Privacy | Guijarro Workshop

1. Scope

This Policy applies to Guijarro Workshop accounts, public pages, project dashboards, manuscript imports, production profiles, jobs, generated assets, billing flows, support requests, and related communications. It does not apply to websites, processors, distributors, printers, marketplaces, or AI providers that you access outside the Workshop, except where we send data to them as part of a requested Workshop feature.

2. Data we collect

Account data

Name, email address, username, password hash, login status, plan tier, account settings, language preference, and authentication/session information.

Manuscript and project data

Project titles, author names, descriptions, manuscript versions, front matter, chapters, back matter, imported EPUB/DOCX/TXT files, cover assets, metadata, source and target languages, regional variants, profile settings, editorial notes, generated translations, generated audio, PDFs, EPUB files, and other output assets.

Production and usage data

Job type, job status, error logs, progress state, timestamps, word counts, usage events, regeneration counts, preview usage, file names, file sizes, MIME types, storage identifiers, and configuration used to create outputs.

Billing data

Plan selection, subscription status, customer identifiers, subscription identifiers, price identifiers, renewal or cancellation status, and billing-related events. Payment-card details are handled by third-party payment processors and are not intended to be stored directly by the Workshop.

Technical data

IP address, browser and device information, approximate location inferred from network data, logs, cookies or similar technologies, request paths, referral data, error reports, security events, and performance data.

Support and contact data

Messages you send through contact or support channels, attachments, issue descriptions, account identifiers, and correspondence history.

3. How we use data

Provide, secure, maintain, troubleshoot, and improve the Workshop.
Create accounts, authenticate users, manage sessions, and prevent unauthorized access.
Import, structure, store, translate, narrate, format, export, and display manuscripts and generated assets.
Run production jobs, previews, chapter regenerations, usage meters, and plan-limit checks.
Process subscriptions, invoices, taxes, billing notices, upgrades, downgrades, cancellations, and payment failures.
Respond to support requests, rights complaints, legal requests, and security incidents.
Detect abuse, enforce Terms, prevent fraud, protect infrastructure, and comply with law.
Analyze aggregate or de-identified usage to understand reliability, capacity, feature adoption, and product quality.

4. AI and manuscript processing

When you request AI-assisted translation, narration, preview, formatting, or related features, the Workshop may send selected manuscript text, profile settings, instructions, metadata, and job context to AI or text-to-speech providers. The amount sent depends on the requested feature; for example, a chapter regeneration may send one chapter and relevant context, while a full translation job may process larger portions of a manuscript.

We do not intentionally use private manuscripts to train a public Guijarro-owned model. Third-party AI providers may process data under their own service terms, data processing commitments, retention settings, and legal obligations. You should not upload content that you are prohibited from sending to third-party processors.

5. How we disclose data

We may disclose data to:

Infrastructure, hosting, storage, database, security, monitoring, email, and support providers.
AI model, translation, text-to-speech, audio processing, and document-generation providers when needed for requested features.
Payment processors, tax providers, banks, and subscription-management services for billing.
Professional advisors, auditors, insurers, legal counsel, and compliance consultants.
Authorities, courts, regulators, or rights holders when legally required or when necessary to protect rights, safety, security, or the integrity of the Workshop.
Successors or affiliates in connection with a merger, financing, restructuring, acquisition, sale of assets, or similar transaction, subject to appropriate confidentiality or privacy commitments.

We do not sell private manuscripts as a product. We do not publish private project content unless you direct us to do so or make it available through a feature intended for publication.

6. Cookies and similar technologies

The Workshop may use cookies or similar technologies for login sessions, CSRF protection, language preferences, security, billing flows, analytics, and feature reliability. Blocking cookies may prevent login, form submission, checkout, or account features from working correctly.

7. Retention

We retain account data, manuscript content, generated assets, job records, usage records, billing records, and logs for as long as needed to provide the Workshop, comply with law, resolve disputes, enforce agreements, maintain backups, prevent abuse, and support legitimate business operations.

Some records, such as invoices, tax records, legal notices, audit logs, abuse records, and backup copies, may be retained after account deletion where permitted or required by law. Deletion requests may not immediately remove data from backup systems or third-party provider retention queues.

8. Security

We use administrative, technical, and organizational measures designed to protect account data, manuscripts, and generated assets. These may include access controls, authentication, logging, provider security practices, transport security, backups, and least-privilege operational workflows.

No online service can guarantee perfect security. You are responsible for safeguarding your password, limiting account access, downloading backups of important files, and promptly reporting suspected unauthorized access.

9. International transfers

Editorial Guijarro S.A. de C.V. is associated with Mexico, and the Workshop may use providers located in Mexico, the United States, the European Union, or other countries. Your data may be processed in jurisdictions with different privacy laws than your own. Where required, we use appropriate contractual, technical, or organizational safeguards for cross-border processing.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, object to processing, withdraw consent, or appeal a decision regarding personal data. Mexican users may have ARCO rights of access, rectification, cancellation, and opposition under applicable law. Users in other jurisdictions may have rights under local privacy, consumer, or data protection laws.

To make a request, use the contact form and include the account email, the right you want to exercise, and enough information to verify your request. We may need to retain certain data for legal, security, billing, or operational reasons even after responding to a request.

11. Children

The Workshop is not directed to children. Users must be old enough to consent to the processing of personal data and enter into these Terms under applicable law, or must use the Workshop with appropriate parent, guardian, school, or organizational authorization.

12. Business and client use

If you upload manuscripts or personal data on behalf of authors, translators, narrators, clients, employees, contractors, estates, or contributors, you are responsible for providing any required notices and obtaining any required permissions. You must not upload confidential third-party material unless you have authority to process it through the Workshop and its providers.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in the Workshop, providers, legal obligations, security practices, or business operations. The effective date will identify the current version. Material updates will be posted on this page or communicated through reasonable means.

14. Contact

Privacy questions or rights requests should be sent through the contact form. Include your name, account email, country or state of residence if relevant, and a clear description of the request.