Privacy notice

This notice follows the shape of Mexico's LFPDPPP. It is a draft. It does not invent a legal entity.

Data controller

• Legal name: TODO — pending legal review
• RFC: TODO — pending legal review
• Address: TODO — pending legal review
• Privacy email: TODO — pending legal review

Data we collect

Account email, review text you paste, up to five example replies for brand voice, business names on an agency plan, a hash of the IP plus a visitor cookie for the daily quota, and the draft we return. Card numbers stay with Stripe; we do not store them. During the pilot, records are tagged as test data.

Why

To draft replies, to keep Pro history, to apply the plan or credits, to enforce abuse limits, and to keep the service running. If a model key is set, the stripped review text is sent to that provider. Hosting is intended for Vercel. Accounts and rows are intended for Supabase. Payments go through Stripe.

Sensitive reviews

Please do not paste more than the public review. Health, legal, financial and minors' reviews are not stored in full: the history keeps a redacted label plus the safe draft. Emails and phone numbers are stripped before generation.

ARCO rights and cookies

Access, rectification, cancellation and opposition requests go to the privacy email above, once that contact exists. The site uses a visitor cookie (cf_vid), a session cookie when you sign in locally (cf_session), and Supabase auth cookies when that project is connected.