1. Who is responsible
Tecnicora, Managua 103, Santa Elena, 20230 Aguascalientes, Aguascalientes, Mexico, operates OutcomeCraft Social. Contact hola@tecnicora.com for privacy questions and rights requests. Tecnicora is the controller for waitlist, account, billing, support and service-security administration data.
For editorial knowledge, connected-account content and material submitted by a customer organization, that customer determines what it provides and why. Tecnicora processes that material to provide OutcomeCraft under the applicable customer agreement. Contact your organization first when it controls the data.
2. Data we process
- Waitlist: name, work email, organization, intended use, language, consent, attribution, timestamps, submission count and a one-way network-address hash. We do not store the raw network address in the waitlist record.
- Account and team: name, email, password hash when password login is used, Google identity reference, organization, role, verification, MFA configuration, recovery-code hashes, session/device information and security-event hashes.
- Connections: provider account identifiers, display names, authorized scopes, token expiry, encrypted OAuth credentials and connection status for X, Notion and AI connectors.
- Editorial service: strategy, voice, examples, feedback, approved knowledge, source titles/URLs, generated posts and replies, publication status and public X metrics.
- Usage and support: model-token counts, X-operation estimates, model/operation identifiers, audit events, safe error details and communications you send us.
OutcomeCraft is not designed to receive special-category or sensitive personal data. Do not submit health, biometric, financial-account, government-identifier, precise-location or similarly sensitive material unless Tecnicora has expressly agreed in writing.
3. Why and on what basis
| Purpose | Typical basis |
|---|---|
| Review waitlist requests and contact prospective customers | Your affirmative request/consent and steps toward a service relationship |
| Create accounts, authenticate users, provide workspaces, generate content and support publishing | Performance of the service agreement and customer instructions |
| Secure the service, prevent abuse, maintain audit records and troubleshoot | Legitimate interests in operating a safe service and compliance obligations |
| Meter usage, estimate costs, invoice and keep business records | Contract performance and legal obligations |
| Send optional product or marketing communication | Consent where required; you can opt out at any time |
4. Sources and recipients
We receive data from you, your organization, connected providers you authorize, public X content selected by the service, and security signals generated when the service is used. We disclose data only as needed to personnel supporting the service, the listed service providers, connected providers at your direction, professional advisers, a business successor, or authorities when legally required. We do not sell personal data.
5. International processing
Tecnicora and its providers may process data in Mexico, the United States, the European Economic Area and other locations where a provider operates. Where applicable, Tecnicora relies on the customer agreement, provider data-protection terms, adequacy decisions or contractual safeguards. Contact us to request information about safeguards relevant to your data.
6. Retention
We retain waitlist records while a request is active and for a reasonable period needed to manage invitations, prevent abuse and document consent. Account, workspace, editorial, usage and audit data is retained while the service relationship is active and afterward only as needed for security, disputes, legal obligations and legitimate business records. OAuth tokens remain until expiry, revocation, disconnection or replacement. Backup and log copies may remain for their normal protected rotation period. We delete or de-identify data when it is no longer needed under these criteria.
7. Your choices and rights
Depending on applicable law, you may request access, a portable copy, correction/rectification, deletion/cancellation, restriction, objection, or withdrawal of consent. Mexican residents may exercise Access, Rectification, Cancellation and Opposition (ARCO) rights. Email hola@tecnicora.com with your name, organization, request, affected data and a way to verify your identity. We may request only the additional information reasonably needed to verify and locate the record. Rights are free except permitted reproduction or delivery costs.
Workspace owners can revoke sessions, members and provider/AI connections in the portal. Full export and organization deletion currently require a verified support request; they are not represented as self-service features.
8. Automated recommendations
Models generate and score content recommendations, but OutcomeCraft does not use them to make legal or similarly significant decisions about people. Customers must review generated content and remain responsible for deciding whether to publish it.
9. Security, cookies and children
See our security overview. Public pages do not currently use advertising analytics. Necessary cookies preserve language and authenticated sessions. OutcomeCraft is a business service and is not directed to children.
10. Complaints and changes
You may contact us first so we can address a concern. Where applicable, you may also complain to Malta's Information and Data Protection Commissioner, the competent Mexican data-protection authority, or your local supervisory authority. Material notice changes will be posted here with a new effective date and, when appropriate, communicated through the service or email.