Privacy Policy.

At MEXA Agency, we collect personal information that you directly provide when interacting with our platform, submitting inquiry forms, onboarding as a partner, or engaging our real estate technology services. This includes your full name, email address, phone number, organization details, and payment information.

We automatically gather technical telemetry, including IP addresses, device signatures, browser specifications, operating system versions, and interaction logs. This helps us ensure optimal performance, security auditing, and localized user experiences.

Your personal and technical data is processed strictly to deliver, optimize, and secure MEXA Agency’s suite of digital solutions, real estate coding tools, and enterprise analytics dashboards.

Specifically, we utilize your data for identity verification, transaction handling, platform feature enhancement, customer support communications, and compliance with applicable legal obligations.

MEXA uses essential cookies, session storage, and advanced tracking pixels to provide secure user sessions, maintain language preferences (English & Arabic), and analyze aggregate platform traffic.

You retain full control over non-essential cookie permissions via your browser settings or our interactive consent banner. Disabling essential cookies may impact certain platform functionalities.

Security is built into the core of MEXA Agency. We enforce end-to-end TLS 1.3 encryption for data in transit and robust AES-256 bit encryption for sensitive data at rest across encrypted database clusters.

We implement strict Role-Based Access Controls (RBAC), multi-factor authentication for infrastructure management, automated security vulnerability scans, and routine third-party penetration audits.

Regardless of your region, MEXA Agency honors comprehensive data subject privacy rights aligned with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

You have the right to request access to your stored personal data, request immediate rectification of inaccurate information, demand complete data erasure ("Right to be Forgotten"), export your data in structured machine-readable formats (Portability), and opt out of any data sharing.

To maintain world-class hosting, analytics, and operational capabilities, MEXA Agency partners with trusted enterprise subprocessors, including cloud infrastructure providers, AI engine APIs, and encrypted analytics channels.

All subprocessors undergo stringent security reviews and are legally bound by signed Data Processing Agreements (DPAs) ensuring strict compliance with international privacy mandates.

MEXA Agency retains your personal data only for as long as required to fulfill active service contracts, comply with legal and tax audit requirements, or resolve operational disputes.

When international transfers occur across global data centers, we enforce Standard Contractual Clauses (SCCs) and robust encryption standards to safeguard your information across all jurisdictions.

If you have questions regarding this Privacy Policy, wish to exercise your legal rights (GDPR/CCPA), or submit a security inquiry, our dedicated Data Protection Officer (DPO) and privacy compliance team are ready to assist.

We commit to acknowledging all privacy inquiries within 48 hours and resolving data access or erasure requests within 30 calendar days.