Privacy Policy

Publica Now S.A.S. ("Company", "we", "us", or "our") operates the Publica Now platform ("Platform"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Platform. By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

Account Data

When you create an account, we collect information you provide directly, including:

• Name and email address
• Password (stored in hashed form)
• Profile information (bio, avatar, website URL) if you create a Creator profile
• Language preference

Usage Data

We automatically collect certain information when you use the Platform, including:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, features used, and actions taken on the Platform
• Date and time of access
• Referring URL

Payment Data

When you make purchases or receive payouts, we collect transaction-related data, including:

• Transaction amounts, dates, and descriptions
• Payment method identifiers (we do not store full credit card numbers)
• Billing address information
• Payout account details for Creators

Payment processing is handled by our third-party payment partners. We do not directly store sensitive financial information such as full credit card numbers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate the Platform, process transactions, deliver purchased content, and manage your account.
• Communication: To send you transactional emails (purchase confirmations, payout notifications), security alerts, and service updates.
• Analytics and Improvement: To understand how users interact with the Platform and to improve our features, content, and user experience.
• Creator Analytics: To provide Creators with aggregated, anonymized analytics about their content performance (views, downloads, earnings).
• Security: To detect, prevent, and address fraud, abuse, and security issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

3. Data Sharing

We share your information only in the following circumstances:

Payment Processing

Transaction data is shared with our payment partners, including Yuno, MercadoPago, Bamboo, PayU, and Stripe, solely for the purpose of processing payments and payouts. Each payment provider operates under its own privacy policy.

Content Delivery

To deliver digital content to readers, we share limited account information with Publica.la, our content delivery partner. This includes your user identifier and access permissions necessary to grant you access to purchased content.

Cloud Storage

Content files (uploaded works, cover images) are stored on Amazon Web Services (AWS) S3. AWS processes this data under its own data processing agreement with us.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Cookies

The Platform uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for the Platform to function properly, including session management, authentication, and CSRF protection.
• Preference cookies: To remember your language preference and display settings.
• Analytics cookies: To understand how users interact with the Platform and improve our service.

You can control cookie settings through your browser. Disabling essential cookies may prevent the Platform from functioning correctly.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. After account closure, we may retain certain information for the following periods:

• Transaction records: Retained for a minimum of 5 years to comply with tax and accounting obligations.
• Account data: Deleted within 90 days of account closure, unless retention is required by law.
• Usage data: Anonymized and aggregated data may be retained indefinitely for analytics purposes.
• Content: Creator content is removed from the Platform within a reasonable timeframe after account closure.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete information. You can also update most account information directly through your account settings.
• Deletion: You may request the deletion of your personal information. We will comply with your request unless we are legally required to retain the data.
• Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
• Objection: You may object to certain processing of your personal information.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Under Colombian law (Law 1581 of 2012 and Decree 1377 of 2013), you have the right to know, update, rectify, and delete your personal data. You may also revoke your consent for data processing at any time.

7. Children's Privacy

The Platform is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

8. International Data Transfers

The Platform is operated from Colombia. Your information may be transferred to and processed in countries other than your own, including the United States (for AWS cloud storage and payment processing) and other countries where our service providers operate.

When we transfer your data internationally, we take appropriate safeguards to ensure that your personal information receives an adequate level of protection, including data processing agreements with our service providers and compliance with applicable data protection laws.

9. Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Hashed passwords using secure algorithms.
• Regular security audits and vulnerability assessments.
• Access controls limiting who can access personal data within our organization.

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on the Platform and updating the "Last updated" date. We may also send you a notification via email.

Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Company: Publica Now S.A.S.
• Location: Bogota, Colombia