Legal information

Terms, conditions, and privacy

Version 2026-07-30 Effective since 30-07-2026

Comprehensive version of the platform and app Terms, Conditions and Privacy Notice.

COOKIE USE

AdoptaPatitas.com.mx uses only cookies that are strictly necessary for its operation.

SHORT-FORM PRIVACY NOTICE

MenthalArts SAS de CV, RFC MEN260413TEA, located at Sur 20 #455, B001, Agrícola Oriental, Iztacalco, Mexico City, Postal Code 08500, is the controller of personal data used by Adopta Patitas and Patitas MenthalArts.

We process the data needed to manage accounts; verify age and identity; operate listings, evaluations, requests, contracts, follow-up, directories, support, security, notifications, and moderation. The evaluation includes financial or patrimonial ranges and potentially sensitive general household information, requires express consent, and its automated result may limit submission of requests; review may be requested through Contact. We do not sell personal data or use it for behavioral advertising.

Directory data are shown only when the holder enables that visibility. Bank information configured by a protector to receive support may be published only on the website; store-distributed apps do not display it in public results.

You may correct or remove data from your profile, manage permissions on your device, exercise rights through Contact, and request account deletion from the profile or Delete account page.

See data categories, purposes, recipients, transfers, retention periods, and ways to exercise your rights in the full privacy notice.

DISCLAIMER

Each user is responsible for the lawfulness, accuracy, currency, and authorization of published content. Adopta Patitas facilitates connections and applies security and moderation measures, but is not a party to an adoption agreement and does not replace personal, professional, or government verification; this scope does not limit liabilities that cannot legally be excluded.

Personally verify identity, pet condition, address, documents, and all relevant information before making a decision. Report abuse, crime, danger, or emergencies directly to the competent authority or service.

ACCEPTANCE AND CONSENT

Use of this website, app, and the Adopta Patitas platform represents full and express acceptance of the terms and conditions.

Data processing is governed by the full privacy notice. When the law requires express consent, including for financial or patrimonial data and potentially sensitive questionnaire information, the platform obtains it through an unequivocal electronic action; general use does not replace that authorization.

Full Privacy Notice

Current version. Last updated: July 26, 2026.

1. Identity and address of the controller

MenthalArts SAS de CV, RFC MEN260413TEA, located at Sur 20 #455, B001, Agrícola Oriental, Iztacalco, Mexico City, Postal Code 08500, is the controller of personal data processed through AdoptaPatitas.com.mx, the Adopta Patitas app, Patitas MenthalArts, and related services. The Contact form available on the website and app is the channel of the area responsible for personal data for questions, requests, and exercise of rights.

2. Personal data processed

Depending on the function used, we may process email address, real name, date of birth, country, address, phone numbers, social profiles, credentials, and access data; listings, general pet location, photographs, files, and PDFs; requests, evaluations, contracts, data disclosed to the counterpart, and follow-up; communications, reports, responses, appeals, and moderation notes.

The Responsible Adoption Questionnaire may process marital status, occupation, housing characteristics, household composition and age groups, approximate income and committed-expense ranges, and general information—without names or other household-member identifiers—about allergies, disability, or a health condition that limits coexistence with a pet.

Veterinary accounts may involve CURP, professional license, name, institution, year, and verification documents or results. Protector profiles may involve bank, account holder, account number, and CLABE when the holder chooses to configure them. We also process IP address, date and time, platform, app version, language, installation identifier, push token, access, security, and notification-delivery records. We do not request cryptocurrency addresses from users.

3. Sensitive, financial, and government-identifier data

The questionnaire may process financial or patrimonial ranges concerning the respondent and potentially sensitive general information about allergies, disability, or health conditions of household members. Before it can be answered, the platform requests express consent through a checkbox and records the date and consent version. This information is used only to assess context and care capacity and, when the user sends a request, to share with the protector the result and detail needed to evaluate it.

We do not request names or other household-member identifiers in connection with those conditions. The respondent must be authorized to provide the general information and must not add third-party sensitive data or identifiers in free-text fields or files. We do not request racial or ethnic origin, genetic information, religious beliefs, political opinions, or sexual preference.

