Privacy notice

C9 Studio Design, S.A. de C.V. ("C9SD", "we"), with Mexican tax ID (RFC) CSD201216A82 and address at Cerrada de Concepción Beistegui 15, Colonia Del Valle, Alcaldía Benito Juárez, Ciudad de México, C.P. 03100, is responsible for the personal data we receive on this site.

We handle your data in line with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its regulations.

This notice covers the C9SD site and its client area. Each C9SD product (such as Coindiviso, Qrevnt or ChecaYa) has its own privacy notice, published on its site.

If you write to us through the contact form: your name, email and, if you type them, your company and phone, the project type, the approximate budget, your message and the language you were browsing in.

If we set you up as a client: your name, email, password (stored encrypted), your two-factor authentication data if you turn it on, and the project information we share with you in the client area (progress, deliverables, files and comments).

Technical data: your IP address and browser type, which we use to keep your session secure and to limit repeated form submissions.

We do not handle sensitive personal data or financial data on this site.

• Replying to your message and, if you ask, preparing a proposal for scope, timeline and cost.
• Creating and managing your client account, verifying your identity when you sign in and showing you the progress of your projects.
• Protecting the site against abuse and automated submissions.
• Meeting legal obligations.

These purposes are needed to handle your request. We do not use your data for advertising or marketing, and we never sell it.

We rely on providers that process data on our behalf, under confidentiality obligations and only to provide the service:

• Server hosting and email delivery providers.
• Cloudflare, which checks technical signals from your browser on the contact form to tell people from bots (Turnstile).

We only hand data to an authority when the law requires it and upon a well-founded request.

• Contact messages, for up to 12 months after the last communication, unless they become a project.
• Your client account data, for as long as the account exists.
• Your IP address and browser, only for the length of the session or the submission limit.

You can access, rectify or cancel your data, or object to its processing (ARCO rights), as well as withdraw your consent or limit its use. Write to the email in section 7 with:

• Your name and a way to reply to you.
• Which right you are exercising and over which data.
• An official ID or, if you act on someone else’s behalf, the document proving it.

We will reply within twenty business days and, where it applies, carry it out within the following fifteen business days. These periods may be extended once by the same length when the case justifies it. If you believe we did not handle your request, you may go to Mexico’s Secretaría Anticorrupción y Buen Gobierno.

For any question about this notice or to exercise your rights, write to admin@c9sd.com or by post to our address.

We only use the cookies the site needs to work: the session cookie, which also remembers your language, and the cross-site request forgery (CSRF) protection cookie. We do not use analytics, advertising or third-party tracking cookies.

We encrypt traffic between your browser and our servers, store passwords encrypted, offer two-factor authentication and limit access to your data to the people at C9SD who need it to serve you. If a security incident significantly affects your data, we will tell you without delay.

We may update this notice because of changes in the law, the site or our providers. We will publish the current version on this page with its update date.