privacy notice

AVISO DE PRIVACIDAD INTEGRAL

Last updated: September 28, 2026.

En cumplimiento de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares vigente y demás normativa aplicable (en lo sucesivo, la “Ley”), Metamedia Cloud Services (en lo sucesivo, “Metamedia”), con domicilio para oír y recibir notificaciones en Centro Comercial Espacio Esmeralda, Vía Dr. Jorge Jiménez Cantú, Chiluca y Club de Golf Chiluca, Bosque Esmeralda, Ciudad López Mateos, Estado de México, es responsable del tratamiento de los datos personales que nos proporciones y de la protección que se les dé, y pone a tu disposición el presente Aviso de Privacidad (el “Aviso”).

I. What we do and who this Notice applies to

Metamedia is a digital services agency: website development and management, hosting, domain registration and renewal, business email, digital marketing, performance reports and software tools for businesses, such as the Metamedia CRM, the Metamedia Hub and their artificial intelligence and WhatsApp messaging features.

This Notice applies to the data of: (a) visitors to metamedia.cloud and our forms; (b) Metamedia prospects and customers and their representatives; and (c) people whose data we process on behalf of our customers when they use our tools (see section V).

II. Personal data we collect

We may collect the following data directly from you, through our forms, email, phone, WhatsApp or social media:

Identification and contact: name, email, phone, company, job title and city.
Tax and billing data: legal name, RFC (Mexican tax ID), tax regime, tax address and CFDI use.
Data on contracted services: domains, websites, hosting and email accounts, renewal dates, quotes, payments made and support history (tickets).
Payment data: card payments are processed directly by payment providers (for example, Stripe). Metamedia neither sees nor stores your full card number.
Browsing data: IP address, browser and device type, pages visited and traffic source, through cookies and similar technologies (see section VIII).
Communications: the content of the messages and emails you send us so we can assist you.

Metamedia does not request sensitive personal data (such as health, ethnic origin, beliefs or sexual orientation). Please do not send them through any channel.

III. Purposes of processing

Primary purposes (necessary for your relationship with us):

Provide and manage the services you contract: websites, hosting, domains, email, marketing, reports and software.
Prepare quotes, contracts and invoices, and follow up on payments and collections.
Notify you of expirations and renewals of your services (for example, domain or hosting).
Provide technical support and service, including support tickets and their responses.
Maintain the security, availability and backup of the websites and systems we manage.
Comply with legal and tax obligations and requests from authorities.

Secondary purposes (not necessary for the service):

Send you information about new services, promotions, content and events.
Invite you to satisfaction surveys and better understand your needs.
Prepare internal statistics on the use of our services.

If you do not want us to process your data for secondary purposes, write to us at iam@metamedia.cloud con el asunto “NO FINALIDADES SECUNDARIAS”. Tu negativa no será motivo para negarte los servicios que contrates.

IV. Artificial intelligence

Some Metamedia tools use artificial intelligence to draft emails and messages, summarize conversations or tickets and explain metrics. To do so, only the minimum information needed for the task is sent to a language model provider (currently Anthropic). That provider acts as a processor: it may not use that information for its own purposes or to train its models. Metamedia only keeps usage logs (date, task type and consumption), not the processed content. AI results are suggestions: a person reviews them before they are sent.

V. Data we process on behalf of our customers (CRM, Hub and WhatsApp)

When a Metamedia customer company uses the Metamedia CRM, the Hub or our integrations, that company is the controller of its own contacts' data (its prospects and customers), and Metamedia acts as processor: we process that data solely to provide the service and following its instructions, without using it for our own purposes, selling it or sharing it with third parties outside the service. If you are a contact of one of those companies, its privacy notice applies; even so, you can write to us and we will forward your request.

WhatsApp Business. When a salesperson at a customer company links their WhatsApp Business account to the CRM through Meta's official platform, the CRM receives and stores the messages (text, images, audio and documents) that salesperson exchanges with contacts registered in the CRM, along with the contact's number and profile name. That information is used only for sales and service follow-up with those contacts, is stored in the customer company's CRM and is not shared with third parties. Conversations with numbers that are not CRM contacts are not stored unless the salesperson authorizes it. The salesperson can unlink their WhatsApp at any time; from then on the CRM stops receiving messages. Meta processes messages under its own privacy policies.

