privacy notice of Density Technology LLC

Date of this version: November 4, 2026.

1. Who is responsible for your data

Density Technology LLC ("Presente", "we") is a company formed in the state of Texas, United States, with its address at 17350 State Hwy 249, Ste 220 #24915, Houston, Texas 77064, United States. Density Technology LLC provides the Presente service.

Density Technology LLC is the controller (responsable) of the personal data in this Part A (art. 15 section I of the LFPDPPP, Mexico's private-sector data protection law).

Privacy contact: [email protected]. It is the personal data department that art. 29 of the LFPDPPP requires.

The Mexican laws that apply to this notice are in section 12.

2. Who this Part A applies to

• People who visit the Presente site.
• People who ask for a demo or write to Presente.
• People who sign up a company in Presente.
• Admins and leaders of a company, for their access data and their contact data with Presente.

If you use Presente to record when you start and end work at your job, your company is the controller of your work data. Density Technology LLC processes it only on behalf of your company, as a processor (persona encargada) (LFPDPPP art. 2 section XII). Read the privacy notice of your company. The app shows it to you before your first check-in.

3. Data we process

We do not process sensitive personal data in this Part A (art. 15 section II).

4. What we use your data for

Necessary purposes. They are necessary for our relationship with you or with your company. They do not require your consent (LFPDPPP art. 9 section IV).

1. Sign up your company and verify its tax data.
2. Create and manage your access. Send you the codes to sign in.
3. Provide the service, give support and answer your messages. Send you notifications in the app, by push and by email, and know if they arrived.
4. Invoice and charge for the plan.
5. Keep security, detect unauthorized access and keep the event log of your company.
6. Comply with legal obligations and respond to requests from authorities.

Additional purposes. They require your consent. If you refuse, you do not lose the service (art. 15 section III).

7. Send you guides, news and surveys from Presente.

To refuse purpose 7, write to [email protected] or use the unsubscribe link in each email.

5. Who we share your data with

Providers that work on behalf of Presente. They process the data only to give their service to Presente, with a duty of confidentiality. These are not transfers (LFPDPPP art. 2 section XX).

Density Technology LLC is in the United States. The server, the database and the backups of Presente are on a Hostinger virtual server in Phoenix, Arizona, United States. Density Technology LLC manages them. For this reason, your data is stored and processed in the United States.

Transfers without your consent. Only in the cases of art. 36 of the LFPDPPP. For example:

• A law or a treaty provides for it (section I).
• An authority requests it for the procurement or administration of justice (section V).
• It is necessary to recognize, exercise or defend a right in a legal proceeding (section VI).
• A company of the same group as Density Technology LLC, with the same processes and policies (section III).

We do not make transfers that need your consent (art. 35). We do not sell your data. We do not share it for advertising. We do not use your data to train artificial intelligence models, our own or those of other companies.

6. How long we keep your data

• Access and contact data: while your company has an account in Presente, or while you are an admin or leader. If you ask us to delete your account, we delete it within the period in section 8.
• Company data, the Constancia and the event log: as the Terms and the processor agreement say.
• Billing data: the period of the applicable tax laws.
• After that, we block the data for the statute of limitations period and then we delete it (art. 2 section III, arts. 10 and 24).

7. Your ARCO rights

You have these ARCO rights (access, rectification, cancellation and opposition) (LFPDPPP arts. 21 to 26):

• Access: know what data about you we have and how we process it.
• Rectification: correct data that is inaccurate, incomplete or out of date.
• Cancellation: ask us to delete your data. First it goes through a blocking period. It does not apply when the law requires us to keep the data (art. 25). To delete your Presente account, follow section 8.
• Opposition: object to the processing for a legitimate reason. You can also object to an automated decision that affects you significantly (art. 26 section II). Presente does not make automated decisions about you.

You can also revoke your consent for purpose 7. The revocation does not have retroactive effect (art. 7).

