Privacy Policy

1. Who is responsible for your data

Tourora AI is operated by an individual entrepreneur (persona física) based in Mexico, who acts as the data controller for the personal data described here. You can reach us about privacy matters through the contact form on this site.

2. Information we collect

• Account data: your name, email address and password. Passwords are stored only as cryptographic hashes — we never see or store them in plain text.
• Billing data: your subscription plan, billing status and invoice history. Card details are collected and stored by Stripe, our payment processor — they never touch our servers.
• Content you create: tours, proposals, pitches, notes and the business and lead information you save in the CRM.
• Usage data: actions like tour generations, searches and credit consumption, used for metering plan limits, and basic technical logs (such as IP address and browser type) for security and debugging.

3. How we use your information

• To provide the service: generating tours, storing your work, publishing tour pages.
• To manage billing, trials, plan limits and credits.
• To secure the platform, prevent trial abuse and fraud, and debug problems.
• To send transactional emails about your account and billing. We do not sell your personal data, and we do not send third-party advertising.

4. Where your data is stored

Your account data and content are stored in a PostgreSQL database hosted by Neon, and the application runs on Vercel. These providers operate cloud infrastructure that may be located outside Mexico (including in the United States). By using the service you consent to this international transfer, which is protected by the safeguards described in section 6.

5. AI processing

When you generate a tour, pitch or proposal, the relevant business information and your instructions are sent to Anthropic, our AI provider, to produce the content. We use Anthropic’s commercial API, which under Anthropic’s usage policies does not use customer API content to train its models. Avoid including sensitive personal data in content you ask the AI to process.

6. Service providers we share data with

We share data only with the processors needed to run the service, under their respective data protection terms:

• Stripe — payment processing and billing.
• Neon — database hosting (PostgreSQL).
• Vercel — application hosting and delivery.
• Anthropic — AI content generation.
• Google Places — business information and photos used in research and tours.
• Openverse — openly licensed images used in tours.

7. Cookies

We use only essential cookies: a session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

8. Data retention

We keep your data while your account exists. If your subscription ends, your data is retained so you can come back, but premium features are paused. You can request deletion of your account and its data at any time (section 9); billing records may be kept longer where tax or accounting law requires it.

9. Your rights

Under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) you have the ARCO rights: to access, rectify, cancel (delete) and oppose the processing of your personal data. Depending on where you live, you may have similar rights under other laws (such as the GDPR). To exercise any of these rights, contact us through the contact form; we will respond within the timeframes required by applicable law.

10. Security

All traffic is encrypted in transit (HTTPS), passwords are hashed, payment data is handled exclusively by Stripe, and access to production systems is restricted. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you as required by law.

11. Children

Tourora is a business tool and is not directed at children. You must be 18 or older to create an account. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page before they take effect, and by email if they significantly affect how your data is handled.

13. Contact

For any privacy question or request, reach us through the contact form on this site.