V bis. Metamedia CRM installation data

If you download Metamedia CRM, we process the data you give us when signing up (name, email, phone and company) to send you your key, support you and offer you our plans. With the key connected, your CRM sends us once a month technical data about your site (versions, site type, plugins, security and backups), your company details entered in the CRM and usage figures, without your contacts' data, sales amounts or passwords. You can see exactly what is sent under Settings → Metamedia AI, and stop sending it by removing the key.

In addition, to offer you updates, each Metamedia CRM installation periodically checks our server, sending the site address and installed version, whether registered or not.

VI. Transfers and processors

Metamedia does not sell or rent your personal data. To provide our services we rely on providers that act as processors and are required to protect your data and use it only for the service they provide to us, including: hosting and infrastructure providers (for example, Hostinger and Amazon Web Services), domain registrars, email providers, payment processors (for example, Stripe), analytics tools (for example, Google Analytics and Google Search Console), Meta Platforms (WhatsApp Business) and artificial intelligence providers (Anthropic). Some of them are located outside Mexico; in those cases we seek adequate safeguards for the protection of your data.

We may disclose your data without your consent in the cases provided by law, for example when required by a competent authority or when necessary to fulfill a contract with you.

VII. Retention and security

We keep your data while our relationship with you lasts and, afterwards, for the periods required by law (for example, tax law). Once those periods end, we delete or anonymize it. We apply reasonable administrative, technical and physical security measures: role-based access permissions, encryption of passwords and credentials, secure connections (HTTPS), backups and activity logs.

VIII. Cookies and tracking technologies

Our website uses cookies and similar technologies to function, remember your preferences and measure visits and campaigns (for example, Google Analytics and social media pixels). You can disable them in your browser settings; some site features may then stop working properly.

IX. ARCO rights and withdrawal of consent

You have the right to Access your data, Rectify it if inaccurate, Cancel it when you consider it is not needed for the stated purposes, and Object to its processing for specific purposes (ARCO rights), as well as to withdraw your consent.

To exercise them, send an email to iam@metamedia.cloud with: (a) your name and a way to reply to you; (b) a copy of your official ID or, where applicable, that of your representative and the document proving the representation; (c) a clear description of the data and the right you wish to exercise; and (d) any information that helps locate it. We will reply within a maximum of 20 business days and, if appropriate, carry out the request within the following 15 business days. These periods may be extended once for an equal period when justified.

To limit the use of your data or stop receiving advertising, write to iam@metamedia.cloud con el asunto “DEJAR DE RECIBIR INFORMACIÓN” y te registraremos en nuestra lista de exclusión.

X. Instructions to delete your data

You can ask us at any time to delete your personal data, including data obtained through WhatsApp or our Meta integrations:

Write to iam@metamedia.cloud con el asunto “ELIMINAR MIS DATOS”.
Provide your name and the email or phone number (with WhatsApp) you used to contact us or that the company used to contact you.
We will confirm your identity and delete your data from our systems within a maximum of 20 business days, except data we must keep by law, which we will inform you about.

If your data is in the CRM of a Metamedia customer company, we will notify that company so it can handle your request as controller and, at its instruction, we will delete it.

XI. Minors

Our services are aimed at businesses and adults. We do not knowingly collect data from minors.

XII. Changes to this Notice

We may modify this Notice due to changes in the law, our services or our practices. We will publish any change on this page, with the date of its last update, and when the change is significant we will inform you by email.

XIII. Contact

For any questions about this Notice or the processing of your personal data: iam@metamedia.cloud, phone +52 (55) 1804 2573, Monday to Friday from 9:00 a.m. to 2:00 p.m., or at our address stated at the beginning of this Notice.

If you believe your right to personal data protection has been violated, you may contact the competent data protection authority.