PRIVACY POLICY — SPAACE.MX
Last updated: June 6, 2026
1. DATA CONTROLLER
This document constitutes the Comprehensive Privacy Policy for the website spaace.mx (“Spaace,” “we,” or “the Platform”), in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”) and its Regulations.
- Company Name: Spaace.mx
- Address: Mexico City, Mexico
- Website: https://spaace.mx
- Privacy Email: privacidad@spaace.mx
2. DATA WE COLLECT
2.1 Data you provide to us
When you create an account, post a property or service, manage your subscription, or communicate with us:
- Identification: first name, last name, username.
- Contact: email, phone.
- Billing: address, city, state, zip code, country.
- Professional or Commercial Profile: company name, activity description, logo or photo.
- Published Properties: location, description, photographs, price.
- Published Services: service description, coverage area, portfolio.
- Payment Data: only the last four digits of the payment instrument and the card brand. Full card numbers and security codes are captured and processed directly by Stripe; Spaace does not store them.
2.2 Automatically collected data
When you browse the Platform, we collect technical data through cookies and similar technologies:
- IP address, browser type, and operating system.
- Pages visited, date and time, duration of stay.
- Referral URL.
- Approximate geolocation data derived from your IP.
- Interactions with content (clicks, searches, filters, favorites).
2.3 Sensitive data
Spaace does not collect sensitive personal data (racial origin, health, religious beliefs, political opinions, sexual life, etc.).
3. PURPOSES OF PROCESSING
3.1 Primary purposes (necessary for the service)
- Create and manage your user account.
- Allow you to post properties or vendor profiles on the Platform.
- Administer your paid subscription, renewals, and cancellations.
- Process payments through Stripe.
- Issue tax receipts associated with your subscription.
- Send you operational communications (confirmations, account alerts, Platform changes).
- Provide technical support and customer service.
- Comply with applicable legal and tax obligations in Mexico.
3.2 Secondary purposes (require your consent)
- Send you marketing communications about new features, industry news, and promotions.
- Aggregated statistical analysis to improve the Platform.
- Satisfaction surveys.
3.3 How to object to secondary purposes
You can object at any time by:
- Disabling consent checkboxes upon registration.
- From the Communication Preferences section in your account.
- Via email to privacidad@spaace.mx.
Refusal will not affect access to the Platform’s main services.
4. DATA TRANSFER TO THIRD PARTIES
To operate the Platform, Spaace shares personal data with the following providers:
Third Party | Country | Purpose |
Stripe, Inc. | United States | Secure payment processing and subscription management |
Google LLC (Maps, Analytics, Tag Manager) | United States | Map display and Platform usage analysis |
Brevo SAS | France (EU) | Sending transactional and management emails |
Kinsta LLC | United States | Technical hosting of the Platform |
Each of these providers has its own privacy policies and applies security measures equivalent to those required by Mexican law.
Spaace does not sell or commercialize your personal data to third parties for purposes other than those described in this Policy.
5. INTERNATIONAL TRANSFERS
Some of the indicated providers are located outside of Mexico. By accepting this Policy, you acknowledge that your personal data may be transferred to, or accessed from:
- United States (Stripe, Google, Kinsta)
- European Union (Brevo)
These providers maintain levels of protection equivalent to those provided by Mexican law.
6. ARCO RIGHTS
In accordance with the Law, you have the right to:
- Access: know what data we have about you and how we process it.
- Rectification: correct inaccurate or incomplete data.
- Cancellation: request the deletion of your data when it is no longer necessary.
- Objection: object to processing for specific purposes.
6.1 How to exercise your rights
Send your request to privacidad@spaace.mx with:
- Full name and contact information.
- Copy of valid official identification.
- Clear description of the right you wish to exercise.
- If applicable, documentation supporting your request.
Spaace will respond to your request within the deadlines established by the Law.
If you believe your request was not handled appropriately, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) — www.inai.org.mx.
7. REVOCATION OF CONSENT
You may revoke your consent at any time by following the same procedure described in section 6.1. Revocation may not be applicable when there is a current legal obligation or when it affects the provision of essential services you have contracted.
8. COOKIES AND TRACKING TECHNOLOGIES
Spaace uses the following categories of cookies:
- Strictly necessary: session maintenance, shopping cart, security. They do not require consent.
- Functional: remembering search preferences and favorites.
- Analytical: Google Analytics, to understand how the Platform is used.
- Third-party: associated with the operation of Google Maps.
Upon entering the Platform, you will be presented with a consent management mechanism that will allow you to accept, reject, or customize non-essential cookies. You can modify your choice from the site’s footer.
You can also disable cookies from your browser settings (Chrome, Firefox, Safari, Edge).
9. RETENTION PERIODS
We retain your data for the time necessary to fulfill the purposes of this Policy and applicable legal obligations:
- Active account data: as long as the account exists.
- Transaction and subscription data: for the period required by Mexican tax legislation.
- Communication data: up to 3 years after the last communication.
- Analytical data: according to the provider’s retention policy (Google Analytics).
Once the periods have expired, the data will be blocked and subsequently deleted.
10. SECURITY MEASURES
We implement reasonable technical and administrative measures:
- Communication encryption using HTTPS/TLS.
- Secure password storage (hashing).
- Data access limited to authorized personnel.
- Payment processing using Stripe’s PCI-DSS infrastructure.
- Regular backups.
In the event of a significant breach affecting your personal data, we will notify you without delay.
11. MINORS
The Platform is intended exclusively for individuals over 18 years of age and legal entities acting in a commercial context. We do not knowingly collect data from minors. If you become aware that a minor has provided data without their guardian’s consent, please report it to privacidad@spaace.mx.
12. PUBLIC CONTENT
By publishing a property or vendor profile, you agree that the following information will be publicly visible to all site visitors:
- Advertiser’s name or company name.
- Description and photographs of the property or service.
- Published location and price.
- Contact information you choose to include.
You are responsible for not including third-party personal data without their consent.
13. PAYMENT PROCESSING
Subscription payments are processed through Stripe. Spaace does not store or have access to full card numbers, expiration dates, or security codes. Payment information is captured and processed directly by Stripe under its own security standards.
To learn how Stripe processes your data, please refer to: https://stripe.com/mx/privacy
14. GOOGLE MAPS
The Platform integrates Google Maps to display property locations. By using this functionality, Google may collect certain information from your device in accordance with its own privacy policy: https://policies.google.com/privacy
15. MODIFICATIONS TO THIS POLICY
Spaace may modify this Policy. Any substantial changes will be communicated through a prominent notice on the Platform and, where appropriate, by email. The current version will always be available at https://spaace.mx/politica-de-privacidad/
16. CONTACT
For any privacy inquiries or to exercise ARCO rights:
- Email: privacidad@spaace.mx
- Website: https://spaace.mx
Version 2.0 — June 6, 2026