CURP, professional-license information, and identity documents are used only for verification and authorized processes. Bank information is financial or patrimonial data: entry is optional, and the holder expresses consent through deliberate entry and saving of the form and, for publication, enabling the directory. It may be removed or hidden at any time. Apps distributed through Apple or Google let the holder manage their own profile but do not publicly display bank numbers, CLABE, CURP, or a professional-license number.

4. Primary purposes

Data are used to create and authenticate accounts; verify email, age, identity, and professional records; complete profiles; publish and search for pets; calculate and display contextual evaluations concerning housing, coexistence, resources, and care capacity; share the evaluation and necessary detail with the protector when the user chooses to send a request; send, review, and resolve requests; generate, share, and retain contracts; schedule follow-up and reminders; operate directories under the selected visibility; answer messages; deliver email and notifications; prevent fraud, abuse, impersonation, and restriction evasion; block profiles; receive, investigate, and resolve reports; securely detect matches with restricted cases; protect infrastructure; meet legal obligations; and generate anonymous statistics.

5. Secondary purposes and advertising

We currently do not use personal data for behavioral advertising, commercial profiling, sale of databases, or third-party promotional campaigns. Historical results and statistical counts are retained in aggregated, anonymous form. Technical records used to reconcile status changes are disassociated through an HMAC fingerprint and contain no email address, contact information, direct relationship, or foreign key to an account. If a secondary purpose is added later, advance notice and the applicable consent or objection mechanism will be provided.

6. Visibility among users and directories

Listings show the information needed to understand the pet and protector without disclosing a private address by default. When a person sends or approves a request, each party may receive the data, evaluation, and documents needed to assess, formalize, and follow up on the adoption. Adoption archives retain information already received by the counterpart for the period stated in this notice.

Directories are optional. By enabling one, the holder authorizes publication of the fields configured for that purpose and may withdraw that authorization from the profile. Protector bank information may be shown only on the website and is not included in public app responses. A holder must have authorization before providing data about an organization, clinic, collaborator, or other person.

7. Processors, providers, and SDKs

Operation may involve infrastructure, hosting, database, storage, and email providers; Expo Push Service and, depending on the device, Google Firebase Cloud Messaging or Apple Push Notification service; and Google reCAPTCHA on web forms where enabled. They receive only the data necessary for their role and must process it under confidentiality, security, and protection duties equivalent to those applicable to the controller.

Links to maps, social networks, the National Registry of Professionals, PayPal, Mercado Pago, or other external sites transmit only the navigation or transaction initiated by the user and are governed by the third party's notices. Store-distributed apps contain no advertising or behavioral analytics and offer no buttons for external monetary contributions. Actual SDKs and flows are also disclosed in Apple and Google privacy forms.

7.1 Voluntary in-app purchases

If a user chooses to provide in-app support, Google Play or the Apple App Store, depending on the device, process the charge and handle payment information, store account, price, taxes, and transaction status under their own notices. Adopta Patitas, Patitas MenthalArts, and MenthalArts SAS de CV do not receive or store card numbers, payment accounts, passwords, CVV codes, or any other payment method.

To validate and finish a consumable purchase, the app sends the protected server only the product identifier, platform, and transaction technical reference; on Android it may include the purchase token required by Google Play. The server queries the store and retains an encrypted reference and irreversible fingerprint to prevent duplicates, reconcile transactions, protect security, and meet applicable obligations, without linking it by default to an Adopta Patitas profile. References are limited to the period necessary for those purposes, including applicable tax or accounting obligations, and are then deleted or anonymized. They are not used for behavioral advertising or adoption decisions.

8. Cookies, local storage, and permissions

The website uses only cookies strictly necessary for sessions, security, preferences, and language. The app uses secure or local storage for the session, language, settings, and installation identifier. The app opens the system photo and file pickers only after a user action and does not request broad photo-library or camera access. Notification permission can be withdrawn in the operating system, although the related function will stop working. reCAPTCHA may process technical data where enabled to prevent abuse.

9. Processing instructions, transfers, and recipients

We do not sell data. Providers processing information on the controller's behalf act as necessary processors or service providers. Processing may occur in Mexico or internationally due to the infrastructure, email, and push services used.

Data are disclosed to the counterpart when a user starts or accepts an adoption process; to the public when the user voluntarily enables a directory; to recipients selected when the user shares a file or opens a link; and to authorities where there is an order, obligation, or legal basis. Accepting a request or enabling a directory is the corresponding instruction for those optional disclosures. Future voluntary publication may be withdrawn, or limitations requested, through the profile or Contact; some essential functions cannot operate without sending the strictly necessary data to the counterpart.

