Security
Data incident response
This is our public process if we suspect unauthorised access, use or disclosure. Timing and notices depend on the facts and on applicable law; we do not promise a fixed 24-hour notification.
Contain and investigate
We restrict access, rotate credentials where appropriate, preserve evidence, identify affected systems and data, assess the risk, and coordinate with specialists or authorities when necessary.
Legal notices
We will notify affected people without unreasonable delay and within the deadlines applicable law requires. For New Jersey residents, we will notify the New Jersey State Police in advance where N.J.S.A. 56:8-163 requires it. We will also notify agencies or credit bureaus where the law and the circumstances require.
What a notice may include
Where permitted and known, the notice will describe the incident, the categories of information, relevant dates, actions taken, reasonable protective steps, and contact channels. The method may be electronic, postal, substitute, or another authorised by law and by the contact details available.
Report something suspicious
Send details to seguridad@tupasolibre.com or hola@tupasolibre.com. Do not send passwords, complete identification numbers or sensitive documents by email. We will investigate the report and, if needed, ask for more information through an appropriate channel.
Protecting yourself
Use a unique password, protect your email, sign out on shared devices, and distrust messages that ask for passwords or promise immigration outcomes. Paso Libre never needs your password by email.
Last updated: August 25, 2026.