Privacy Policy
Last updated: February 4, 2026
1. Data controller
Ecadros S.A.S., Tax ID (RUC) 1793218460001, with registered offices at Av. Republica de El Salvador N36-140 and Naciones Unidas, Mansion Blanca Building, 7th Floor, Quito 170135, Ecuador (hereinafter, "Ecadros"), is the data controller for personal data collected through ecadros.com, in compliance with the Organic Law on Personal Data Protection of Ecuador (LOPDP) published in Official Register Supplement 459 of May 26, 2021.
2. Data we collect
We collect: (i) identification data: full name, ID or passport number, date of birth; (ii) contact data: email address, phone number, postal address; (iii) financial data: banking information required to settle transactions; (iv) technical data: IP address, device type, navigation logs.
3. Purpose of processing
We process your data to: provide the crowdlending platform service, fulfill KYC/AML obligations toward UAFE, manage payments and tax withholdings before the SRI, send commercial communications when you have consented, and comply with requirements from competent Ecuadorian authorities.
4. Legal basis
Processing is based on the performance of the contract with you, compliance with legal obligations applicable to financial entities in Ecuador, our legitimate interest in preventing fraud, and, where applicable, your explicit consent.
5. Your rights
You have the right to access, rectification, update, deletion, opposition, cancellation and portability of your personal data, as well as the right to withdraw your consent. To exercise these rights write to privacy@ecadros.com with a copy of your ID or passport. Your request will be addressed within fifteen (15) days.
6. Data retention
We retain your data during the contractual relationship and, once terminated, for ten (10) years in accordance with anti-money-laundering obligations set by UAFE.
7. International transfers
Some technology providers (hosting, analytics, email) may process data outside Ecuador. In every case we require data processing agreements ensuring an adequate level of protection equivalent to Ecuadorian standards.
8. Supervisory authority
If you believe your rights have not been properly addressed, you may file a complaint with the Superintendency of Personal Data Protection of Ecuador, the control authority under the LOPDP.