sonavo.Controller and contact
The data controller is Julio Antonio Pulido Villalobos, located at Isla Arosa 2844, C.P. 44987, Guadalajara, Jalisco, México. Sonavo is the service name. Contact hello@sonavo.studio for privacy, access, correction, cancellation, objection, consent withdrawal and deletion requests.
Information we process
Account information includes name, email, language, a password hash and verification and recovery records. Project information includes identity, biography, offer, voice, audience, goals, references and examples you provide. Editorial records include generation requests, proposals, drafts, calendar entries, approvals, ratings and comments. Technical information includes sessions, security counters derived from identifiers and logs the hosting provider may generate. We do not request sensitive personal information; avoid including it in free-text fields.
Purposes
Necessary purposes are operating and securing accounts, verifying email, restoring access, saving and editing projects, generating proposals when requested, retaining drafts and calendars, using recent ratings as context for later proposals, and handling support and privacy requests. We do not sell contact lists or use your information for targeted advertising. New optional purposes will be disclosed and consent requested where applicable.
AI generation
When you request proposals, we send OpenAI project context, publication details and recent editorial preferences. Reference links are textual context; Sonavo does not claim to have visited them. Passwords, recovery tokens and server credentials are excluded from generation requests. Ratings guide later requests as context; Sonavo does not retrain models with them. Requests use store=false, which does not mean the provider retains no data. Do not submit third-party confidential information without authorization.
Providers and access
Hostinger provides server hosting; the configured email service processes verification, recovery and support messages. OpenAI processes generation context. Providers may process information outside Mexico under applicable contracts and terms. Project owners and authorized collaborators, where present, have permission-based access. Service administrators may access information for operations and support. We do not disclose information for third-party advertising campaigns. Consent will be requested before any new transfer requiring it.
Social networks
Instagram, Facebook, TikTok and YouTube connections are in preparation. This version does not import statistics, retain social access tokens or automatically publish. This notice will be updated before integrations are enabled to describe permissions, collected data, retention and revocation. Do not share social network passwords with Sonavo.
Retention and safeguards
We retain account and project information as needed to provide the service or meet applicable obligations. You may delete projects or request account deletion. Projects currently have no general automatic expiry. Hosting backups and logs can have different retention cycles; deletion responses will explain removal, any required blocking or retention and applicable periods. Safeguards include access controls, security attributes on session cookies and password hashing. No system eliminates all risk.
Privacy requests
Email hello@sonavo.studio with your name, account email, requested right, affected information and a reply address. For correction, identify the change and supporting evidence where appropriate. We verify identity or representation proportionately; do not initially send passwords or identity documents. Under Mexican ARCO procedures, we communicate a determination within 20 business days and implement approved requests within the following 15 business days, subject to justified statutory extensions. We explain refusals. Withdrawing consent for necessary processing may prevent continued service.
Browser storage and updates
Session cookies and browser storage support language, theme and recovery of work. See our cookie notice. Updates appear at this URL with a date and version. Changes requiring renewed consent will be communicated before the new processing begins.