Last updated: January 8, 2026
Privacy Notice
1. Identity and address of the controller
Mxistorie S.A.P.I. de C.V. (hereinafter "Mxistorie"), with address at Av. Insurgentes Sur 1602, 9th Floor, Col. Credito Constructor, Benito Juarez, ZC 03940, Mexico City, is the controller responsible for processing your personal data in accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.
2. Personal data we collect
Full name, email, phone, tax ID (RFC), unique population registry code (CURP), date of birth, occupation, address, government-issued ID, proof of address, CLABE bank account, financial and net worth information, plus data derived from anti-money-laundering (AML) obligations.
3. Purposes of processing
Primary purposes: (i) provide the real estate crowdlending service; (ii) verify your identity under the general provisions of the Mexican Fintech Law; (iii) formalize mortgage-backed loan contracts; (iv) process payments, returns and tax withholdings; (v) comply with our obligations before CNBV, SAT, BANXICO and CONDUSEF. Secondary (optional) purposes: sending commercial communications and newsletter.
4. Data transfers
We may transfer your data without requiring your consent to competent regulators (CNBV, SAT, BANXICO, CONDUSEF, UIF), to the trustee bank managing the trust, to certified appraisers, notaries public, and to the co-investors of the project you participate in, exclusively for the primary purposes described above.
5. ARCO rights and revocation
You may exercise your rights of Access, Rectification, Cancellation and Opposition (ARCO), as well as revoke your consent, by sending a written request to privacidad@mxistorie.com attaching a copy of your government-issued ID. Your request will be answered within 20 business days as required by the LFPDPPP.
6. Use of cookies and tracking technologies
We use first and third-party cookies (Google Analytics, Google Ads, Meta Pixel) implemented under the Google Consent Mode v2 standard. You can manage your preferences from the cookie banner or from your browser settings. See our Cookie Policy for more details.
7. Changes to this notice
We reserve the right to modify this Privacy Notice. Any change will be notified through mxistorie.com at least 15 calendar days before it becomes effective.
8. Data protection authority
If you believe your right to the protection of personal data has been violated, you may go to the Mexican National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) and file the corresponding complaint. Website: home.inai.org.mx.