Versión en español · Terms and Conditions

Privacy Policy

Last updated: 3 November 2026

I. Who is responsible

TIMI Agente de Seguros y de Fianzas, S.A. de C.V. (“Timi”), located at Aristóteles 3116, Col. Vallarta San Jorge, C.P. 44690, Guadalajara, Jalisco, Mexico, is responsible for your personal information under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations. Timi is an insurance agent: it arranges quotes and purchases with insurers, and the insurer issues the policy.

For any privacy matter write to fit@timi.mx. The person in charge of handling your personal data requests is Francisco Isaac Trapero.

II. What data we collect

Depending on the product you quote or buy (car or motorcycle insurance in Mexico, liability coverage for driving in the United States and Canada, coverage for foreign-plated vehicles entering Mexico, or cargo insurance), we may collect:

• Identification: full name, date of birth, gender, nationality, CURP, RFC, and an image of your official ID or driver’s license when you upload one.
• Contact: address, postal code, email and phone number.
• Vehicle: make, model, year, trim, VIN, license plate, value, and photos or documents you upload (for example, a registration card or an invoice).
• Conversation and emails: the messages you type in the timi.mx chat, the buttons you tap, the files you upload and the emails you send us.
• Browsing and origin: pages visited, IP address, browser and device type, and how you reached us (for example, an ad, a search engine or an AI assistant), through cookies and similar technologies.
• Payment data: this depends on the product. See Section III.

We do not ask for sensitive personal information beyond what is needed to quote or issue your policy. If you volunteer health or other sensitive information, it is used only to handle your request.

III. How your card data is handled

This depends on the product:

• Liability coverage for the United States and Canada, coverage for foreign vehicles in Mexico, and cargo insurance: payment is made with Stripe, Inc. Stripe captures your card data; Timi does not receive or store it.
• Car and motorcycle insurance in Mexico (Quálitas and Chubb): Timi processes the charge directly with the insurer, so you enter your card details on a Timi payment link. Those details travel to Timi’s servers and are stored encrypted. Before submitting, you must accept a charge and encrypted-storage authorization.
  • The security code (CVV) is requested to process the charge and is not part of the reusable card copy.
  • The card number, expiration date, cardholder name and bank are kept encrypted until the card’s expiration date, for your renewal and for clarifications about your policy. Any additional charge requires your authorization.
  • You may ask us at any time to delete this data by writing to fit@timi.mx.
  • Only authorized staff can view this data, and each access is logged.

IV. What we use your data for

Necessary purposes

• Quoting insurance with the insurers that fit your vehicle and trip.
• Issuing, administering and renewing your policy, and emailing you the policy and its documents.
• Processing payment.
• Following up on your quote or purchase through the chat, email or, if you shared your phone number, WhatsApp.
• Handling claims, inquiries and complaints.
• Meeting obligations to Mexico’s National Insurance and Surety Commission (CNSF) and other authorities.
• Answering your questions with the help of artificial intelligence (Section VI).
• Preventing fraud and keeping the service secure.

Additional purposes (you may object)

• Sending you information about products and services that may interest you.
• Satisfaction surveys.
• Reviewing conversations to detect errors and improve the service.
• Statistics and service improvement, including measuring our advertising (Section VIII).

If you do not want your data used for these additional purposes, write to fit@timi.mx. Saying no does not affect your quote or purchase.

V. Who we share your data with

• Insurers you quote or buy from (for example, Chubb Seguros México, Quálitas and HDI Seguros), to quote, issue and administer your policy.
• Stripe, Inc., to process payments for the products that use it.
• Infrastructure and communications providers that process data on Timi’s behalf: email, messaging (Twilio for SMS; Meta’s WhatsApp Business for WhatsApp) and hosting.
• Authorities (CNSF, CONDUSEF, SAT and others) when the law requires it.
• Advertising platforms (Google, Meta and Microsoft), as described in Section VIII.

Some of these providers are in the United States, so your data may be processed outside Mexico.

VI. Artificial intelligence

Timi uses artificial intelligence models from Anthropic, PBC, which process data on Timi’s behalf, to:

• run the timi.mx chat: they read your messages and, when you upload them, the text of your documents and photos to help you get a quote;
• read and help answer the emails you send Timi;
• resolve, with the full context of your conversation, requests to speak with an advisor;
• review conversations to detect errors and improve the service.

