Privacy: Content Hub

AM25 Content Hub is a service provided by AM25, S.A.S. de C.V. (hereinafter, “AM25”), intended for the storage, organization, management, and distribution of digital assets of organizations using the service.

Access to each organization’s space requires authentication and is limited to its authorized users. Authenticated users may also create public links to share specific resources; recipients of those links may access the shared resources without signing in, without gaining access to the rest of the space.

Use of Information

AM25 Content Hub processes user information received from Gate IdP to identify users, verify their membership in an organization, and apply the corresponding access permissions. It also processes files added by users and the information necessary to store, organize, and distribute them and manage the subscription’s storage capacity.

The processing of personal data is governed by AM25’s Data Protection Policy. This privacy policy supplements those provisions with details specific to AM25 Content Hub.

AM25 does not sell data processed through AM25 Content Hub or use it for advertising or training artificial intelligence models.

Authentication and Space Isolation

AM25 Content Hub uses Gate IdP, AM25’s identity and authentication system, to verify the user’s identity and the permissions associated with their organization. Authentication does not grant access to other organizations’ spaces or resources.

Each organization has a separate space isolated from the others. AM25 uses its own space under the same arrangement. Users of one space cannot view or access another space to which they do not belong. Public sharing of specific resources is an access exception limited to the resources an authorized user chooses to share, not the entire space.

Content and Public Links

The user is responsible for the content they add to the service and for having the rights and authorizations necessary to store and share it, including those required when it contains third parties’ personal data. AM25 processes that content to provide the service’s features in accordance with authorized users’ actions.

Creating public links is a decision made by the authenticated user. A resource shared in this way may be viewed or downloaded by anyone who has the link, without authentication. The user must consider the resource’s content before sharing it and distribute the link only where appropriate.

Storage and External Services

AM25 Content Hub uses Cloudflare R2 as its file storage provider. Files and the information necessary for their storage are processed through this service to enable their retention, access, and distribution in accordance with the features used.

Cookies and Internal Activity

AM25 Content Hub uses only session cookies necessary for authentication and maintaining the session. It does not use advertising or analytics cookies.

Recorded internal activity is limited to file upload and deletion operations used to recalculate storage usage and check subscription limits. It is not used for advertising tracking or analyzing user behavior.

Figma Plugin

The AM25 Content Hub plugin for Figma allows users to download resources from their space for use within Figma. It authenticates through Gate IdP and respects the user’s access permissions; it does not allow access to resources for which the user is not authorized.

The integration is limited to downloading AM25 Content Hub resources for use in Figma; it does not send the contents of the Figma document to AM25 Content Hub. Resources added to Figma are also subject to the processing applicable to that platform.

Artificial Intelligence

AM25 Content Hub does not use artificial intelligence or process its data or files through artificial intelligence models.

Retention and Deletion

Data retention and deletion are governed by AM25’s Data Protection Policy, the AM25 Content Hub Terms of Service, and the specific agreements applicable to the subscription.

Following the cancellation or termination of a subscription, AM25 may temporarily retain the organization’s data and content for a reasonable period to allow recovery, address administrative or technical obligations, or complete the closure of the service. Once that period has ended, AM25 may permanently delete them, except for those that must be retained due to legal or administrative obligations.

The client must retain copies of any content it needs before the effective termination of the service and export or download it before the applicable availability period ends. Temporary retention does not guarantee continued access following termination or the recovery of information that has been permanently deleted.