← Back to Listaca

LISTACA COMPREHENSIVE PRIVACY NOTICE

Last updated: September 1, 2026

1. Data controller

The data controller operates under the trade name Listaca.

For ARCO rights, revocation of consent where applicable, limitation of use or disclosure, or privacy inquiries: info@listaca.com.

2. Scope

This Notice applies to personal data processed through listaca.com in connection with the publication and management of real estate listings, the purchase and management of general advertising or banners, payments, support, complaints, security, fraud prevention, and technical functions necessary to operate Listaca.

Someone who browses Listaca without publishing may generate technical data: IP address, date and time, browser or device, language stored on the device, and cache or service-worker identifiers. Name, email, and telephone are not requested in order to browse.

3. Data processed for real estate listings

Depending on use of the service, Listaca may process:

4. Data processed for advertising or banners

To purchase and manage general advertising, Listaca may process:

Currently, the public banner may display the name or trade name, the advertising phrase, the destination link, and, if provided, a WhatsApp number. The email used for contracting is not displayed as an ordinary part of the banner.

5. Transaction data

We may process the type of service purchased, amount, date, payment status, identifiers or references, coupons, and data necessary for clarifications, refunds, fraud prevention, or chargebacks.

Listaca does not intend to store full card numbers, CVV, PINs, or banking passwords. Financial data used by the payment processor is processed by that provider in accordance with its own policies and obligations.

6. Technical and security data

We may generate or receive technical data reasonably necessary to operate the service, including IP address, date and time, browser and device, error and security logs, technical identifiers, activity related to prevention of abuse or fraud, and technical evidence necessary to prove an electronic transaction.

7. Sensitive data

Listaca does not request sensitive personal data for ordinary publication of properties or banners.

Official identification documents, medical information, passwords, financial credentials, authentication codes, or other sensitive data should not be unnecessarily included in listings or advertising materials.

8. Public data

Real estate listings

Depending on the Advertiser's configuration, the title, description, photographs, videos, general location, characteristics, prices, contact name or alias, designated contact number, external links, and displayed availability may be made public.

Banners

The name or trade name, advertising phrase, destination link, and, if provided, a WhatsApp number may be public.

The user acknowledges that information published on the internet may be viewed, shared, or indexed by third parties. After content is removed, external copies or caches may take time to disappear and are not always under Listaca's control.

9. Primary purposes

These purposes are necessary for the legal relationship or operation of the service and do not require consent beyond this notice and the purchase.

Personal data is used to:

  1. create, review, publish, display, and manage listings;
  2. manage and distribute banners;
  3. verify that content complies with publication rules;
  4. process and verify payments;
  5. communicate decisions regarding approval, correction, rejection, suspension, or expiration;
  6. enable editing and management functions;
  7. synchronize calendars when the user enables that function;
  8. handle support, clarifications, and complaints;
  9. prevent, detect, and investigate fraud, impersonation, unauthorized payments, malware, or abuse;
  10. manage third-party rights claims;
  11. retain evidence of transactions and acceptance of documents;
  12. comply with legal obligations and valid requests from authorities; and
  13. defend or exercise rights in proceedings or chargebacks.

10. Purposes that require consent

Listaca does not sell user databases and does not currently use contact data for third-party advertising or commercial prospecting.

If data were later used for secondary purposes of that kind, users would be informed and consent would be obtained, or an opportunity to object offered, as applicable, before that use.

11. Processors and transfers

Technical providers may process data on Listaca's behalf as processors, including Supabase (infrastructure and storage) and Mercado Pago (payments), depending on the function used. That is not, by itself, a transfer to a third party other than a processor.

Listaca does not transfer databases to third parties for marketing. Data may be disclosed to authorities or advisers where there is a legal obligation, a valid request, or a need for legal defense.

12. Processing outside Mexico

Some technology providers may operate infrastructure outside Mexico. Certain data may therefore be technically processed or stored in other countries in accordance with applicable law.

13. Retention

Data will be retained for the time necessary to fulfill the purposes for which it was collected and the applicable legal periods.

Listaca may retain information necessary for tax or commercial obligations, complaints, fraud prevention, security, limitation periods, defense of rights, and legal requirements.

14. Security

Listaca adopts reasonable administrative, technical, and physical measures to protect data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

When a security breach must be reported under applicable law, Listaca will make the legally required communications.

15. ARCO rights

The data subject may request Access, Rectification, Cancellation, or Objection with respect to their personal data.

The request must be sent to info@listaca.com and include: name; address or a means to receive the response; documents proving identity or representation; a description of the data (except for access); and the right being exercised.

Listaca will communicate its decision within a maximum of twenty business days from receipt. If granted, it will be carried out within the following fifteen business days. Those periods may be extended once for an equal period when circumstances justify it. Exercise is free of charge, except for reproduction or shipping costs.

16. Revocation and limitation

Where legally applicable, the data subject may request revocation of consent or limitation of the use or disclosure of their data through info@listaca.com.

Revocation is not retroactive and may not apply to information that must be retained to comply with a legal obligation, perform a legal relationship, prevent fraud, or defend rights.

17. Third-party content included by an Advertiser

An Advertiser who provides personal data of third parties declares that they have the authorization or legal basis necessary to do so.

18. Minors

The purchase of publications and banners is intended for persons over 18 years of age. Listaca does not intentionally request data from minors in order to purchase these services.

19. Cookies and similar technologies

The use of local storage, cache, service workers, and similar technologies is explained in the Listaca Cookies and Similar Technologies Policy.

20. Changes to the Notice

Listaca may update this Notice. Changes are published on this page, with the last-updated date. Later use of the service implies knowledge of the published version, without prejudice to additional consent when the law requires it.

21. Competent authority

If an ARCO request is not addressed, the data subject may approach the Secretaría Anticorrupción y Buen Gobierno, the competent authority for private-sector personal-data protection.

22. Contact

Email for privacy and ARCO rights: info@listaca.com.