← Carta Mágica · Privacy · Terms · Refunds · Español

Privacy Notice

⚠️ Draft — not legal advice; to be reviewed by a lawyer.

Controller: GamaLabs ("we"), operating Carta Mágica (carta.apps.gamalabs.ai), based in Mexico. Privacy contact: privacy@apps.gamalabs.ai. Issued under Mexico's LFPDPPP; also covers the basics of the EU/UK GDPR and California's CCPA/CPRA.

1. Summary

• Your child's details (name, age, city, wish, achievement) never leave your browser. The letter is built on your device; we don't receive or store them and they are not sent to Stripe or anyone else.
• No AI, no photos, no user accounts.
• The service is used and paid for by an adult (parent or guardian).

2. Data we process

• Purchase data (only if you buy): plan, character, a random order number and payment status. Payments are processed by Stripe, which receives your email, country and card details under its own policy; we never receive your full card number.
• Technical data: IP address and server logs kept by Vercel for security.
• Local storage: your browser keeps the language, order number and paid status so you don't lose your purchase. No advertising or tracking cookies.

3. Purposes

Processing payments, delivering the watermark-free letter, support, refunds, chargebacks and fraud prevention. No marketing use.

4. Processors and transfers

Stripe (payments), Vercel (hosting), Upstash (paid-order flags, 30 days). Data may be processed in the USA and other countries (EEA/UK: Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable). We do not sell or share personal data.

5. Retention

Paid-order flags: 30 days. Payment records: as required by tax law (kept by Stripe). Child details: never received.

6. Your rights

Mexico (ARCO): access, rectification, cancellation, opposition, withdrawal of consent — email privacy@apps.gamalabs.ai; we reply within 20 business days. EU/UK (GDPR) and California (CCPA/CPRA) residents have the corresponding rights; you may also complain to your data protection authority.

7. Children

Purchases are made by adults. The service is designed so that no child data reaches our servers.

8. Changes

Changes will be posted on this page with a new date.

Carta Mágica · GamaLabs · Privacy · Terms · Refunds · Español