10. Security and incidents

We use encrypted transport in production, role-based access control, password hashing, protection against unauthorized requests, encryption of private fields, and technical security logs. HMAC comparators used for matching do not directly reveal the original value. No system is infallible; if a breach materially affects patrimonial or moral rights, affected people will be notified as required by law so they can take protective action.

11. Retention and deletion

Active-account data are kept while needed to provide requested functions and enforce the rules. A listing marked Adopted becomes Finalized after three months without adoption, editing, or follow-up activity; that lifecycle change does not itself delete all data.

When a standard account is deleted, data are deleted immediately if no adoption must be retained and no restriction exists. If there was an approved request or Adopted listing, data already delivered to the counterpart may be kept for six months and then removed or anonymized. A veterinary account is deleted immediately. Contact data and the IP hash of a person reporting a practitioner are deleted after 30 days. Moderation, return, match, evidence, and remaining practitioner-report records are deleted no later than 72 months after the latest recorded incident, except for a strictly necessary legal hold tied to an active proceeding.

Email-verification links expire after 20 minutes and password-reset links after 60 minutes. Mobile sessions expire after 90 days; completed push-delivery records are purged after 90 days and inactive tokens after 180 days. Aggregated statistical counts may be retained historically; the supporting technical records contain no email address, contact information, or direct relationship to an account. Contact messages are kept only for the time reasonably needed to resolve them and meet applicable obligations.

12. Account deletion

An account can be deleted from the profile and from the Delete account page available through the website footer without signing in; the app also provides the corresponding access. The request requires account credentials. Applicable effects and periods are shown before confirmation. Deletion does not immediately erase data subject to a temporary adoption archive, legal obligation, or current moderation case, but those data are limited to their purpose and stated period.

13. ARCO rights, withdrawal, and limitation

You may request Access, Rectification, Cancellation, or Objection; withdraw consent where applicable; limit use or disclosure; request processing information; and request an explanation, objection, or human review of an automated result that significantly affects your interests through the Contact form. State your name, related account or email, response method, the right you wish to exercise, a clear description of the data, and, where needed, documents proving identity or representation. The procedure is free except for justified reproduction or delivery costs.

We will respond within no more than 20 business days after receiving a complete request and, if granted, make it effective within the following 15 business days. Each period may be extended once for a justified reason. Cancellation may be subject to a blocking period where required by law, a contractual relationship, a claim, or defense of rights.

14. Automated evaluation and review

Answers to the Responsible Adoption Questionnaire are processed through automated rules focused on animal welfare. An answer incompatible with an essential condition or a Not suitable result may stop the questionnaire or prevent new requests while that result remains in force. The evaluation is not a diagnosis and does not decide an adoption by itself; the protector retains the decision and must verify information personally.

Through Contact, you may request access to or an explanation of the result, data rectification, objection where applicable, or human review. If the declared circumstances have genuinely changed, you may also request a questionnaire reset and explain the reasons and changes. Review may require identity or information verification and does not guarantee that the result will change.

15. Minors

The platform is not directed to anyone under 18 and does not allow minors to create accounts, publish pets, or send adoption requests. Processes must be managed by an adult, whose age may be verified by the counterpart using official identification. If we detect improperly obtained personal data from a minor, processing will be restricted and removal handled through Contact, without prejudice to measures needed for protection or legal compliance.

16. Changes and available version

The current notice is published on the Terms, conditions, and privacy screen or page. Material changes may be communicated within the website or app and, where they alter purposes or require renewed consent, the appropriate action will be requested before the change applies. Use the Contact form for questions or matters not covered by a specific flow.

Terms and Conditions

Current version for the website and app. Last updated: July 26, 2026.

1. Controller, scope, and acceptance

These terms govern access to and use of the AdoptaPatitas.com.mx website, the Adopta Patitas app, and related services. The platform is operated by MenthalArts SAS de CV, RFC MEN260413TEA, located at Sur 20 #455, B001, Agrícola Oriental, Iztacalco, Mexico City, Postal Code 08500, which is responsible for defining its purposes, operating rules, and data-protection measures. Adopta Patitas and Patitas MenthalArts are projects and service names connected with that operation. Use of any part of the platform and creation of an account constitute acknowledgment and acceptance of these terms and the privacy notice. Anyone who disagrees must refrain from using the platform. The Contact form is the general channel for questions, rights requests, and matters that do not have a specific follow-up flow in the system.

