All commercial, personal, and financial information that crosses the Cord platform is subject to strict retention policies, designed to protect privacy (ARCO) and comply with tax requirements (SAT).

Legal Retention Periods

• Tax Documents (XML/PDF): By regulation of the SHCP and the CFF in Mexico, every digital tax receipt issued through Cord is stored immutably for 5 years starting from the fiscal year of its issuance.
• Access Audit Logs: Session records, IP addresses, and destructive actions (Audit Trails) of your workforce are kept in hot access for 1 year for forensic investigations.
• Cardholder Bank Data: Cord NEVER stores CVVs or the complete magnetic stripe track. Tokenized Primary Account Numbers (PAN) can be deleted upon explicit request from the end user exercising their ARCO rights by sending an email to privacidad@flouvia.com.

If you decide to delete your corporate Cord account, we destroy the non-fiscal transactional databases of your customers within 30 calendar days.