Comprehensive Privacy Notice — AHEAD Legal

Last updated: September 14, 2026.

1. Who processes your data and which laws apply

Title Solutions de México, S.A. de C.V. and Title Solutions III, S.A. de C.V. (together, “Title Solutions,” “we,” “us,” or the “Controller”), with an address for notices at Plaza Progreso Interior 80, Carretera Federal Mz. 293, Lote 001-01, Colonia Ejido, Playa del Carmen, Quintana Roo, C.P. 77712, Mexico, are responsible for the personal data they collect to operate AHEAD Legal at https://app.aheadlegal.io, administer accounts and subscriptions, and handle contact or support requests.

Privacy contact: info@aheadlegal.io

This notice is issued under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. AHEAD Legal is offered to real estate professionals in Latin America. Therefore, in addition to Mexican law:

  • If you reside or are located in another Latin American country, that country’s data protection rules will also apply when they govern the processing, including, without limitation, Brazil’s LGPD, Colombia’s Law 1581 of 2012, Argentina’s Law 25.326, Chile’s Law 21.719 and Law 19.628, Peru’s Law 29733, Uruguay’s Law 18.331, Ecuador’s LOPDP, Costa Rica’s Law 8968, Panama’s Law 81, and other local habeas data or personal data protection laws.
  • If a local rule gives you a broader right or stricter protection than this notice, that rule prevails for your processing.
  • This notice does not create rights that applicable law does not recognize, and it does not limit the rights that law does recognize.

When a customer organization uploads information about buyers, sellers, staff, or other contacts, that organization determines the purposes of that information and acts as controller toward those individuals. Title Solutions processes that information as a processor or operator, as applicable law provides, to deliver the contracted service and in accordance with the organization’s instructions. This notice does not replace that organization’s policy, notice, or authorization.

Title Solutions de México, S.A. de C.V. and Title Solutions III, S.A. de C.V. act as joint controllers for accounts, subscriptions, and operation of the platform. Rights requests are handled at the email address stated in this notice.

2. Scope

This notice applies when you:

  • create or use an AHEAD Legal account;
  • contact us;
  • upload, generate, or receive information in a real estate transaction managed through the service; or
  • visit AHEAD Legal pages that link to this notice.

3. Information we process

Account and business data: name, email address, phone number, organization, branch, role, login credentials, and language preference.

Transaction data captured by authorized users: contact details, identification data (for example, official ID documents, CURP, or local equivalents), tax data (RFC, RUT, CUIT, RUC, or others), addresses, property information, financial and payment records, correspondence, uploaded files, and generated documents.

Subscription and billing data: plan, payment status, billing details, and payment-processor references. Card charges are processed by Stripe. AHEAD Legal does not store the full card number; it uses payment references and limited payment-method information to administer billing.

Technical and support data: IP address, browser, device, access and activity logs, error information, and data included in support requests.

Sources of data: the data subject; their organization; counterparties or recipients in a transaction; the payment processor; and automatic service means (technical logs).

Sensitive, financial, or asset-related data. We do not require health data, religious beliefs, political opinions, racial or ethnic origin, sexual life, or biometric data to create an account. Real estate files may include official identification data, tax data, and financial or asset-related data (payments, accounts, liens, deeds, or equivalents). Those data should be uploaded only if necessary for the transaction.

Customer organizations must have the notice, authorization, or consent required by the data subject’s law, especially for sensitive data, minors, or financial or asset-related data. Where the law treats sensitive data as optional, the data subject is not required to authorize that processing. Do not send identity documents or unnecessary sensitive data by support email.

Minors. AHEAD Legal is not directed to children or adolescents. If a file includes a minor’s data, the customer organization must have the person who holds parental authority, guardianship, or legal representation, as applicable law requires.

4. Why we use the information and legal bases

Purposes necessary to provide the service or comply with a legal obligation

  • create and authenticate accounts;
  • apply organization and role permissions;
  • store and administer files;
  • generate, sign, send, and retain documents;
  • send operational communications requested by authorized users;
  • administer subscriptions, billing, and collection;
  • provide support;
  • investigate errors, fraud, or misuse;
  • protect the security, integrity, and availability of the service;
  • comply with legal, accounting, tax, notarial, or anti-money-laundering obligations, where applicable;
  • establish, exercise, or defend legal claims.

These purposes are necessary for the service relationship. If required data are not provided, we cannot create the account or deliver the contracted service.

Purposes that require consent, authorization, or another voluntary basis

  • commercial communications, product updates, or educational material not essential to the service;
  • non-essential cookies, analytics, or tracking, when enabled;
  • transfers to third parties that are not covered by a legal exception and that require your acceptance.

You may refuse these voluntary purposes without losing access to the contracted service.

Legal bases by country. Depending on applicable law, processing will rest on one or more of the following: performance of a contract or pre-contractual steps; compliance with a legal obligation; legitimate interest compatible with your rights, where the law recognizes it; prior, express, and informed consent or authorization, when required; and other bases provided by local law. In Colombia, except as the law allows, processing requires prior, express, and informed authorization, which may be given by accepting this notice, creating an account, or another verifiable and auditable means. In Mexico, financial or asset-related data require express consent, and sensitive data require express written consent when the law so requires. In Brazil, processing will rest on a LGPD legal basis and, where applicable, a specific basis for sensitive data.

Use of the platform does not replace the consent or authorization that applicable law requires from the customer organization for the data that organization uploads.

5. Who may receive the information

The information is available to authorized users according to their organization, role, and permissions. Documents or messages may also be sent to buyers, sellers, lawyers, notaries, banks, trustees, and other recipients selected by an authorized user. The organization is responsible for verifying those recipients before sharing information.