2. Accounts, identity, and age requirement

A standard account can publish pets, complete the Responsible Adoption Questionnaire, send or receive requests, and participate in follow-up. A veterinary account can manage a professional profile and authorized directory information. Accounts are personal and non-transferable; holders must provide truthful information, keep it current, protect their credentials, and use Contact to report unauthorized access. Official identification or professional documents may be requested when needed to verify a process.

A person must be over 18 years old to create an account, publish pets, or send adoption requests. The platform is not directed to minors and does not authorize them to create accounts or submit personal data. If a minor’s data is detected, it may be restricted or deleted, and a removal request will be handled through Contact, without prejudice to any legally required protective measure.

3. Purpose and permanent free access

Adopta Patitas facilitates connections among protectors, rescuers, and prospective adopters, as well as access to directories and follow-up tools, without replacing the participants’ own in-person verification. Account creation and ordinary use of publication, search, evaluation, request, contract, and follow-up functions are and will remain free. No support or contribution unlocks features, content, priority, better results, preferential treatment, or special recognition. The platform does not sell animals, does not own listed pets, and is not a party to adoption agreements between users.

4. Data processed and purposes

Depending on the functions used, the platform may process email address, real name, date of birth, country, address, phone numbers, social profiles, access data, IP address, technical device data, installation identifier, and notification token. It may also store requests, contracts, follow-up information, photographs, PDF documents, files, and communications associated with adoptions or incidents. The questionnaire may include marital status, occupation, housing characteristics, household composition and ages, approximate income and committed-expense ranges, and general information—without names or identifiers—about allergies, disability, or health conditions that limit coexistence with a pet. Veterinary accounts and records may include CURP, professional license, and verification information; protector profiles may include bank, account holder, account number, and CLABE when the user chooses to configure them.

These data are used to authenticate accounts, verify age and identity, display authorized information, connect adoption participants, create documents, provide follow-up, send requested email or notifications, prevent abuse, handle reports, detect matches with restricted profiles, maintain security, and produce aggregated statistical counts backed by disassociated technical records. Personal data are not sold or used for behavioral advertising.

5. Responsible adoption questionnaire and evaluation

The Responsible Adoption Questionnaire produces an automated contextual evaluation based on answers declared by the user and rules focused on animal welfare. It is not a psychological diagnosis, certification, guarantee of suitability, or final adoption decision; the other party must personally verify identity, environment, and offered conditions. Some answers that conflict with essential conditions may stop the questionnaire or prevent requests while the evaluation retains that result.

Before answering, the user must provide express electronic consent to process their financial or patrimonial ranges and the potentially sensitive general household information described in the Privacy Notice. The user must not provide names or other information that identifies household members and confirms being authorized to disclose that general information. Answers and the summary are stored encrypted; when the user sends a request, they authorize the protector to receive the result and detail needed to evaluate it.

Through Contact, the holder may request access to or an explanation of the result, rectification, objection where applicable, or human review. If the declared circumstances have genuinely changed, they may also request an evaluation reset and explain the reasons and changes behind the request. Review does not guarantee a different result and may require additional information.

6. Listings, photographs, and documents

The person creating a listing is responsible for the pet’s identity, status, location, health, behavior, history, and other information, and for keeping it current. Users may upload only photographs, text, PDF files, and other materials they own or are sufficiently authorized to use, without exposing third-party personal data or infringing copyright, privacy, or image rights. Users retain rights in their content and grant the platform a non-exclusive technical authorization limited to storing, reformatting, displaying, and transmitting it to operate the listing and adoption process.

Names, logos, designs, software, and materials belonging to Adopta Patitas, Patitas MenthalArts, and MenthalArts are not transferred to the user. Listings may be hidden, moderated, archived, or removed when they breach these terms, affect safety, or are subject to a legal requirement.

7. Requests, contract, adoption, and follow-up

By sending or approving a request, each party agrees that the other may receive the profile and evaluation information needed to assess and document the process. The protector retains the decision regarding the pet, and both parties must verify identity, address, care conditions, and any relevant document. The contract template is a support tool and does not replace legal advice; if the parties use their own template, they are responsible for its content, signature, retention, and validity.

