Last updated: 26 de septiembre de 2026 · Issued under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (DOF 20-Mar-2025, last amended 14-Nov-2025). The Spanish version is the legally binding one.
Corp 001, S.A. de C.V., operator of Multilistado (multilistado.mx, its subdomains and agent websites), domiciled at Blvd. Popotla 3009, Col. Playa Encantada, C.P. 22713, Playas de Rosarito, Baja California, México, is responsible for processing your personal data. Personal Data Department (art. 29): contacto@multilistado.mx · online form multilistado.mx/privacidad/arco.
Visitors: IP, browser, pages, preferences, session favorites. Buyers with an account: name, email, mobile, language, saved homes, searches and alerts, viewed homes, notes. People contacting an agent: name, email, phone, message, property, requested tour date. Agents & agencies: name, contact details, photo, bio, city/state, optional RFC, license type/number/state/validity and document, association memberships, listings, leads, commission agreements (e-signatures with date, IP and document hash), usage stats, API keys. State-registry agents: what the state publishes in its official registry, obtained from public sources (art. 9-II). Profile claimants: code sent to the official contact, license photo and the fields read from it, and a live selfie (see 3). Complainants and reviewers: contact details, facts, amounts, dates, address, evidence, rating and comment. ARCO applicants: name, contact, ID documents.
ID verification for showings. When you request a showing (required for every showing on Multilistado), we process an image of your official ID (INE, passport or driver's license), its data (name, date of birth, number, expiry; for an INE, the CIC and citizen-ID codes to confirm validity against INE's Lista Nominal through an authorized provider) and a live selfie whose biometric features are compared with the ID photo, with your express written consent (art. 8). We keep one front-facing selfie photo, the ID images, the date and time of verification, IP and device, and the account details used, for the safety of agents and owners. They are shared only with agents you request showings from; every view is logged. The agent keeps a showing log (verified name, ID type with the last 4 digits, verification date and showing outcome) that they may present to an authority if an incident occurs. With your consent, the owner of a property you visit may see in the agent's showing report only your first name with your last-name initial, the showing date and that your identity was verified — never your ID number or images. Verification is valid 12 months; these records are kept 24 months from verification, then deleted. If you close your account they are blocked for that period (used only for security and legal requests) and then erased.
When an agent claims their registry profile do we process their facial image and biometric features to confirm they are the registered person, with express written consent (art. 8) given by the consent checkbox plus the authentication code. Selfie frames are analyzed in memory and not stored; only the match result is kept.
Necessary: accounts and code/link sign-in; publishing listings, profiles and agent websites; delivering your enquiries to agents; verifying licenses and claimant identity; commission agreements; alerts you turn on; filing complaints where you choose and moderating kudos; ARCO requests, fraud prevention, security and legal compliance. Secondary (consent; you may refuse): newsletters and promotions; satisfaction surveys and aggregate statistics. Opt out in your account or by email at any time.
To the agent you contact and to the other agent in a commission agreement (necessary for the service, art. 36-IV); to the owner of a property you visit, only your first name, last-name initial, showing date and verification status (with the consent you give when verifying); to state authorities, PROFECO, associations or prosecutors only for complaints you choose to send (with your consent); to competent authorities when legally required. Processors (some abroad): Twilio (SMS, US), SendGrid (email, US), Didit (document check, liveness and face match for showings, INE registry lookup; images not stored on their platform, Spain/EU), Anthropic (AI reading of license and showing-ID images, US), Backblaze (encrypted backups, US), Cloudflare (DNS), OVH (hosting). Face verification runs on our own servers.
Notification settings in your account; unsubscribe links; removal requests for registry pages; PROFECO's REPEP do-not-advertise registry.
Access, Rectification, Cancellation, Opposition, consent revocation and limitation. Submit via the ARCO form, email, or in writing. Include your name and contact, ID (and representative's power if applicable), a description of the data and the right exercised (art. 28). We answer within 20 days and apply it within 15 days (art. 31). Free of charge (art. 34). You can also download or delete your account data yourself.
First-party, strictly necessary cookies only: session, language, currency, theme. No third-party advertising trackers on multilistado.mx. Maps and fonts load from OpenStreetMap, Google Fonts and unpkg, which may log your IP. Agent websites may add analytics configured by the agent.
Administrative, technical and physical measures (art. 18); breach notification (art. 19). Community-run, best-effort service; see the Terms.
Published here with the update date; relevant changes emailed to registered users.
You may go to the Secretaría Anticorrupción y Buen Gobierno (art. 40).