Privacy Policy

Last updated: September 7, 2026

Note: this document was prepared without legal counsel and should be reviewed by a qualified attorney before you rely on it. It is provided for transparency and does not constitute legal advice.

1. Who is responsible for your data

Tourora AI is operated by an individual entrepreneur (persona física) based in Mexico, who acts as the data controller for the personal data described here. You can reach us about privacy matters through the contact form on this site.

2. Information we collect

Account data: your name, email address and password. Passwords are stored only as cryptographic hashes — we never see or store them in plain text.
Billing data: your subscription plan, billing status and invoice history. Card details are collected and stored by Stripe, our payment processor — they never touch our servers.
Content you create: tours, proposals, pitches, notes and the business and lead information you save in the CRM.
Usage data: actions like tour generations, searches and credit consumption, used for metering plan limits, and basic technical logs (such as IP address and browser type) for security and debugging.
Optional advertising measurement: if you accept advertising cookies, Meta may receive visits to selected public Tourora pages, an event when you complete registration, advertising campaign parameters and technical information such as your IP address, browser and cookie identifiers. We do not include your registration form fields, payment details or customer content in these events.

3. How we use your information

To provide the service: generating tours, storing your work, publishing tour pages.
To manage billing, trials, plan limits and credits.
To secure the platform, prevent trial abuse and fraud, and debug problems.
With your consent, to measure which Facebook and Instagram advertisements lead to visits and completed registrations and improve delivery of Tourora advertisements.
To send transactional emails about your account and billing. We do not sell your personal data, and we do not send third-party advertising.

4. Where your data is stored

Your account data and content are stored in a PostgreSQL database hosted by Neon, and the application runs on Vercel. These providers operate cloud infrastructure that may be located outside Mexico (including in the United States). By using the service you consent to this international transfer, which is protected by the safeguards described in section 6.

5. AI processing

When you generate a tour, pitch or proposal, the relevant business information and your instructions are sent to Anthropic, our AI provider, to produce the content. We use Anthropic’s commercial API, which under Anthropic’s usage policies does not use customer API content to train its models. Avoid including sensitive personal data in content you ask the AI to process.

6. Service providers we share data with

We use the following services to operate Tourora and, when you accept advertising cookies, measure and improve our advertising. Each service handles data under its applicable terms and privacy policy:

Stripe — payment processing and billing.
Neon — database hosting (PostgreSQL).
Vercel — application hosting and delivery.
Anthropic — AI content generation.
Google Places — business information and photos used in research and tours.
Openverse — openly licensed images used in tours.
Meta — optional advertising measurement through the Meta Pixel, after you accept advertising cookies. Meta may associate events with your Facebook or Instagram account and use them for measurement, advertisement delivery and personalization under its Privacy Policy. This processing may take place outside your country, including in the United States.

7. Cookies and your choices

Essential cookies keep you signed in and support the service. We also store your cookie preference in your browser for up to 180 days. Optional advertising cookies are disabled until you choose to accept them; rejecting them does not prevent you from using Tourora.

When advertising measurement is enabled and you accept it, the Meta Pixel may set cookies such as _fbp and _fbc to relate a public-page visit or completed registration to an advertisement. We do not send events from your dashboard, account-recovery pages or customer tour, website and chatbot pages. Automatic advanced matching is not enabled.

Use Cookie preferences to change your choice or withdraw consent for future advertising measurement. Withdrawing consent stops our integration from sending further events and removes the Meta cookies it can access on this site; it does not undo events already sent to Meta. Browser settings and Meta's ad preferences provide additional controls. For requests about data already sent, contact us or Meta.

8. Data retention

We keep your data while your account exists. If your subscription ends, your data is retained so you can come back, but premium features are paused. You can request deletion of your account and its data at any time (section 9); billing records may be kept longer where tax or accounting law requires it.

9. Your rights

Under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) you have the ARCO rights: to access, rectify, cancel (delete) and oppose the processing of your personal data. Depending on where you live, you may have similar rights under other laws (such as the GDPR). To exercise any of these rights, contact us through the contact form; we will respond within the timeframes required by applicable law.

10. Security

All traffic is encrypted in transit (HTTPS), passwords are hashed, payment data is handled exclusively by Stripe, and access to production systems is restricted. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you as required by law.

11. Children

Tourora is a business tool and is not directed at children. You must be 18 or older to create an account. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page before they take effect, and by email if they significantly affect how your data is handled.

13. Contact

For any privacy question or request, reach us through the contact form on this site.