1. Who is responsible
Tecnicora, Managua 103, Santa Elena, 20230 Aguascalientes, Aguascalientes, Mexico, operates OutcomeCraft Social. Contact hola@tecnicora.com for privacy questions and rights requests. Tecnicora is the controller for waitlist, account, billing, support and service-security administration data.
For editorial knowledge, connected-account content and material submitted by a customer organization, that customer determines what it provides and why. Tecnicora processes that material to provide OutcomeCraft under the applicable customer agreement. Contact your organization first when it controls the data.
2. Data we process
- Waitlist: name, work email, organization, intended use, language, consent, attribution, timestamps, submission count and a one-way network-address hash. We do not store the raw network address in the waitlist record.
- Account and team: name, email, password hash when password login is used, Google identity reference, organization, role, verification, MFA configuration, recovery-code hashes, session/device information and security-event hashes.
- Connections: provider account identifiers, display names, authorized scopes, token expiry, encrypted OAuth credentials and connection status for X and AI connectors.
- Editorial service: strategy, voice, examples, feedback, approved knowledge capsules, optional source titles/URLs, generated posts and replies, publication status and public X metrics.
- Usage and support: model-token counts, X-operation estimates, model/operation identifiers, audit events, safe error details and communications you send us.
OutcomeCraft is not designed to receive special-category or sensitive personal data. Do not submit health, biometric, financial-account, government-identifier, precise-location or similarly sensitive material unless Tecnicora has expressly agreed in writing.
3. Why and on what basis
| Purpose | Typical basis |
|---|---|
| Review waitlist requests and contact prospective customers | Your affirmative request/consent and steps toward a service relationship |
| Create accounts, authenticate users, provide workspaces, generate content and support publishing | Performance of the service agreement and customer instructions |
| Secure the service, prevent abuse, maintain audit records and troubleshoot | Legitimate interests in operating a safe service and compliance obligations |
| Meter usage, estimate costs, invoice and keep business records | Contract performance and legal obligations |
| Send optional product or marketing communication | Consent where required; you can opt out at any time |
4. Sources and recipients
We receive data from you, your organization, connected providers you authorize, public X content selected by the service, and security signals generated when the service is used. We disclose data only as needed to personnel supporting the service, the listed service providers, connected providers at your direction, professional advisers, a business successor, or authorities when legally required. We do not sell personal data.
5. International processing
Tecnicora and its providers may process data in Mexico, the United States, the European Economic Area and other locations where a provider operates. Where applicable, Tecnicora relies on the customer agreement, provider data-protection terms, adequacy decisions or contractual safeguards. Contact us to request information about safeguards relevant to your data.
6. Retention
We retain waitlist records while a request is active and for a reasonable period needed to manage invitations, prevent abuse and document consent. Account, workspace, derived editorial outputs, customer-facing service history, internal cost records and audit data are retained while the service relationship is active and afterward only as needed for security, disputes, legal obligations and legitimate business records. Public X post text used as an analysis input is held in a shared operational cache for no more than 24 hours and is removed from tenant records after generation; identifiers and OutcomeCraft-derived outputs may remain for audit and service continuity. OAuth tokens remain until expiry, revocation, disconnection or replacement. We purge expired cache entries and must honor X deletion, modification, protection and suspension signals; availability of an automated compliance stream depends on the applicable X access tier.
7. Your choices and rights
Depending on applicable law, you may request access, a portable copy, correction/rectification, deletion/cancellation, restriction, objection, or withdrawal of consent. Mexican residents may exercise Access, Rectification, Cancellation and Opposition (ARCO) rights. Email hola@tecnicora.com with your name, organization, request, affected data and a way to verify your identity. We may request only the additional information reasonably needed to verify and locate the record. Rights are free except permitted reproduction or delivery costs.
Workspace owners can revoke sessions, members and provider/AI connections in the portal. Full export and organization deletion currently require a verified support request; they are not represented as self-service features.
8. Automated recommendations
Models generate and score content recommendations, but OutcomeCraft does not use them to make legal or similarly significant decisions about people. Customers must review generated content and remain responsible for deciding whether to publish it.
9. Security, cookies, analytics and children
See our security overview. Necessary cookies preserve language and authenticated sessions. On public pages, and only after you accept optional analytics, Google Analytics helps us understand page visits, navigation and conversion actions such as opening pricing, the waitlist or login. We do not send workspace content, editorial material, email addresses or authenticated portal activity to Google Analytics. Advertising storage, signals and personalization are disabled. You can reject analytics without losing access and can withdraw consent by clearing the site preference in your browser. OutcomeCraft is a business service and is not directed to children.
10. Complaints and changes
You may contact us first so we can address a concern. Where applicable, you may also complain to Malta's Information and Data Protection Commissioner, the competent Mexican data-protection authority, or your local supervisory authority. Material notice changes will be posted here with a new effective date and, when appropriate, communicated through the service or email.