VIVARIA Privacy Policy

[LEGAL_NAME] (hereinafter, “VIVARIA” or “the Company”), with domicile at [LEGAL_ADDRESS], is the party responsible for processing the personal data you provide, in accordance with the LFPDPPP and its Regulations.

For questions about this Notice or to exercise your rights, you may contact us at: [PRIVACY_EMAIL].

We collect and process the following categories of personal data:

• Account data: name or username, email address, password (stored encrypted; managed by Clerk, Inc.), declaration of legal age, and country of residence where applicable.
• Payment data: payments are processed directly by Mercado Pago (Mercado Libre S. de R.L. de C.V.). VIVARIA does not store or process credit card, debit card or bank account data. We keep only the transaction records (amount, date, payment reference, status) needed for reconciliation, support and tax compliance.
• Usage and activity data: history of conversations with NPCs (fictional characters), tokens acquired, used and available balance, scenes/events/premium content unlocked, generated clips and their privacy settings, usage metrics (sessions, clicks, in-platform events), and account preferences and settings.
• Technical data: IP address, device type, operating system and browser, session identifiers, and error and technical activity logs.
• Cookies and local storage: session and authentication cookies managed by Clerk to keep your session active; browser local storage may be used to remember interface preferences. See the Cookie Policy.
• Sensitive data: VIVARIA does not request or directly collect sensitive data (biometric, health, racial/ethnic origin, religious beliefs, political affiliation, sexual orientation). If this changes in the future, this Notice will be updated and express consent will be requested.

Primary purposes (necessary to provide the service): create and manage your user account; process token purchases and credit them; enable conversations with NPCs and access to scenes, events and premium content; generate, store and manage the clips you produce; provide technical support and handle reports and claims; moderate use and apply the Community Guidelines; maintain platform security and prevent fraud; and comply with applicable legal and tax obligations.

Secondary purposes (you may object): sending communications about news, seasons, updates and promotions; aggregated, anonymized statistical analysis to improve the service; and use of publicly shared user clips as samples or references in promotional materials.

To object to secondary purposes, write to [PRIVACY_EMAIL] stating your username and the specific purpose you object to. Your objection will not affect your access to the service.

To operate VIVARIA, we share or allow access to personal data with the following providers, who act as data processors under the Company's instructions:

• Clerk, Inc. (United States) — Authentication and user account management.
• Mercado Pago / Mercado Libre S. de R.L. de C.V. (Mexico) — Payment processing.
• Anthropic, PBC (United States) — AI generation of NPC responses.
• OpenAI, LLC (United States) — Voice synthesis (TTS) for characters.
• Cloudflare, Inc. (United States) — CDN, media storage and security.
• [ANALYTICS_PROVIDER] ([COUNTRY]) — Aggregate usage analytics.
• VIVARIA does not sell, rent or trade personal data to third parties for those third parties' own marketing.

You have the right to Access, Rectify, Cancel and Object (ARCO) regarding your personal data. To exercise any of these rights, email [PRIVACY_EMAIL] with: (1) your full name and VIVARIA username, (2) the right you wish to exercise and a clear description of your request, and (3) a document or means proving your identity.

We will respond within a maximum of 20 business days from receipt of your complete request, in accordance with the LFPDPPP.

• Active account data — while the account remains active.
• NPC conversation history — [X] months from generation.
• Transaction and payment records — 5 years (tax obligation).
• Public clips generated — until the user deletes them or closes the account.
• Technical and security logs — [X] days.
• Cancelled account data — [X] days after cancellation, then anonymization.

VIVARIA implements technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure password management, access control and monitoring. However, no system is infallible. In the event of a security incident that significantly affects your personal data, we will notify you in accordance with the timeframes and terms set by the LFPDPPP and the competent authorities.

The Company may update this Privacy Notice. For substantial changes, you will be notified by email to the address registered in your account at least [X] days in advance. The current version will always be available on the platform. Continued use after notification means you accept the changes.

If you believe your rights have been violated, you may file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at www.inai.org.mx.