Privacy notice

1. Personal data we process

We do not collect sensitive personal data. Please don't include any in documents, messages or free-text fields.

• Identity and contact: name, email address and, if provided, phone.
• Account data: member ID, preferred language, sign-up date and access logs.
• Business data: brand or property name, category, website, location, expansion requirements, commercial space details and prices.
• Verification documents you upload to show you represent a brand or own/manage a property (e.g. articles of incorporation, tax certificate, deed, lease or management agreement, ID). These may contain personal data about you or others.
• Communications: messages and files exchanged in deal rooms, and contact-form messages.
• Subscription data: plan, billing period, payment status and dates. Card or payment-account details are collected and processed directly by the payment processor; Core Hexagon does not store them.
• Technical data: IP address, browser type, cookies needed for your session and language.

2. Necessary purposes

• Create and manage your account and authenticate you.
• Publish your requirements or spaces and compute matches with other users.
• Verify the identity and authority of brands and landlords before contact details are shown to others.
• Provide deal rooms for messages and files with your counterpart.
• Manage subscriptions, trials, billing, renewals, plan changes and plan limits.
• Send service notices (new matches, messages, verification results, plan or terms changes).
• Handle support, contact and data-rights requests.
• Prevent fraud, keep the platform secure and comply with the law.

3. Optional purposes

To opt out, email privacidad@corehexagon.com with the subject "Optional purposes". Opting out does not affect the service.

• Marketing, product news and satisfaction surveys.
• Aggregated statistics about platform use and the market.

4. Who we share data with

• Users you are matched with: they see your brand or property profile, your requirements or spaces, and what you share in the deal room. A property's contact details and documents are shown only to verified counterparts.
• Processors acting on our behalf: Wix.com Ltd. (hosting, database, authentication, plans and payments), the payment processor configured in Wix (e.g. Stripe or PayPal) and the transactional email provider (e.g. Resend). They may be located outside Mexico and are contractually bound to protect your data.
• Competent authorities, when required by a court order or a reasoned order from a competent authority.

5. Access, rectification, cancellation, objection and withdrawal of consent

Email privacidad@corehexagon.com with your name and account email, the right you want to exercise, a clear description of the data involved and, where applicable, proof of identity or authority. We will reply within the legal deadlines by the same channel. Some data may be kept blocked as long as needed for legal obligations or disputes.

You can also edit or delete most of your information from your dashboard and cancel your subscription at any time.

To delete your whole account, use More → Delete account in the Core Hexagon app or email privacidad@corehexagon.com. We delete the account and its brands, properties, spaces, requirements, matches and messages within 30 days, except what the law requires us to keep.

Mobile app: if you turn on notifications, we store a device identifier (push token) only to tell you about new matches, messages and verification results. It is removed when you sign out. The app does not use your location or track you for advertising.

Insights: we record how often each side opens a match and reply times in deal rooms, and show them only as totals to members with Insights. We never show who viewed what or other members' details; market comparisons use at least 3 anonymous listings.

Sign in with Apple or Google: we receive only your name and email (Apple lets you hide your email) to create or open your account. We never receive your password or other data from those accounts.

Local prices: to show an approximate price in your currency we look up the country of your IP address with an external service (api.country.is). We keep only the country in a cookie for 7 days; we don't store your IP.

Referral program: if you sign up through another member's link, we record who invited you and your subscription status to calculate their commission. The member who invited you only sees a partly hidden version of your email, your sign-up date and your status.

6. Retention

We keep your data while your account is active and afterwards as long as needed for tax, accounting and legal obligations. Verification documents are kept while the brand or property is registered.

7. Cookies

We use strictly necessary cookies for your session, language and security. We do not currently use third-party advertising or analytics cookies; if that changes we will update this notice and ask for consent where required.

8. Security

We apply administrative, technical and physical safeguards, including encryption in transit, per-account access control, ownership checks on every operation and an audit log of admin actions.

9. Changes

Changes are published at www.corehexagon.com/privacy with the update date. If purposes change we will ask for consent again where the law requires.

10. Authority

If you believe your data-protection rights were violated, you may contact the Secretaría Anticorrupción y Buen Gobierno, Mexico's competent authority.