A listing marked Adopted may include a contract, counterpart data, visits, comments, reminders, email, and follow-up notifications. If there is no adoption, editing, or follow-up activity for three months, the listing automatically becomes Finalized and operational content is reduced under the archive rules. A return may create an internal case and restrict new adoption requests until Audit approves the profile again, without by itself preventing browsing or creation of listings.

8. Protector and veterinary-service directories

Directory information is published only when the holder expressly enables that visibility and can be withdrawn from the profile. Anyone publishing information about an organization, clinic, collaborator, or other person must have authorization. The web protector directory may display contact details, availability, and, if deliberately configured and saved by the holder with knowledge of publication, bank information for receiving support; the platform only presents that information and does not participate in the transfer. Store-distributed apps do not publicly display bank information, CLABE, CURP, or a professional-license number.

For veterinary registration, CURP is encrypted for internal review and is not published. The professional license and declared identity may be compared with official sources; verification confirms only the match that was reviewed and does not guarantee the quality, validity, conduct, or outcome of professional services.

9. Prohibited conduct and content

The following are prohibited:
• selling animals or disguising a sale as an adoption;
• fraud, deceptive payment requests, or impersonation of people, organizations, or professionals;
• promoting, committing, concealing, or normalizing abuse, abandonment, exploitation, or conduct contrary to animal welfare;
• publishing illegal, false, discriminatory, threatening, harassing, sexual, violent, or crime-facilitating content;
• publishing third-party data, images, documents, or intellectual property without authorization;
• uploading malicious code, compromising security, automating abuse, manipulating statistics, or using the platform for spam;
• evading blocks, restrictions, verification, or moderation decisions through new accounts or altered data.

Adopta Patitas may limit content or accounts and preserve evidence when reasonably necessary to protect users, animals, the platform, or compliance with law.

10. Blocks between profiles

A block is bilateral: the profiles involved stop seeing each other’s listings and requests and cannot communicate within the platform. Reporting an applicant or adopter also creates that block between the parties. Rejecting a request limits only that process and is not the same as blocking the entire profile. A block has no automatic expiration and remains while the record exists or until an involved account is deleted. When an adoption already occurred, the archive may retain information already received by both parties for the applicable period, even if a block or account deletion follows, solely for follow-up and auditing.

11. Moderation of listings, profiles, and returns

A listing report starts as Pending. When Audit takes the case, it may become In process: the listing is marked as moderated, removed from public results, cannot be deleted, and its holder cannot create new listings while any listing remains under moderation. The holder receives instructions and, after saving corrections, submits it for Review. Audit may return it to In process with new instructions or Approve it and restore its prior status. Later reports about the same listing update the case and preserve its history instead of creating isolated cases.

A profile report may move from Pending to In process, In review, Restricted, or Approved. In process, In review, and Restricted limit access by the reported profile to other users’ listings and adoption actions; final restriction removes requests that have not become adoptions. Secure matches with data from a restricted profile may create a case labeled Duplicate. Returned-pet cases remain Restricted until Audit approves them and only prevent new adoption requests unless another moderation also applies. Moderation remains operational until an Audit decision or the applicable maximum retention limit. Approval removes the corresponding restriction; history is retained only for the period stated in these terms.

12. Incident follow-up, responses, and appeals

Reports are reviewed internally and may include Audit notes, status history, communications, and evidence. For a listing report, the protector responds by correcting the listing; for a profile report, the reported person may respond through the pinned notification and submit the case for review. Each new instruction enables the corresponding response cycle, while earlier responses remain read-only. Case notifications and links provide the available follow-up.

A person reporting a listing may optionally provide an email address solely to receive case updates; without it, no individual response is promised. Review or appeal requests should be submitted through the incident flow when one exists. The Contact form is available for further clarification, inability to use that flow, or any matter not covered in the case. A review does not require a decision to change and may conclude through correction, approval, restriction, lack of evidence, or referral to authorities.

