1. Who We Are

Brüma ("Brüma", "we", "us", or "our") operates the website at brumalabs.com.ar and provides the Chrona application. Our contact address is contacto@brumalabs.com.ar.

2. Information We Collect

We collect the following types of information:

• Account data: name, email address, hashed password, and plan/subscription status.
• User content: timelines, events, and any data you enter into our services.
• Payment data: processed securely by third-party payment providers such as Paddle. We do not store full card numbers. We may receive limited billing data such as customer ID, subscription ID, country, tax status, and payment status for billing management and support.
• Usage data: IP address, browser type, pages visited, and timestamps — collected via server logs and, optionally, analytics tools.

3. How We Use Your Information

We use your information to:

• Provide and maintain our services;
• Manage your account and subscription;
• Process payments securely through third-party payment providers such as Paddle;
• Send transactional emails (receipts, password resets, service notices);
• Improve and debug our services;
• Comply with legal obligations.

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your data under the following legal bases:

• Contract: processing necessary to perform the services you requested;
• Legitimate interests: improving our services, preventing fraud;
• Consent: marketing emails (where applicable);
• Legal obligation: compliance with applicable laws.

5. Third-Party Services

We use the following third-party services that may process your data:

• Paddle — payment processing and subscription management. See Paddle's Privacy Policy.
• SMTP email provider — transactional email delivery through our configured mail server.
• Hostinger — hosting, deployment infrastructure, and associated data storage.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days unless we are required to retain it by law. Usage logs may be retained for up to 90 days for security purposes.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict processing;
• Data portability (receive your data in a machine-readable format);
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at contacto@brumalabs.com.ar.

8. Cookies

We use only essential cookies necessary for authentication and session management. We do not use tracking or advertising cookies.

9. Data Security

We implement appropriate technical and organizational measures to protect your data. Passwords are hashed using bcrypt. All data in transit is encrypted using TLS. Access to production systems is restricted to authorized personnel.

10. International Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place for any such transfers.

11. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website.

13. Contact

Questions or concerns? Contact us at: contacto@brumalabs.com.ar
Brüma, CABA - Argentina