How to ask. Write to [email protected], or use "Ask support for help" in the app. Your request must include (art. 28):

1. Your name and an email or other means to answer you.
2. A document that proves your identity. If another person represents you, their identity and their power of attorney.
3. Which data it is and which right you want to exercise. For access, you do not need to describe the data.
4. Any information that helps us find the data.
5. If you ask for a rectification, the correction and the document that supports it (art. 30).

Acknowledgment of receipt. We send you an acknowledgment with the date on which we received your request. The deadlines count from that date.

Deadlines. We answer you within a maximum of 20 business days from when we receive your request. If it applies, we put it into effect within the following 15 business days. We can extend each deadline 1 time for an equal period, if the case justifies it (art. 2 section VIII, art. 31).

Opposition that applies. If your opposition applies, we stop processing that data no later than the business day after our answer.

Cost. It is free. We can charge only for reproduction, copies or shipping (art. 34).

If you do not agree with the answer, or you do not receive an answer, you can file a data protection request with the Secretaría Anticorrupción y Buen Gobierno (the federal data protection authority). The deadline is 15 business days from when you receive the answer (art. 40).

8. Delete your account

You can delete your Presente account at any time. It is free. This applies to every person with a Presente account: admins, leaders and employees.

How to ask.

1. Write to [email protected] from the email of your account.
2. Use the subject "Borrar mi cuenta" (Delete my account).
3. If you cannot write from that email, tell us the email of your account. We ask you for a document that proves your identity (section 7).

Deadline. We answer you within a maximum of 20 business days from when we receive your email. We delete your account within the following 15 business days and we tell you by email. These are the deadlines of section 7.

What we delete. Your Presente account and its data:

• First name, last names, email and phone.
• Password, if you added one, and sessions.
• Push identifiers of your devices.
• Profile photo.

After that, you can no longer sign in to Presente with that account, in any company.

What we do not delete immediately. Your work records: check-ins, workdays, requests and the event log of your company. They belong to your company. Your company is the controller of that data (section 2). From the moment we delete your account, those records are blocked: they are kept without changes and are not used for any other purpose. Your company can consult or show them only to comply with the law or to defend a right in a legal proceeding. The records keep your name, because they are the proof of your workday.

The records are kept for the whole employment relationship and 18 months after it ends. The law requires at least 1 year (LFT art. 804 section III and last paragraph; the LFT is the Federal Labor Law). After that, they stay blocked for the statute of limitations period and then they are deleted (LFPDPPP art. 2 section III and art. 24). They are not deleted before, because the law requires that they be kept (art. 25 section II). For your other rights over those records, write to the privacy contact of your company.

Backups. The copies of your work records in the backups follow the same period: the whole employment relationship and 18 months after it ends (LFT art. 804 section III and last paragraph). During that time, they are blocked and are not used for any other purpose. After that, they are deleted. The data of your account leaves the backups when the backups are renewed.

If you are an admin. The data of your company, its Constancia and its billing data belong to the company. They are not part of your account and are not deleted with it (section 6).

If you are the only admin of a company. A company does not stay without an admin. Before we delete your account, we ask you to confirm by email that we also cancel the account of your company. If you confirm, we cancel the account of the company and nobody can sign in to it. Its records are not destroyed: they stay blocked until the legal period ends (LFT art. 804 section III and last paragraph) and then they are deleted (LFPDPPP art. 2 section III and art. 24). If you want the company to continue, name another admin in Presente before you ask to delete your account.

9. Cookies and similar technologies

• The public site does not use cookies.
• The app stores on your device only what is necessary to keep your session.
• We do not use advertising or analytics cookies.
• Presente emails include a 1-pixel image. If your email program loads images, Presente knows that you opened the email and at what time. We use this only to know if a notification arrived. To prevent it, turn off image loading in your email.
• If we add visit analytics, we first change this notice and ask for your consent.

