Privacy Policy

1. Introduction

This Privacy Policy describes how Agente Personal Panchito ("we," "us," or "our") collects, uses, and protects your personal information when you use our personal AI agent services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.

Contact for Privacy Questions: allanc.c.f2000@gmail.com

2. Information We Collect

2.1 Information You Provide

When you use Agente Personal Panchito, we may collect:

• Account Information: Name, email address, and basic profile information
• User Preferences: Settings and customization options for your personal agent
• Communications: Messages, support requests, and feedback you provide

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with the agent, features used, and time spent
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs, error reports, and performance metrics

2.3 Information from Google OAuth

When you authenticate using Google Sign-In, we collect the following information with your explicit consent:

• Email address (scope: userinfo.email) — Used for account identification and authentication
• Basic profile information (scope: userinfo.profile) — Includes your name and profile picture for personalization

Important: We only request the minimum necessary Google OAuth scopes for basic authentication. We do not access your Google Drive, Gmail, Calendar, or other Google services beyond basic profile information.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To create and manage your account, provide the personal AI agent functionality, and enable core features
• Authentication: To verify your identity and secure your account through Google Sign-In
• Personalization: To customize the agent experience based on your preferences and usage patterns
• Communication: To send service updates, respond to support requests, and provide important notifications about your account
• Improvement: To analyze usage patterns, fix bugs, develop new features, and enhance the overall service quality
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Limited Use Disclosure: Agente Personal Panchito's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing Your Information

4.1 Third-Party Services

We use the following third-party services:

• Google OAuth: For user authentication (Google Sign-In). Your Google account information is used solely for authentication purposes.

4.2 Service Providers

Currently, we do not use additional third-party service providers for data processing. If this changes, we will update this policy accordingly.

4.3 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or to protect our rights, property, or safety, or that of our users or the public.

We do not sell your personal information to third parties. We do not share your data for advertising or marketing purposes.

5. Google OAuth Integration

5.1 OAuth Scopes We Request

When you sign in with Google, we request the following OAuth scopes:

5.2 How Google Data is Used

• Your email is used as your unique account identifier
• Your name and profile picture are displayed in your agent interface
• No Google data is used for advertising, credit decisions, or sold to third parties
• We do not access or store your Google password

5.3 Revoking Google Access

You can revoke Agente Personal Panchito's access to your Google account at any time by:

1. Visiting your Google Account Permissions
2. Finding "Agente Personal Panchito" in the list
3. Clicking "Remove Access"

Note: Revoking access will prevent you from signing in, but your account data will remain until you request deletion.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, security, and core functionality
• Preference Cookies: Remember your settings and choices
• Analytics Cookies: Help us understand usage patterns (if implemented)

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features or signing in.

7. Data Security

We implement security measures to protect your information, including:

• Encryption: Data in transit is encrypted using HTTPS/TLS
• Secure Authentication: OAuth 2.0 protocol for Google Sign-In
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities

While we strive to protect your information using industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained while your account is active
• Account Deletion: Personal data is deleted within 30 days of account deletion request
• Legal Requirements: Some data may be retained longer if required by law (e.g., tax records, security logs)
• Anonymized Data: We may retain anonymized usage statistics indefinitely for analytics

9. Your Privacy Rights

Depending on your location, you may have the following rights:

9.1 GDPR Rights (EU/EEA/UK)

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain processing activities
• Right to Restrict Processing: Request limitation of how we process your data

9.2 CCPA Rights (California Residents)

• Right to Know: Request details about personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights

9.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at: allanc.c.f2000@gmail.com

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing certain requests.

10. Children's Privacy (COPPA Compliance)

Agente Personal Panchito is not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13 years old. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at allanc.c.f2000@gmail.com, and we will delete such information from our systems.

For users in the EU/EEA, the minimum age requirement is 16 years old (or the applicable age in your country).

11. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

How we notify you of changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will provide notice through the service or via email
• We recommend reviewing this policy periodically

Your continued use of Agente Personal Panchito after changes to this policy constitutes acceptance of the updated policy. If you do not agree with changes, please discontinue use and contact us to delete your account.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

We aim to respond to all privacy inquiries within 30 days.