Privacy notice
Updated 2026-10-08
Controller
MGS Venture Management, S.C., trading as Criterium AI and reachable at hola@criterium-ai.com, is the controller of the personal data collected through this site, under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable, the European Union General Data Protection Regulation (GDPR).
What data we collect
We collect the data you provide in the contact form (name, company, role, work email, and the context you write), in the playbook request (name, email, and company), in the security documentation request (name, work email, company, role, products of interest, and reason) and, if you choose to use it, in the conversation with our interview agent. If your access to the security documentation is approved, we record which documents you open and when. The assessment on this site is processed in your browser and your answers are only sent if you attach them to the form. We also record minimal technical data, such as the browser submitting the form, and the preferences the site stores.
Why we use them
We use your data to respond to your request, to schedule and prepare the initial conversation, to send you the material you asked for, to manage your access to the security documentation, and, if you consented, to share content related to our services. We do not sell personal data and do not use it for third-party advertising. If you talk with our interview agent, we use the conversation to prepare automatically, with artificial intelligence assistance, a preliminary proposal for discussion that we send to you by email; it is not a binding offer and a person from Criterium AI follows up. We do not make automated decisions producing legal effects on you from the data collected on this site.
Legal basis
We process your data on the basis of your consent, given when you submit a form or accept non-essential cookies, and on the legitimate interest of handling commercial requests addressed to us. Where a contractual relationship exists, the basis is performance of the contract. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Who we share them with
We share data only with providers of site hosting, database, email delivery, web analytics, artificial intelligence models, sales management, and online learning services, under contract and bound by confidentiality. Some of these providers may be located outside Mexico or the European Economic Area; in those cases we apply standard contractual clauses or another valid transfer mechanism. We do not transfer data to third parties for their own purposes.
How long we keep them
We keep data from a commercial request for twenty-four months from the last contact, and client data for the duration of the contractual relationship plus applicable tax and legal retention periods. When the period ends, data is deleted or irreversibly anonymized.
Your rights
You may exercise your rights of access, rectification, cancellation, and objection (ARCO), as well as the rights to restriction, portability, and erasure under the GDPR, by writing to hola@criterium-ai.com with the subject Data rights. We will respond within twenty business days. If you believe your request was not handled, you may turn to the competent Mexican personal-data authority or to your national supervisory authority in the European Union.
Security
We apply reasonable administrative, technical, and physical measures to protect data against loss, misuse, and unauthorized access, including role-based access control, encryption in transit, and periodic vendor review. No system is infallible: should a breach significantly affecting your rights occur, we will notify you without undue delay.
Minors and changes
This site is aimed at professionals and is not intended for minors; we do not knowingly collect data from minors. We may update this notice to reflect legal or operational changes; the version in force will always be published here with its update date.