Processors or operators. Providers of hosting, file storage, payment processing, email delivery, electronic signature, and technical operations may process information needed to perform their services, under instructions and with confidentiality and security obligations. They include, among others, Stripe for payments.

Transfers to third-party controllers. We do not sell personal data. We will disclose data to competent authorities when a legal obligation or valid request exists, or to establish, exercise, or defend legal claims. Transfers that require your consent or authorization will be made only if you accept them, except where the law provides an exception.

Transfer clause. Except for communications to recipients you or your organization select inside the service, communications to processors or operators needed to operate AHEAD Legal, and disclosures authorized or required by law, you may accept or refuse any other transfer that requires your consent. Refusing voluntary transfers does not prevent use of the contracted service, although it may limit features that depend on an external recipient you yourself choose.

International transfers. Title Solutions is established in Mexico. Providers may process information in Mexico, the United States, or other countries. That processing will be subject to applicable law and to contractual and security safeguards, including standard contractual clauses or other mechanisms recognized by the competent authority when required (for example, ANPD standard contractual clauses when processing is subject to the LGPD). By using the service or accepting this notice, you are informed that your data may be transferred and stored outside your country of residence.

6. Cookies and external resources

The application uses cookies and similar browser storage for session, authentication, and interface functions. You may delete or restrict cookies in your browser; doing so may prevent login or normal use.

Pages may load fonts or interface libraries from third-party providers, which may receive technical request data, including your IP address.

Any non-essential cookie, analytics, or tracking that requires consent will be presented separately and will remain off until you accept it. You may withdraw that acceptance at any time.

7. Retention and security

We retain information while the account or file is active and for additional periods needed for billing, legal or accounting obligations, security, fraud prevention, and the exercise or defense of rights. For reference:

  • account data: for the life of the account and up to 3 years after cancellation, unless a different legal period applies;
  • transaction files and documents: the period required by the customer organization, applicable real estate, notarial, tax, or anti-money-laundering law, and the limitation period for claims;
  • technical and security logs: up to 24 months, unless an investigation is pending;
  • billing data: applicable tax and accounting periods.

When information must be retained, its use will be limited to that purpose. It will then be deleted or blocked. Account cancellation, export, and deletion are governed by the Terms and Conditions and applicable law. Contact us before canceling if you need help retrieving your information.

We use access controls and technical, administrative, and organizational measures to reduce unauthorized access, loss, alteration, or misuse. No system is completely secure. Keep your credentials confidential, use available security features, and report suspected unauthorized access to info@aheadlegal.io.

If a security incident poses a relevant risk to your rights, we will notify you and, where the law requires it, the competent authority without undue delay.

8. Your rights and how to exercise them

Depending on the law of your country of residence or of the place of processing, you may exercise, among others, the rights of:

  • access or knowledge;
  • rectification or updating;
  • cancellation, erasure, or deletion;
  • objection;
  • withdrawal of consent or authorization;
  • limitation or blocking of use or disclosure;
  • portability, where the law recognizes it;
  • not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you, where the law recognizes it;
  • request proof of your authorization, be informed of the use given to your data, and file a complaint with the local authority.

AHEAD Legal does not make decisions with legal effects based solely on automated processing. Document generation requires action by an authorized user.

How to submit a request. Email info@aheadlegal.io with the subject line “Privacy request,” or submit it in writing to the address above, marked for AHEAD Legal Privacy. Include:

  • full name;
  • country of residence;
  • a means to receive the response;
  • the right you wish to exercise;
  • a clear description of the relevant information;
  • for rectifications, the requested change.

We will tell you how to prove your identity or authority through an appropriate channel. If the request is incomplete, we will ask for the missing information. Exercise of these rights is free of charge, except for justified shipping or reproduction costs allowed by law.

We will respond within the period set by the law applicable to your request. If that law does not set a shorter period, we will aim to respond within 30 calendar days, extendable once when complexity justifies it and the rule allows. Withdrawal does not affect prior lawful processing. Legal, contractual, accounting, or retention duties may limit deletion or restriction.

Limitation of use or disclosure and opt-out of voluntary communications. To limit use or disclosure, or to opt out of commercial communications, email info@aheadlegal.io with the subject line “Limitation of data use,” or use the unsubscribe link in the message. That refusal does not affect the necessary purposes of the service.

If a customer organization provided your data, contact that organization first. If you contact us, we can help identify it and cooperate within our role as processor or operator.

Authorities. In addition to contacting us, you may go to the authority in your country, including:

  • Mexico: Secretaría Anticorrupción y Buen Gobierno;
  • Brazil: Autoridade Nacional de Proteção de Dados (ANPD);
  • Colombia: Superintendencia de Industria y Comercio (SIC);
  • Argentina: Agencia de Acceso a la Información Pública (AAIP);
  • Chile: Agencia de Protección de Datos Personales;
  • Peru: Autoridad Nacional de Protección de Datos Personales;
  • Uruguay: URCDP;
  • Ecuador: Superintendencia de Protección de Datos Personales;
  • Costa Rica: PRODHAB;
  • and the local authority that applies in other countries.

9. Changes

The current notice is published on this page with its update date. Material changes will be communicated through the service or the account email, as appropriate. When a change requires new consent or authorization, we will request it before applying the new processing. Continued use of the service after a change that does not require new consent means you have been informed of the updated notice, without prejudice to the rights applicable law grants you.

10. Contact

Questions about this notice or the processing of your information: info@aheadlegal.io

Address: Plaza Progreso Interior 80, Carretera Federal Mz. 293, Lote 001-01, Colonia Ejido, Playa del Carmen, Quintana Roo, C.P. 77712, Mexico.