Privacy notice.

Who is responsible for your data

Roberto Mirón Nájera, an individual operating under the trade name muush ("muush" or "we"), located at Del Puente #11, San Bartolo Ameyalco, Álvaro Obregón, 01800, Mexico City, Mexico, is responsible for processing your personal data. For any privacy matter, write to support@muush.dev.

What data we collect

We don't ask for sensitive personal data. A CV may include it without us asking, such as health status, religious beliefs or union membership. Please leave it out. If your CV includes it, we use it only to evaluate your profile and with your express consent, which you give by ticking the box on the form.

What we use it for

We use your data for these purposes, which we need to handle what you asked for:

• If you requested an assessment: to answer your request, contact you the way you chose, prepare your assessment and a proposal and, if we work together, manage the business relationship and invoicing.
• If you applied through Work with muush: to evaluate your profile with your express consent, contact you for an interview and invite you to projects that fit for as long as we keep your CV.
• In both cases: to send you the automatic email confirming we received your information.

We also use your data for two additional purposes, which we don't need to handle your request and which only apply if you accept them in the cookie notice:

• Measuring how the site is used: we use Google Analytics to see how many people visit, how they find us, which sections they read and at which step of the forms they stop. We don't send it your name, email, phone or anything you write in the forms.
• Measuring and showing advertising: we use Meta Pixel to see how our ads perform and to show muush ads to people who visited the site. If you request an assessment, we also send Meta your email and, if you chose WhatsApp, your phone number, to learn whether your request came from an ad. Before they leave your browser, the pixel turns them into an irreversible code (a hash), so Meta does not receive them as typed.

You can object to these purposes at any time, as explained in Cookies and pixels. Apart from the email and phone mentioned above, we don't use what you write in the forms for measurement or advertising, and never your CV or your Work with muush application.

Who we share it with

We don't sell your data. We only share it with:

• The providers that help us operate: Amazon Web Services (site hosting), Amazon SES (email delivery), Google Drive (CV storage), Notion (records of requests and applications) and Cal.com (call scheduling). They process your data on our behalf, under our instructions and under confidentiality. Some have servers outside Mexico.
• Meta Platforms, which receives browsing data through its pixel to measure and show ads and, if you accepted advertising and request an assessment, your email and phone number as a hash.
• Google, which receives browsing data through Google Analytics to measure how the site is used, only if you accepted analytics.
• muush collaborators working on your project, only the data they need and under a confidentiality agreement. Some may be outside Mexico.
• Authorities, when a law requires it.

Your talent pool profile and CV stay at muush: we don't share them with partners or other companies.

Except for what is stated about Meta and Google, we don't make any data transfers that require your consent.

How long we keep it

• Your CV and talent pool profile: 1 year from when we receive them. When that period ends, we delete them.
• Assessment requests that don't move forward: 12 months from the last contact.
• Clients: for the length of the relationship and, after that, the period required by tax law.
• Browsing, analytics and pixel data: up to 14 months.

You can ask us to delete it sooner at any time.

Your rights

You have the right to access, rectify or update, cancel or object to the use of your data (known in Mexico as ARCO rights). You can also object to decisions made solely by automated means; we don't make any today.

To exercise them, email support@muush.dev with the subject "ARCO rights" and include:

1. 1Your name and the email where you want our reply.
2. 2A copy of your official ID. If someone represents you, their ID and the document that proves it.
3. 3Which data and which right you want to exercise. For a correction, the correct data.
4. 4Any document that helps us find your data.

We reply within 20 business days at most. If your request is valid, we carry it out within the following 15 business days. It's free.

How to withdraw consent or limit the use of your data

Email support@muush.dev with the subject "Withdraw consent" or "Limit use of my data", with the same details as for ARCO rights. Without your data, we may not be able to keep handling your request or your application.

Cookies and pixels

muush.dev uses the technical cookies it needs to work, for example to remember your language and your cookie choice. The rest fall into two categories you accept separately: Analytics, with Google Analytics, to measure visits (the _ga and _ga_* cookies, which last up to 14 months), and Advertising, with Meta Pixel, to measure and show ads (the _fbp cookie, which lasts 90 days). These technologies collect your IP address, browser, pages visited and cookie identifiers.

You can accept or decline them in the site's cookie notice and change your choice here at any time. Your choice lasts 12 months; after that we ask again. If you withdraw your permission, we stop using them and delete their cookies from muush.dev. You can also turn them off in your browser settings or in your Meta account's ad preferences.

Changes to this notice

We publish any change on this page, with its update date at the top. If a change requires your consent, we'll ask for it by email.

Authority

If you believe your data protection rights were violated, you can go to Mexico's Secretaría Anticorrupción y Buen Gobierno, the data protection authority since March 2025.