Privacy Policy

1. Who is responsible

Portal Checker (portalchecker.com and the Portal Checker app in HubSpot) is operated by SERVICIOS DE CREATIVIDAD POR RESULTADOS, S.C. (“Media Source by Cebra”, “we”, “us”), with its address at Aniceto Ortega 817-D, Col. Del Valle, Mexico City, 03100, Mexico. We are the controller of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, its regulations and other applicable law.

For any privacy matter, write to soporte@mediasource.com.mx. This English version is a translation; if there is any difference, the Spanish version prevails.

2. What data we process

Data you give us:

• Your work email. It's the only thing we ask for; we take your company's domain from it. We don't ask for your name, phone number or a password.
• The goals you choose for the audit and the report language.
• If you pay: the email you pay with and the transaction reference. Your card details are received and processed by Stripe; we never see or store them.
• If you book a call from the report: whatever you enter in the HubSpot meetings calendar.

Data created as you use the service: the access codes we send you (we store only a hashed fingerprint, never the code itself), when you verified your email, access requests and approvals between people at your company, and a record of your payments and credits.

Data from your HubSpot portal, when you connect it. Portal Checker asks for READ-ONLY permissions and never creates, edits or deletes anything in your account. During the audit it reads settings and totals; the report keeps counts and rates (for example, how many contacts have no owner), general account details (portal ID, domain, time zone, currency), the names of pipelines and custom properties, and, only when that finding applies, up to five names or emails of deactivated users who still own records. We don't copy or export your contacts, companies, deals or tickets.

Public data about your domain: your email DNS records (SPF, DKIM, DMARC) and your website's home page, to check your sending and tracking setup.

Site usage data: pages visited, steps in the flow (for example, “requested a code” or “report ready”), browser type and IP address, for statistics. We don't record sessions.

We don't process sensitive personal data. We don't use artificial intelligence to analyze your portal either: the audit is a fixed set of rules.

3. Why we use it

Purposes needed to provide the service:

• Verifying your email and giving you access to Portal Checker and your company's reports.
• Letting other people at your company request and receive access.
• Connecting your HubSpot portal, running the audit and generating your report.
• Charging you, keeping track of your credits and sending you service emails (your code, access notices, “your report is ready”).
• Security, abuse prevention and support.

Secondary purposes, not needed for the service: recording in our CRM (Media Source's HubSpot) your email, your company's domain and your audit's progress (whether you connected, the date, the overall score, the lowest area and the link to your report) so Media Source can offer help with the findings; and measuring site usage to improve it.

If you don't want your data used for secondary purposes, write to soporte@mediasource.com.mx. Saying no doesn't affect the service you paid for.

4. Who can see your report

• People at your company who verify an email on the same domain. The first one gets in directly; after that, a member with access has to approve each new person.
• Inside HubSpot, any user of your portal who opens the Portal Checker app sees that portal's latest paid report.
• The Media Source team, to support you and for the purposes described above.

Your report link alone doesn't open it: you also need to have verified an email at your company. Reports are not indexed by search engines.

5. Who we share data with

We don't sell your data. We only share it with providers that help us run the service, and only what each task needs:

• Vercel (site hosting) and Supabase (database).
• Stripe (payment processing).
• Resend (service emails).
• Hunter.io (checking that an email exists before we send you a code).
• PostHog (site usage analytics).
• HubSpot (our CRM and meetings calendar).

Some of these providers are outside Mexico, mainly in the United States, so your data may be stored or processed there. By using Portal Checker you agree to these transfers, which are needed to provide the service.

We may also disclose data when required by law or a competent authority, or in the event of a sale or transfer of the business.

6. Cookies and similar technologies

• audit_grant: keeps you signed in after you verify your email. Lasts 30 days.
• audit_hs_state: protects the HubSpot connection against forged requests. Lasts 15 minutes and is deleted when you come back from HubSpot.
• PostHog: analytics cookies and local storage, for usage statistics.
• Browser session storage to remember a coupon while you complete checkout.

You can block or delete cookies in your browser; without the session cookie you won't be able to open your reports.

7. How long we keep your data

• The access key to your HubSpot portal is stored encrypted only while the audit runs, and deleted when it finishes (also if the audit couldn't be completed). For a new audit you'll authorize again.
• Reports are kept until you ask us to delete them, so you can look back and compare your progress.
• Payment records are kept for as long as tax laws require.
• Other account data is kept while you use the service or until you ask us to delete it.

8. Your rights and how to exercise them

You have the right to know what data we hold about you and how we use it (access), to correct it (rectification), to have it deleted (cancellation) and to object to certain uses (opposition). You can also withdraw your consent and limit how your data is used or disclosed.

To exercise them, write to soporte@mediasource.com.mx with your name, the email you use with Portal Checker and your request; if someone acts on your behalf, include a letter of authorization. We'll reply within 20 business days.

Deleting your report doesn't uninstall the app from your portal: you can uninstall it at any time from HubSpot's connected apps settings.

If you live outside Mexico, we honor the equivalent rights your local law gives you (for example, access, portability and erasure).

9. Changes to this policy

If we change this policy, we'll publish the new version on this page with its update date. If the change is significant, we'll let you know by email.