13. Reports of practitioners without a license

The form concerning possible practitioners without a professional license creates an internal-only case; there is no public list. If the information matches a verified veterinary record, the user is asked to use Contact to avoid treating it as an automatic report. The reporter’s name, email address, and phone number are optional, encrypted, visible only to Audit, and used to collaborate, verify information or evidence, and offer support for a possible complaint before the competent authority. Those contact details and the associated technical identifier are fully deleted 30 days after the report is created. The description, evidence, and conclusions are retained for no more than 72 months after the latest recorded incident, except for a strictly necessary legal hold tied to an active proceeding.

14. Voluntary support and contributions

Support and contributions are optional, entirely voluntary, and may be of any amount. They are not required to use the platform, are not payment for an adoption, create no ownership interest in a pet, and do not unlock features, content, priority, better results, preferential service, or recognition. Equivalence examples are references based on average costs: they are not direct purchases, reservations, or obligations to allocate that exact amount to the illustrated item.

Resources are allocated according to current needs for animal-help and welfare activities, which may include food, veterinary care, spaying or neutering, vaccination, deworming, medicine, shelter, rescue, transport, cleaning, emergencies, information campaigns, assistance to protectors, and necessary platform operation, development, security, and hosting costs. MenthalArts SAS de CV is the receiving legal entity and channels resources according to those needs.

15. Payment processing, recurrence, and taxes

Neither Adopta Patitas, Patitas MenthalArts, MenthalArts SAS de CV, nor their representatives process electronic transactions or store card numbers, payment accounts, passwords, CVV codes, or other payment methods. On the website, buttons may lead to external services such as PayPal or Mercado Pago, while transfers to MenthalArts SAS de CV bank accounts or cryptocurrency addresses are completed directly through the network or institution selected by the user. Authorization, availability, exchange rates, reversals, commissions, charges, or withholdings applied to a transaction are external to the platform and are the exclusive responsibility of the corresponding payment provider. Store-distributed apps offer no buttons or details for external monetary contributions.

Monthly support recurs while authorization remains active with the external service and must be managed or canceled through that same service. No support produces a tax-deductible donation receipt because the recipient is not an authorized donee. All support received by MenthalArts SAS de CV generates the applicable invoice, including an invoice to the general public when appropriate, with the applicable description and the breakdown, filing, and payment of VAT, income tax, and any other corresponding tax obligations.

15.1 In-app support and store purchases

Apps distributed by Apple or Google may offer optional consumable products with preset amounts to support the app’s maintenance and development. They are purchased exclusively through Apple In-App Purchase or Google Play Billing; they are voluntary, may be made more than once, and do not unlock features, content, priority, better results, preferential service, or recognition. They are not payment for an adoption and create no right in a pet.

The applicable store determines local currency, available price, authorization, commission, taxes, reversals, refunds, and other purchase conditions under its own rules. The apps do not display links or instructions for external payments. To verify and finish a purchase, only the product identifier, platform, and technical reference required by the store are transmitted to the server; references are protected with encryption and irreversible fingerprints to prevent duplicates and meet reconciliation, security, and legal or accounting duties. No in-app support or purchase produces a tax-deductible charitable-donation receipt. Tax obligations applicable to the recipient of funds are handled as appropriate.

16. External providers, SDKs, and notifications

Providers may receive only the information needed for their operational role: infrastructure and hosting; database and storage; the configured email service; Expo Push Service and, depending on the device, Google Firebase Cloud Messaging or Apple Push Notification service for notifications; and Google reCAPTCHA on web forms where it is enabled. External push notifications display only a generic title and message; their technical payload contains the minimum internal identifier and route needed to open the authenticated screen, where the app retrieves the details. To deliver them, the service receives the device token, platform, language, and installation identifier. Links to maps, social networks, SEP, PayPal, or Mercado Pago transfer only the navigation or transaction information generated when the user chooses to open the external service and are governed by that service’s policies.

Libraries or SDKs operating solely within the app do not become data recipients for that reason alone. SDKs that do receive information and the technical disclosures required by Apple or Google will remain identified in each store’s manifests and forms, as well as in this public disclosure when material. The app currently includes no advertising or behavioral-analytics integration; any future addition will require updated disclosures and consent where applicable.

17. Security, encryption, and abuse prevention

The platform uses encrypted transport in production, access controls, password hashing, protection against unauthorized requests, and encryption for sensitive fields such as addresses, phone numbers, social profiles, CURP, bank information, communications, and case data. To detect matches with restricted accounts, derived HMAC values or equivalent mechanisms may be retained so information can be compared without recovering the original data from that value. Access and notification tokens are protected or encrypted according to their purpose; IP addresses and technical identifiers are used for security, rate limits, fraud prevention, and diagnostics.