10. Security

We apply administrative, technical and physical measures (LFPDPPP art. 18). Among them: encryption in transit and at rest, role-based access and an event log of who views or exports data.

If a security breach significantly affects your rights, we tell you immediately (art. 19).

11. Changes to this notice

We publish each version at /privacidad, with its date. If you have access to Presente, we also tell you with a notification in the app before the change applies (art. 15 section VI).

11 Bis. The law of this notice

This notice is governed by the laws of Mexico, in particular the LFPDPPP. The Presente Terms choose Texas law for the contract with your company. That choice does not change this notice or your rights over your personal data.

12. Laws of Mexico

This section says which Mexican laws this notice follows. It is information, not a guarantee.

For the data of the staff of a company, the company is the controller. The labor laws that the Presente features address are in Part B, section 9, and in the Terms, section 4 Bis. Presente helps the company comply with them. The obligation belongs to the company.

Texts read on October 27, 2026 at https://www.diputados.gob.mx/LeyesBiblio/.

Part B. Privacy notice template for the staff of a company

This part is a template. The controller of this data is the company, not Density Technology LLC. Each company reviews it with its lawyer, completes it at sign-up and publishes it in Settings › Policies › Privacy (DEC-41.1). The person sees it in full in the app before their first check-in (DEC-41.7). The app stores the accepted version and the time.

1. Who is responsible for your data

The company that added you to Presente is the controller of the data that is processed in the Presente app. Its name, its address and its privacy contact are in the notice that it shows you in the app.

Density Technology LLC, of Texas, United States, provides the Presente service. Density Technology LLC processes your data only on behalf of your company, as a processor (LFPDPPP art. 2 section XII).

2. Data that is processed

Your company and Presente ask you for this data. "Necessary" means that it is needed for the employment relationship or for the app to work (LFPDPPP art. 9 section IV). "Optional" means that you can choose not to give it.

The biometric check does not deliver biometric data. Your phone compares your fingerprint or your face. The app receives only whether the check was correct, the method and the time. The app does not receive or store your fingerprint, your face or a biometric template (BIO-2, BIO-20).

Presente does not take photos at check-in and does not do facial recognition (DEC-51.6, BIO-15). Your photo is not compared with another image. No templates or measurements of your face are taken.

Sensitive personal data (LFPDPPP art. 2 section VI and art. 15 section II):

• The attachments of a request can contain health data (for example a medical leave certificate or a prescription) or data of your children (for example a birth certificate).

This data needs your express written consent (art. 8). You give it with the checkbox of this notice, within your session in the app.

3. What it is used for

Purposes necessary for the employment relationship. They do not require your consent (LFPDPPP art. 9 sections I and IV).

1. Keep the electronic work-time register of your workday, with start and end, and give it to the authority when it asks for it (LFT art. 132 section XXXIV).

2. Control attendance: late arrivals, absences and automatic closes.

3. Confirm that the check-in happens at a work location, according to the policy of your company.

4. Confirm your identity with the biometric check, if the policy requires it.

5. Calculate and manage your vacation and your prima vacacional (vacation premium) (LFT arts. 76 to 81).

6. Receive, decide and record your requests for overtime, vacation and leave.

7. Generate the reports for your payroll.

8. Keep and show the attendance records (LFT art. 804), and defend the rights of the parties in a legal proceeding.

9. Keep the security and the integrity of the event log.

10. Identify you within your company with your name, your photo and your job title, in the console of admins and leaders, and record your direct supervisor.

11. If your company turns on People or Org chart: show your name, your photo, your job title and your direct supervisor to your coworkers, without your contact data.

12. Send you notifications about your workday and your requests in the app, by push notification and by email, and know if they arrived.

13. Verify your phone number with a code by SMS or WhatsApp, if the policy requires it.

If you do not want to give your photo: if your company does not require it, you do not have to give it. If it requires it, write to the privacy contact of your company. Your company tells you what alternative you have.

Purposes that require your express consent.

