Privacy Notice

1. Data controller

App de Conquista (Crystal Eros AI), a brand operated by Isaac Palacios Ramírez. Privacy contact: soporte@appdeconquista.com.

2. What data we process

• Account and purchase data: name, email address, country, product purchased, date, amount and payment or subscription status. Hotmart passes them to us when you buy. We never see your card or payment details.
• App usage: log-ins, features you use, dates and settings.
• What you type into the AI: the texts, conversations or screenshots you enter so that Crystal Eros AI can generate replies, and the generated replies. They may contain other people’s data: include only what is necessary.
• Technical and analytics data: IP address, device and browser type, language, pages visited, clicks, scrolling, where the visit came from (for example, the ad or UTM parameters) and cookie identifiers, through Meta Pixel and the Meta Conversions API, Microsoft Clarity and Utmify.
• Support: what you tell us when you write to us.

3. Why we use it and on what legal basis

• Giving you access and providing the service you bought, including generating replies from what you type into the AI → performance of a contract.
• Handling payments, refunds and subscriptions (through Hotmart) and meeting tax and accounting obligations → performance of a contract and legal obligation.
• Customer support → performance of a contract and legitimate interest.
• Security and prevention of fraud, abuse and unauthorized copying of our pages → legitimate interest.
• Measuring and improving our pages and ads (Meta Pixel and Conversions API, Microsoft Clarity, Utmify) → your consent where the law requires it (for example, in the EU/EEA and the United Kingdom); otherwise, legitimate interest.
• Sending you messages about your purchase and, if you agree, news and offers → performance of a contract or consent. You can unsubscribe at any time.

We do not sell your data. We do not use the content of your conversations with the AI for advertising. We do not make automated decisions that produce legal effects on you.

4. Who we share data with

Only with providers we need to run the service, who process data on our instructions under a data protection agreement, or as independent controllers where their own policies say so:

• Hotmart: payment and distribution platform for the products.
• Supabase: database and account management.
• AI model providers: they receive the text you send in order to generate the reply.
• Meta Platforms (Pixel and Conversions API): ad measurement.
• Microsoft (Clarity): page usage analytics.
• Utmify: attribution of sales to campaigns.
• Bunny.net, Cloudflare and Vercel: web hosting and delivery of videos and files.

We may also disclose data to authorities when a law requires it.

5. International transfers

Some of these providers process data outside the European Economic Area (for example, in the United States or Brazil). In those cases the transfer relies on an adequacy decision of the European Commission, where one exists for that country or provider, or on the standard contractual clauses approved by the European Commission, with any additional safeguards required. You can ask us for more information at soporte@appdeconquista.com.

6. How long we keep it

• Account and app usage: while your account is active. If you ask for erasure or close your account, we delete or anonymize the data within a reasonable time, except what we must keep by law.
• Conversations with the AI: while you have an account, so we can show you your history. You can ask us to delete them sooner.
• Purchases and invoicing: for as long as tax, accounting and consumer laws require.
• Analytics: for the limited periods set by each tool.
• Support: as long as needed to resolve your request and handle any possible claims.

7. Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent without affecting what was done before.

To exercise them, write to soporte@appdeconquista.com, ideally from your account’s email address, saying which right you want to exercise. We may ask for something to verify your identity. We reply within one month, which may be extended for complex requests as the law allows.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the data protection supervisory authority of your country (for example, the ICO in the United Kingdom, the CNIL in France or the Garante in Italy).

8. Cookies and similar technologies

Our pages use cookies and similar technologies, our own and those of Meta, Microsoft Clarity and Utmify, to make them work, to measure visits and to know which ads lead to purchases. Clarity may record how you move around the page (clicks and scrolling), with form fields masked.

In countries where the law requires your prior consent for non-essential cookies, they may only be used with it. You can block or delete cookies in your browser settings; some features may then stop working properly.

9. Security

We apply reasonable technical and organizational measures: encrypted connections, restricted access to data and providers with security guarantees. No system is infallible; if a breach affecting you occurs, we will notify you when the law requires it.

10. Minors

The service is only for people aged 18 or over. We do not knowingly collect data from minors; if we find out we have, we delete it.

11. Changes to this notice

If we change this notice, we will publish the new version here with its date and, if the change is significant, we will let you know by email.

12. Contact

For any question about your data: soporte@appdeconquista.com. See also the terms and conditions.