Owen Book Studio Comprehensive Privacy Notice
Version: 2026-07-14 Last updated: July 14, 2026
1. Data controller
The controller responsible for processing personal data is Bryan Andres Castillo, operator of Owen Book Studio.
Address: Boulevard Vicente Lombardo Toledano 58, C.P. 72825, San Bernardino Tlaxcalancingo, Puebla, Mexico Email for privacy matters, ARCO rights, and account deletion: [email protected]
2. Scope
This Notice explains how personal data is collected, used, stored, shared, and deleted for people who visit the website, create an account, make a purchase, use the generation tools, or contact support.
3. Data we may process
We may process:
Account data
Name, email address, user identifier, encrypted password or authentication provider information, verification status, settings, and preferences.
Payment and billing data
Product or package purchased, amount, currency, date, payment status, transaction identifier, receipts, tax information voluntarily provided, and limited card details communicated by the payment processor.
Owen Book Studio does not directly store the complete card number or security code.
Technical and usage data
IP address, browser, device, operating system, session identifiers, access dates, security logs, errors, actions performed, credit usage, generation status, and data needed to prevent fraud or abuse.
Project content
Ideas, seeds, instructions, bibles, characters, settings, timelines, outlines, chapters, manuscripts, files, versions, reviews, corrections, generated results, metadata, and exports.
Communications
Support messages, claims, refund requests, ARCO requests, security reports, surveys, and account-related emails.
4. Sensitive and third-party data
Owen Book Studio does not require sensitive personal data to operate.
Avoid entering medical, biometric, genetic, religious, political, sexual, or other sensitive data about real people.
If you voluntarily provide sensitive information, it will be processed only to perform the requested function and in accordance with applicable law.
If you enter another person's personal data, you represent that you have authorization or another valid lawful basis.
5. Primary purposes
We process data to create and administer accounts; authenticate access; save and display projects; process instructions; generate, review, and export content; administer credits; process payments; issue receipts; send transactional emails; provide support; handle refunds; enable account deletion; prevent fraud; investigate errors; protect infrastructure; comply with legal and tax obligations; and establish, exercise, or defend legal rights.
6. Secondary purposes
With your consent, we may use limited data to send you news, promotions, surveys, requests for feedback, and feature recommendations.
You may opt out through the unsubscribe link included in the messages or by writing to [email protected].
Opting out of advertising does not affect necessary messages about payments, security, your account, or support.
7. Technology providers
To provide the Service, we may use external providers acting as processors or technology service providers, including:
- Google Gemini, for artificial intelligence processing and generation;
- DigitalOcean, for infrastructure, servers, databases, and storage;
- Stripe, for payment processing and fraud prevention;
- Resend, for transactional emails; and
- auxiliary security, monitoring, domain, or authentication providers.
Content needed to perform a generation may be sent to artificial intelligence providers and processed on infrastructure located outside Mexico.
We do not sell your manuscripts or personal data.
We do not knowingly use your private projects to train our own or third-party general models intended for other customers without first obtaining your express authorization.
Providers may change. If a change materially alters the processing, we will update this Notice.
8. Disclosures and transfers
We may disclose data to providers acting on our behalf for hosting, storage, artificial intelligence, payments, email, authentication, support, security, monitoring, and fraud prevention.
We may also disclose information when required by an authority, necessary to comply with legal obligations, investigate fraud, address security incidents, complete a business reorganization, or establish, exercise, or defend legal rights.
We will not transfer data to third parties for their own advertising without consent.
9. Retention
We will retain data while the account remains active, it is needed to provide the Service, a stored project exists, a claim is pending, fraud prevention requires it, or a legal or tax obligation applies.
Exports or downloadable files may be deleted after 15 days when this is disclosed within the product.
When you request account deletion, we will delete or anonymize associated data within a reasonable technical period, except for information that must remain blocked due to tax obligations, security, fraud prevention, claims, or legal defense.
Backups may be temporarily retained until they are replaced through the normal technical cycle.
10. Security
We apply reasonable administrative and technical safeguards, including access controls, credential protection, encryption in transit, environment separation, security logs, and provider restrictions.
No system is completely infallible.
If a breach significantly affects your economic or moral rights, we will notify you without undue delay.
11. ARCO rights
You may exercise the rights of Access, Rectification, Cancellation, and Opposition, as well as withdraw consent or limit use and disclosure where legally applicable.
Send your request to [email protected] and include:
- your name;
- a means of receiving our response;
- reasonable information to verify your identity;
- the right you wish to exercise;
- a description of the data; and
- information that allows us to locate the account.
We will communicate our determination within no more than 20 days after receiving a complete request. If the request is granted, we will implement it within the following 15 days, unless an extension is permitted by law.
12. Account deletion
You may request deletion through your settings, when available, or by writing to [email protected].
Deletion may include your profile, projects, manuscripts, instructions, files, results, exports, sessions, and preferences.
We may retain blocked information for billing, tax obligations, security, fraud prevention, claims, or legal defense.
Deleting an account does not automatically cancel a possible subscription. If one exists, it must also be canceled through the applicable mechanism.
13. Cookies
We may use cookies necessary to sign in, maintain your session, remember preferences, protect your account, prevent fraud, maintain security, and operate the website.
If we use advertising cookies or non-essential analytics in the future, we will explain their purpose and request consent where required.
14. Minors
The Service is not intended for anyone under 18 years old.
If we identify that we received data from a minor without valid authorization, we may delete the account and related information.
15. Automated decisions
The artificial intelligence tools generate content and editorial recommendations.
We do not use solely automated decisions to determine access to employment, credit, healthcare, insurance, or other significant legal effects.
16. Changes to the Notice
We may update this Notice due to legal, technical, commercial, or Service changes.
The current version will be available on the website. Relevant changes will be communicated by email, an in-account notice, or a prominent message when necessary.
17. Competent authority
If you believe your rights have been violated, you may file a complaint with Mexico's Ministry of Anti-Corruption and Good Government or the authority that is legally competent.
18. Contact
Data controller: Bryan Andres Castillo Trade name: Owen Book Studio Address: Boulevard Vicente Lombardo Toledano 58, C.P. 72825, San Bernardino Tlaxcalancingo, Puebla, Mexico Email for privacy matters and ARCO rights: [email protected]