14. Process the sensitive data of the attachments and of the legal leave periods, only to decide your request or your leave.

4. Position: limits

• The app reads your position only at the moment of the check-in. Never in the background.
• Outside your working hours, you do not receive notifications, except the automatic close and the answers to what you asked for (LFT art. 330-E section VI).

5. Who it is shared with

• Density Technology LLC, as a processor, in the United States, and its sub-processors. They process the data only to provide the service to your company. It is not a transfer (LFPDPPP art. 2 section XX).

The server, the database and the backups are on a Hostinger virtual server in Phoenix, Arizona, United States. Density Technology LLC manages them.

When the phone is locked, a notification does not show the name of another person (DEC-76.8).

• Labor authorities, when they ask for the work-time register (LFT art. 132 section XXXIV, LFPDPPP art. 36 section I).
• Your coworkers, only if the company turns on People or Org chart: your name, your photo, your job title and your direct supervisor.
• Courts, to recognize, exercise or defend a right in a legal proceeding (LFPDPPP art. 36 section VI).
• Whoever calculates your payroll, if it is another company, to maintain the employment relationship (LFPDPPP art. 36 section VII).

6. How long it is kept

• Check-ins, requests, decisions and clarifications: the whole employment relationship and 18 months after it ends. The law requires that attendance records be kept for at least the last year of the relationship and 1 year after it (LFT art. 804 section III and last paragraph).
• Notification and email data (delivery, reading and opening): while your company uses Presente.
• Push identifier: while you have the app with a session on that device. It stops being used when you sign out, when you change accounts or when Apple or Google says that it is no longer valid.
• Number verification: the result and the time, while you use the app.
• After that, the data is blocked for the statute of limitations period and then it is deleted (LFPDPPP art. 2 section III and art. 24).
• The photo is deleted 30 days after you leave the company (DEC-42.10, DEC-73.48), or when we delete your Presente account. If you remove it before, it is deleted when you remove it, except in the backups, where it is deleted within the period of the Presente contract.
• Check-ins are not deleted before, even if you ask for cancellation, because the law requires that they be kept (LFPDPPP art. 25 section II).
• If you delete your Presente account, your check-ins, requests, decisions and clarifications are not deleted. They are blocked and kept for the periods of this section.

7. Your ARCO rights

• Access. In the app, you see your workday of today, your records and your requests. For other data, write to the privacy contact of your company.
• Rectification. If a check-in is wrong, use "Ask for clarification" in the app. The original check-in does not change. The clarification stays linked and visible. For other data, write to the privacy contact of your company.
• Cancellation and opposition. Write to the privacy contact of your company. They do not apply when the processing is necessary for a legal obligation (LFPDPPP arts. 25 and 26).
• Photo. You can change or remove your photo in My profile at any time. To object to its use, write to the privacy contact of your company.
• Notifications. You can turn off push notifications in the settings of your phone or your browser. So that nobody knows if you opened an email, turn off image loading.
• Revocation of consent for sensitive data: write to the privacy contact of your company.
• Delete your Presente account. Write to [email protected] from the email of your account, with the subject "Borrar mi cuenta" (Delete my account). Density Technology LLC deletes your account. Your work records stay with your company, blocked, for the periods of section 6. The details are in section 8 of Part A of the privacy notice of Density Technology LLC.

Deadlines: answer within a maximum of 20 business days and effect within 15 business days, which can be extended 1 time (LFPDPPP art. 31). It is free (art. 34). If you do not agree with the answer, you can go to the Secretaría Anticorrupción y Buen Gobierno within 15 business days (art. 40).

8. Changes to this notice

Your company shows you each new version in the app, with its date and what changed. To continue to use the app, you accept the new version (DEC-41.6).

9. Laws of Mexico

Your company uses Presente to comply with these laws. Presente is a tool. The obligation belongs to your company.

Texts read on October 27, 2026 at https://www.diputados.gob.mx/LeyesBiblio/.