Privacy Policy (LOPDP - Ecuador)

Data controller: The AI Gen Studio (owner or legal representative).

1. Controller and contact

The data controller is The AI Gen Studio, with [LEGAL NAME / TAX ID], contact email [CONTACT EMAIL]. The data protection officer (DPO) can be reached at [DPO CONTACT, if applicable].

2. Purposes and legal bases

We process personal data to: (a) manage inquiries and contracts (basis: contract performance or pre-contractual measures); (b) billing and compliance with legal obligations (basis: legal obligation); (c) our own marketing, news and site improvement (basis: consent or legitimate interest [under the LOPDP]); (d) site security and fraud prevention (basis: legitimate interest). Where the basis is consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

3. Data we process

Identification and contact data (name, email, phone). Billing and payment data (via payment gateways). Browsing and usage data (cookies and similar technologies). Content you send us (files, prompts) and technical metadata (IP, user agent) for security purposes.

4. Cookies and similar technologies

We use first-party and third-party cookies. You can manage your consent from the cookie banner at any time (see our cookie policy). Necessary cookies are installed without consent because they're essential for the site to work.

5. Recipients and processors

We share data with providers acting as processors: hosting, email, web analytics, payment gateways, support and productivity tools. They process data per our instructions and with appropriate security measures. We may also disclose data to competent authorities when required by law.

6. International transfers

If our providers are located outside Ecuador, international transfers will take place subject to the safeguards required by the LOPDP (contractual clauses, impact assessments and additional measures where applicable).

7. Retention periods

We retain data for as long as the contractual/commercial relationship lasts and, afterward, for the periods necessary to comply with legal obligations and handle claims and liabilities. Marketing data is retained until you withdraw consent or object to the processing.

8. Your rights

You may exercise the rights recognized by the LOPDP: access and copy, rectification and update, erasure, objection, portability, suspension of processing, not being subject to a decision based solely on automated processing, and information and transparency. To exercise them, write to [CONTACT EMAIL] with the subject "LOPDP Rights," stating your request and a way to reach you.

9. Automated decisions and profiling

We do not make decisions based solely on automated processing that produce legal effects or significantly affect you, except where required by law and with your explicit consent and adequate safeguards in place.

10. Security

We apply reasonable technical and organizational measures to protect data (access control, encryption in transit, backups). However, no method is 100% secure. We will notify security incidents under the LOPDP where applicable.

11. Minors

Our services are not directed at minors under 18. Should we come to process data of children or adolescents, we will obtain their legal representative's consent where required and apply reinforced safeguards.

12. Complaints

If you believe your rights have been violated, you can write to us at [CONTACT EMAIL]. You may also file a complaint with Ecuador's Superintendencia de Protección de Datos Personales (SPDP) under applicable regulations.

13. Changes to this Policy

We may update this Privacy Policy. We will publish the date of the last revision and, if changes are substantial, we'll notify you through reasonable means.