No system can guarantee absolute security. Users must protect their devices and credentials, avoid sharing documents outside the necessary flow, and use Contact to report any suspicious access, loss, or incident.

18. Retention periods and record lifecycle

Data from an active account are kept while needed to provide requested functions and enforce these rules. In addition:
• an Adopted listing becomes Finalized after three months without adoption, editing, or follow-up activity;
• after deletion of a standard account, information already provided to the counterpart through an approved adoption may be retained for six months and is then anonymized or removed from the archive;
• a veterinary account and profile are deleted immediately when the holder confirms deletion;
• contact details and the IP hash of a person reporting a possible unlicensed practitioner are deleted after 30 days;
• email-verification links expire after 20 minutes and password-reset links after 60 minutes;
• mobile sessions expire after 90 days; completed technical push-delivery records are purged after 90 days and inactive tokens after 180 days;
• aggregated statistical counts and their disassociated technical records, with no email address, contact information, or direct account relationship, may be retained historically.

Moderation, return, match, note, evidence, and remaining practitioner-report records are kept during investigation and, whether resolved or not, are deleted no later than 72 months after the latest recorded incident. They may remain blocked for longer only where an active legal proceeding requires it. Contact messages and other evidence are retained only for the time reasonably needed for their purpose and applicable obligations.

19. Account deletion and effects

An account may be deleted from the profile or from the Delete account page, which is available without signing in through the footer link. The request requires the account credentials. For a standard account with no adoption record that must be retained and no active moderation, directly identifying data, listings, and requests are deleted immediately; a disassociated technical record and anonymous counts may remain for integrity and statistics. The six-month period applies when there was an adoption. Deleting a veterinary account immediately removes the account, profile, contact details, and access credentials.

Deleting an account cannot be used to evade active moderation. If a listing or profile was under moderation, the case is preserved as a profile case, the email address may remain blocked, and irreversible identity comparators remain while the restriction is active, without exceeding 72 months after the latest recorded incident unless legally required. For a returned-pet restriction, the email address may be registered again, but a match preserves the request restriction and links the new account to the case during that period. Only information required by law, needed for a claim, or essential to security may otherwise be retained, with notice to the holder when appropriate.

20. Consent, recipients, and user rights

A holder can review and correct data in the profile, withdraw voluntary directory publication, and request access, rectification, cancellation, or objection; limit use; revoke consent when applicable; or request processing information through the Contact form. To protect the account, identity verification and details about the data or requested action may be required. Cancellation remains subject to the retention periods and exceptions described in these terms or required by law.

Data are not sold or commercially transferred. They are disclosed only to the counterpart when the function requires it and the user initiates or accepts it, to providers needed to operate the service, to recipients selected through directory publication, or to authorities under a legal order or basis. Users may cancel the system pickers without sharing photos or files and withdraw notification permission through the operating system, although related functions will cease to be available.

21. Verification, third parties, and limits of liability

User content, the identity and conduct of protectors or adopters, a pet’s condition, veterinary services, and performance of agreements belong to the participating parties. The platform does not guarantee that a listing, profile, professional license, evaluation, contract, address, bank detail, or statement is sufficient, current, or authentic beyond the checks expressly described. Each person must carry out in-person verification, guard against fraud, and consult professionals or authorities when appropriate.

Adopta Patitas is not an emergency service and does not replace authorities, prosecutors, veterinary services, attorneys, or financial institutions. Animal abuse, immediate danger, crime, or emergencies must be reported directly to the competent authority or service. The platform is not liable for user conduct, adoption decisions, external services, reasonable interruptions, or transactions outside its systems, without limiting liability that cannot legally be excluded.

22. Changes, interpretation, and contact

These terms are interpreted under applicable Mexican law, without limiting non-waivable data-protection, consumer, or user rights. The current version will be published on this screen or page. Material changes may be communicated within the platform and may require renewed acceptance when necessary. If any provision is invalid, the remainder continues in effect. Questions, rights requests, evaluation-reset requests, incident problems, and any matter not resolved by a specific flow must be submitted through the Contact form.