Privacy Policy

1. Controller. Jesús Ramón Valdez Torres operates FarmAura at https://farm-aura.com. Contact: support@farm-aura.com. This is an entertainment service. See our Terms and Conditions.

2. Data we process. Depending on how you use the Service, we may process: account email; @handle and display name; optional avatar (including URLs from connected social accounts); confirmation that you are 18+; encrypted authenticator (TOTP) secrets and related flags when you enable them; aura purchases, gifts, packages, and ledger entries (including the anonymous flag); linked post URLs, provider, like snapshots, and derived aura; encrypted OAuth access/refresh tokens when you connect TikTok or Instagram; Aura Mark application data (official name, institutional email, recovery email, payment status); security, rate-limit, and server logs; and error/diagnostics data via monitoring tools (e.g. Sentry), which may include a user id/handle, with Session Replay where text and media are masked.

3. Purposes. We use this data to create and secure accounts; authenticate you (email OTP and optional TOTP); display public rankings and profiles; process aura purchases, gifts, slots, and Aura Mark fees via Stripe; sync linked-post reactions into aura; review Aura Mark requests; prevent abuse and fraud; provide support; and keep the Service reliable (including error monitoring).

4. Public vs private. When your aura is greater than zero, your ranking profile is public by @handle (name, avatar, aura level, Aura Mark badge if approved, linked spotlights, and history as shown in the product — gift senders may appear as Anonymous). Emails, authenticator secrets, OAuth tokens, and Aura Mark institutional/recovery emails are not shown on public ranking pages.

5. Processors, providers, and recipients. To provide, maintain, and improve our services, we may use technology providers that process personal data on behalf of the controller and in accordance with the applicable instructions. These providers include Supabase, for authentication and data storage; Stripe, for payment processing; Resend, for transactional communications; Vercel, for hosting and technology infrastructure; and Sentry, for error monitoring and diagnostics.

When you choose to connect certain external accounts or services, we may share the data necessary with the corresponding provider, according to the requested functionality and the purposes described in this Privacy Policy.

We do not sell personal data to third parties for advertising purposes.

6. Retention and deletion. We retain data while your account is active and according to the purposes above. You may delete your account from Account; we then delete or anonymize profile data as described in the product (gifts already received by others may remain as Anonymous). If you request platform data deletion from Meta/Instagram, we process it via our HTTPS callback and remove the Instagram connection, Instagram-linked posts, and Instagram avatar associated with that user; you can check status with the confirmation code at /data-deletion. Full FarmAura account deletion can also be requested at support@farm-aura.com. We may retain limited records required for payments, disputes, security, or legal compliance.

7. Your rights. Where applicable law allows — including ARCO rights under Mexico’s LFPDPPP — you may request access, rectification, cancellation, or objection. Contact: support@farm-aura.com. We may verify your identity before responding.

8. Children. The Service is for adults 18+ only. We do not knowingly collect personal data from anyone under 18 for accounts, purchases, gifts, or linking posts.

9. Changes. We may update this Notice. The version published on this site (with its version/meta line in our legal CMS) is the current one. Continued use after publication constitutes notice of the update for purposes of the Service.