Privacy notice

1. Controller and contact

Controller: Mythology Creatives. For anything related to your personal data, including exercising your rights, write to privacidad@mythologycreatives.com. This is our official privacy contact.

2. Personal data we process

Depending on your relationship with us, we may process:

• Identification and contact: name, email, phone or WhatsApp, city and country.
• Business data: agency name, current website, plan of interest and the message you send us.
• Scheduling: the day and time you choose for your demo.
• Customers: billing data (legal name, tax ID, tax address), data of the users you create on the platform (name, email, role) and payment data, which is processed by the payment provider; we do not store full card numbers.
• Technical data: IP address (stored only in an encrypted, irreversible form to prevent abuse), browser type and platform access and security logs.

We do not request sensitive personal data. Please do not include it in your messages.

3. Purposes

Purposes required for your relationship with us:

• Handle your demo request, schedule it and send you the meeting invitation.
• Contact you to present the service and answer your questions.
• Create and manage your account, provide the service, give technical support and send operational notices (changes, maintenance, security and renewals).
• Invoice, collect payments and comply with tax and legal obligations.
• Protect the security of the platform, prevent fraud and abuse, and respond to requests from competent authorities.

Additional purposes, not required for the service:

• Send you news, promotions and content about AS Broker and other Mythology Creatives services.
• Ask for your feedback through satisfaction surveys.

If you do not want us to use your data for these additional purposes, tell us anytime at privacidad@mythologycreatives.com or use the unsubscribe link in our emails. Opting out does not affect the service.

4. Data agencies store on the platform

Agencies that use AS Broker store information about their own clients, leads, owners and transactions. For that data:

• Each agency is the controller: it decides what it records, why and for how long. It must have its own privacy notice and, when the Law requires it, the consent of the data subjects.
• Mythology Creatives acts only as a processor: we process that data on behalf of the agency and according to its instructions, solely to provide the service. We do not use it for our own purposes, sell it or contact the agency’s clients.
• Each agency’s information is kept separate from the others.
• If you are a client or lead of an agency that uses the platform and want to exercise your rights, contact that agency. If you write to us, we will forward your request.
• When the service ends, the agency may request an export of its data within 30 calendar days. After that we securely delete it, except what we must keep by law. Backups are overwritten in their normal cycle.

5. Who we share your data with

We use providers that process data on our behalf, under contract and bound by confidentiality and security obligations:

• Hosting and servers where the platform runs.
• Google (Google Calendar and Google Meet) to schedule demos and send invitations.
• Email services to send notifications and notices.
• Payment and electronic invoicing providers, when you subscribe.

Some of these providers may be located outside Mexico. In all cases we require protection levels equivalent to this notice.

We do not sell or rent personal data. We only transfer data to third parties without your consent where the Law allows it, for example at the request of a competent authority, to exercise or defend rights in legal proceedings, or to companies in the same group or to an acquirer in a merger, sale or reorganization, who will be bound by the same terms.

6. Your rights and how to exercise them

You have the right to know what data we hold and how we use it (Access), to have it corrected if inaccurate (Rectification), to have it deleted when no longer needed (Cancellation) and to object to its use for specific purposes (Objection).

Send your request to privacidad@mythologycreatives.com with your name and a way to reply, a copy of your official ID (or proof of representation if acting for someone else), a clear description of the data and the right you want to exercise, and any document that helps locate your data.

We will reply within 20 business days of receiving your complete request and, if applicable, carry it out within the following 15 business days. These periods may be extended once for an equal period when justified. The response is free of charge, except for shipping or copying costs.

We may deny a request in the cases provided by the Law, for example when identity is not proven, when data must be kept by law or when third-party rights would be affected. We will explain the reason.

7. Withdrawing consent or limiting use

You can withdraw your consent or ask us to limit the use or disclosure of your data through the same process at privacidad@mythologycreatives.com. We will add you to our internal exclusion list. If you withdraw consent for a required purpose, we may not be able to keep providing the service. Withdrawal is not retroactive.

8. Cookies and similar technologies

The website does not use advertising cookies or third-party tracking tools. The platform uses strictly necessary cookies to sign in and keep your session secure; it does not work without them.

The website fonts are loaded from Google Fonts, so your browser connects to Google servers, which may log your IP address. You can block or delete cookies in your browser settings.

9. Data retention

• Demo requests that do not become customers: up to 24 months after the last contact; then deleted.
• Customer data: for the duration of the relationship and afterwards for the periods required by tax, commercial and anti-crime laws.
• Technical and security logs: up to 12 months, unless needed to investigate an incident.

10. Security

We apply administrative, technical and physical safeguards to protect data against damage, loss, alteration, destruction and unauthorized use, access or processing, including encrypted connections (HTTPS), irreversibly hashed passwords, encryption of third-party service credentials, separation of each agency’s data, role-based access control and backups.

No system is infallible. If a breach significantly affects your rights, we will inform you without delay, together with the measures we took and what you can do to protect yourself.

Each user is responsible for keeping their password confidential and for notifying us immediately of any suspected unauthorized use of their account.

11. Minors

The website and platform are intended for real estate professionals and businesses. We do not knowingly collect data from minors; if we detect any, we will delete it.

12. Changes to this notice

We may update this notice due to changes in the Law, our services or our practices. We will publish the current version on this page with its update date and, for relevant changes, notify active customers by email.

13. Authority

If you believe your right to personal data protection has been violated, you may go to the competent data protection authority in Mexico. We ask that you write to us first so we can try to resolve it with you.