Privacy Notice

In compliance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP), Jhonatan Villagómez Vázquez, an individual and the data controller for PersonCraft, contact hola.abogadia@gmail.com, provides you with the following privacy notice.

1. Data we collect

• Email address and password (the password is stored encrypted — PersonCraft never sees it in plain text).
• The character and scene descriptions you write to generate content ("prompts").
• The images, videos and 3D models the AI generates from your descriptions.
• Payment data — Stripe processes and stores your payment method; PersonCraft only receives confirmation of the charge, never the card number.
• Basic technical data (IP address, request time) to prevent abuse and enforce rate limits.

2. What we use your data for

• Running the service: creating your account, generating your characters and scenes, tracking your credit balance.
• Processing your payments and subscriptions.
• Answering your support requests.
• Preventing abuse and fraud (rate limits, content moderation).

3. Who we share your data with

PersonCraft uses the following providers ("data processors") to run the service. Each one receives only the data it needs for its function:

• Supabase — database, authentication and storage of your images/videos/models.
• fal.ai — receives your character and scene descriptions to generate content with AI.
• Tripo AI — receives your character's image to generate and animate its 3D model.
• Stripe — processes payments and stores your payment method.
• Resend — sends your sign-in emails and account notifications.
• Vercel — hosts the application.
• Upstash — rate-limits requests to prevent abuse.
• Sentry — receives technical reports when something fails, so it can be fixed.

We do not sell your data to third parties for advertising. Some of these providers process data on servers outside Mexico (international data transfer) as a normal part of running a cloud service.

4. Your ARCO rights

Under Mexican data protection law you hold what are known as ARCO rights over your personal data — Access, Rectification, Cancellation and Opposition. These are the rights defined by the LFPDPPP; they are broadly comparable to, but not identical with, the rights granted under other regimes such as the GDPR. You can exercise them at any time:

• Immediate deletion of your account and all your data: available to you directly from the credits panel, inside the app.
• Any other request (access, rectification, opposition): write to hola.abogadia@gmail.com.

5. Changes to this notice

If we change this notice in any material way, we will notify you by email or inside the app before it takes effect.

6. Contact

Questions about this privacy notice: hola.abogadia@gmail.com.