Artificial intelligence can make mistakes: the valid prices and coverages are those in the quote and in the policy issued by the insurer. A Timi team member handles the cases the assistant cannot resolve, at timi@timi.mx, Monday to Friday, 9:00 a.m. to 5:00 p.m.

VII. WhatsApp and SMS messages

WhatsApp: by providing your phone number in the chat you agree to receive WhatsApp messages from Timi about your quote, including reminders.

SMS: you receive text messages only if you opt in expressly, through a separate chat question (“Text reminders (optional)”) by tapping “Yes, text me”. Nothing is pre-selected. If you tap “No thanks” or do not answer, you receive no texts and your purchase continues as usual.

Neither consent is a condition of purchase. Frequency varies; typically at most one message per quote. Message and data rates may apply. Reply STOP to opt out at any time, HELP for help, or write to timi@timi.mx. Messaging consent is not shared with third parties or affiliates for their own campaigns. This is separate from sending hashed contact data to advertising measurement platforms as described in Section VIII.

VIII. Cookies, measurement and advertising

timi.mx uses cookies and similar technologies. When you open the site, in addition to those needed for the chat and quotes, the following load:

• Google Tag Manager and Google Ads, to manage tags and measure the results of our ads.
• Meta Pixel (Meta Platforms), to measure the results of our ads on Facebook and Instagram.
• Microsoft Advertising (UET), to measure ads.

Timi’s card-entry pages and the purchase-confirmation page do not load these tools.

In addition, when you get a quote or buy, Timi sends from its servers:

• To Google: the quote, purchase or issuance event and its value; email, phone, first and last name converted to a code that does not display the original information (a hash); city, state, postal code and country code may be sent without hashing. We also send your IP address, browser and ad click identifier.
• To Meta: the quote, purchase or issuance event and its value; hashed email, phone, first and last name, city, state and postal code; IP address, browser and ad click identifier. We also send your gender if known, a hashed internal conversation identifier, and fbp/fbc identifiers when available.
• To Microsoft: only the ad click identifier and the purchase value.

A hash does not make this information anonymous.

We do not send the content of your conversation, your documents or your card data. This is used to measure which ads worked. You can block or delete cookies in your browser settings; this may affect how the site works.

Email open confirmation

Emails we send you may include an invisible one-pixel image that tells us whether the email was opened, when and how many times. We use it only to confirm that you received important documents and, if not, to reach you another way; we do not use it for advertising. To avoid it, set your email app not to download images automatically.

IX. Your privacy rights (known in Mexico as ARCO rights) and how to exercise them

You may access your data, correct it, cancel it or object to its processing, and revoke your consent. Write to fit@timi.mx with your full name, a document proving your identity, and a clear description of the data and the right you wish to exercise. Timi communicates its decision within 20 business days of receiving your request. If granted, the request is implemented within the following 15 business days. Each period may be extended once by an equal period when the circumstances justify it. Revoking consent may prevent us from continuing to provide some services.

X. Users in the United States and Canada

If you live in the United States or Canada and buy insurance for your vehicle in Mexico, Timi handles your data under this Privacy Policy. You may request access, correction or deletion of your information by writing to fit@timi.mx. Timi does not discriminate against you for exercising these rights.

XI. Use of Google data (Google API Services)

Timi uses the internal application “Timi Ads Integration” to manage its own Google Ads accounts. It accesses only data from Timi’s own accounts (campaigns, keywords, search terms, targeting and metrics) for internal reports and to manage its campaigns. Use of these APIs is subject to the Google API Services User Data Policy, including applicable Limited Use requirements. Access can be revoked at myaccount.google.com/permissions.

XII. Changes to this Privacy Policy

Timi may update this Privacy Policy. We will publish the current version, with its update date, at timi.mx/privacy.

XIII. Authority

If you believe your right to personal information protection has been violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the authority identified in the Federal Law on the Protection of Personal Data Held by Private Parties.

XIV. Consent

By providing your data through timi.mx, the quote chat or any other channel enabled by Timi, you consent to its processing under this Privacy Policy.