Privacy Policy

Last updated: March 19, 2026

Findably.app ("Findably," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it when you use the Findably platform and related services (the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is drafted in compliance with applicable Mexican data protection law, specifically the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its regulations. Users based in other jurisdictions, including the European Union, are encouraged to contact us to understand how their rights under applicable local law (e.g., GDPR) may apply.

1. Information We Collect

1.1 Information You Provide Directly

Account information: name, email address, company name, and password when you register;
Billing information: payment details processed via LemonSqueezy (we do not store full card numbers);
User Content: URLs, website content, brand guidelines, content briefs, and other materials you submit to the Service;
Communications: emails, support requests, and feedback you send us.

1.2 Information We Collect Automatically

Usage data: pages visited, features used, actions taken within the platform, and session duration;
Device and technical data: IP address, browser type, operating system, and referring URLs;
Cookies and similar technologies: as described in Section 6 below;
Log data: server logs generated when you interact with the Service.

1.3 Information from Third Parties

If you connect a third-party account (e.g., Google Search Console, CMS platforms), we may receive data such as website performance metrics and site structure necessary to operate those integrations;
Payment transaction data from LemonSqueezy, limited to what is needed to verify and manage your Subscription.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service delivery: to create and manage your account, generate AI-powered SEO and GEO content, process payments, and operate platform features;
Personalization: to tailor content generation, keyword suggestions, and recommendations to your website, industry, and preferences;
Product improvement: to analyze usage patterns, debug issues, and develop new features — using only aggregated or anonymized data where possible;
Communications: to send you transactional emails (account confirmations, invoices), product updates, and, with your consent, marketing communications;
Security and fraud prevention: to detect, investigate, and prevent unauthorized access, abuse, and other harmful activity;
Legal compliance: to meet our obligations under applicable law, respond to legal process, and enforce our Terms and Conditions.

AI Model Training: We will NOT use your User Content or Generated Content to train general-purpose AI models that are made available to third parties without your explicit written consent. We may use aggregated, anonymized behavioral data (e.g., which content formats perform better) to improve our internal systems.

3. Legal Basis for Processing

Under the LFPDPPP and applicable data protection regulations, we process your personal data on the following bases:

Contract performance: processing necessary to provide the Service you have subscribed to;
Legitimate interests: processing for fraud prevention, security, and product improvement that does not override your rights;
Legal obligation: processing required by Mexican law or other applicable regulations;
Consent: for marketing communications and any processing not covered above.

4. How We Share Your Information

We do not sell your personal data. We may share your information only in the following circumstances:

4.1 Service Providers

We share data with trusted third-party vendors who process information on our behalf, including:

Supabase — database hosting and user authentication;
LemonSqueezy — payment processing and subscription management;
AI model providers (e.g., Anthropic, OpenAI) — to generate content based on your inputs; these providers process your prompts and User Content under their own data processing agreements;
Analytics and monitoring tools — to track platform performance and usage.

All service providers are contractually bound to process your data only as instructed and to maintain appropriate security measures.

4.2 Business Transfers

If Findably undergoes a merger, acquisition, financing, or sale of assets, your information may be transferred to a successor entity as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Findably, our users, or the public.

4.4 With Your Consent

We may share your information for any other purpose with your explicit prior consent.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

Account data is retained for the duration of your account and deleted within 90 days of account closure upon request;
User Content and Generated Content are retained during your Subscription and for up to 12 months after cancellation, after which they are deleted or anonymized;
Billing records are retained for a minimum of 5 years as required by Mexican tax and commercial law;
Usage logs are retained for up to 24 months for security and analytics purposes.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. These include:

Essential cookies: required for authentication, session management, and platform functionality;
Analytics cookies: used to understand how users interact with the Service (e.g., pages visited, feature usage);
Preference cookies: used to remember your settings and personalize your experience.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service. We do not use cookies for cross-site behavioral advertising.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include encrypted data storage and transmission (TLS/HTTPS), role-based access controls, and regular security reviews.

However, no security system is impenetrable. We cannot guarantee absolute security, and we encourage you to use strong passwords and to notify us immediately at [email protected] if you suspect any unauthorized access to your account.

8. International Data Transfers

Findably is operated from Mexico. If you access the Service from outside Mexico, your data may be transferred to and processed in Mexico or other countries where our service providers operate. Where such transfers occur, we take steps to ensure adequate protections are in place consistent with applicable law, including contractual data processing agreements with our providers.

9. Your Rights (Derechos ARCO)

Under the LFPDPPP, you have the right to:

Access (Acceso): request confirmation of whether we process your personal data and obtain a copy of it;
Rectification (Rectificación): request correction of inaccurate or incomplete data;
Cancellation (Cancelación): request deletion of your personal data where there is no legal basis for continued processing;
Opposition (Oposición): object to the processing of your personal data for specific purposes, including marketing.

To exercise any of these rights (collectively, "ARCO Rights"), please send a written request to [email protected] from the email address associated with your account. We will respond within 20 business days. We may request verification of your identity before processing your request.

If you are an EU/EEA resident, you may have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority. Please contact us to discuss how these apply to you.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us at [email protected] and we will promptly delete such information.

11. Third-Party Links & Services

The Service may contain links to third-party websites or integrate with third-party platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing any personal data to them. Findably is not responsible for the privacy practices of any third-party service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice within the Service at least 15 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acknowledgment of the updated policy.

13. Contact & Data Controller

Findably.app is the data controller responsible for your personal data. If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Website: https://findably.app
Jurisdiction: Mexico City, Mexico