first commit

frontend/legal/privacy_policy.md

@@ -0,0 +1,221 @@
+# Spanglish Website – Privacy Policy
+
+Last updated: [Insert Date]
+
+---
+
+## 1. Introduction
+
+Spanglish ("we", "us", "our") operates a community events and language exchange platform in Paraguay.
+
+This Privacy Policy explains how we collect, use, store, and protect personal data when users interact with our website, services, and events.
+
+By using our website and services, you agree to the practices described in this policy.
+
+---
+
+## 2. Legal Basis
+
+This policy is aligned with Paraguayan regulations on electronic commerce and personal data protection, as well as international best practices.
+
+We process personal data based on:
+
+* User consent
+* Contractual necessity (event participation)
+* Legal obligations (invoicing, accounting)
+* Legitimate business interests
+
+---
+
+## 3. Information We Collect
+
+We may collect the following personal data:
+
+### 3.1 Identification Data
+
+* Full name
+* Email address
+* Phone number
+* Username (if applicable)
+
+### 3.2 Account Data
+
+* Login credentials (encrypted)
+* Authentication methods (Google, email code)
+* Account status
+
+### 3.3 Booking & Event Data
+
+* Event registrations
+* Ticket history
+* Attendance records
+* Payment status
+
+### 3.4 Financial & Tax Data
+
+* Payment references
+* Transaction records
+* RUC number (if provided)
+* Invoice information
+
+We do not store credit card details.
+
+### 3.5 Technical Data
+
+* IP address
+* Browser type
+* Device information
+* Access logs
+
+---
+
+## 4. How We Use Your Information
+
+We use personal data to:
+
+* Manage event registrations
+* Process payments
+* Generate invoices
+* Communicate with users
+* Provide customer support
+* Improve our services
+* Comply with legal obligations
+* Prevent fraud and abuse
+
+We do not sell personal data to third parties.
+
+---
+
+## 5. Legal Use of RUC Information
+
+If you provide a RUC number, it is used exclusively for:
+
+* Issuing tax-compliant invoices
+* Accounting and reporting obligations
+
+RUC data is stored securely and accessed only by authorized staff.
+
+---
+
+## 6. Cookies and Tracking
+
+We may use cookies and similar technologies to:
+
+* Maintain user sessions
+* Analyze website usage
+* Improve performance
+
+Users may disable cookies in their browser settings. Some features may not function correctly without cookies.
+
+---
+
+## 7. Data Sharing
+
+We may share limited data with trusted service providers, including:
+
+* Payment processors (TPago, Bancard, LNbits)
+* Email service providers
+* Hosting providers
+* Analytics providers
+
+These providers process data only under our instructions.
+
+We may disclose information when required by law.
+
+---
+
+## 8. Data Storage and Security
+
+We implement technical and organizational measures to protect personal data, including:
+
+* Encrypted passwords
+* Secure servers
+* Access controls
+* Regular backups
+* Monitoring and logging
+
+Despite our efforts, no system is completely secure.
+
+---
+
+## 9. Data Retention
+
+We retain personal data only as long as necessary for:
+
+* Service provision
+* Legal compliance
+* Accounting requirements
+* Dispute resolution
+
+When no longer required, data is securely deleted or anonymized.
+
+---
+
+## 10. User Rights
+
+Users have the right to:
+
+* Access their personal data
+* Correct inaccurate data
+* Request deletion
+* Withdraw consent
+* Object to certain processing
+* Request data export
+
+Requests may be submitted via our contact page.
+
+---
+
+## 11. Marketing Communications
+
+Users may opt in to receive promotional emails.
+
+Users may opt out at any time using the unsubscribe link or account settings.
+
+---
+
+## 12. International Data Transfers
+
+Some service providers may be located outside Paraguay.
+
+When data is transferred internationally, we ensure adequate protection measures.
+
+---
+
+## 13. Children’s Privacy
+
+Our services are intended for users aged 16 and older.
+
+We do not knowingly collect data from minors without parental consent.
+
+---
+
+## 14. Changes to This Policy
+
+We may update this Privacy Policy periodically.
+
+Changes will be published on this page with an updated date.
+
+Continued use of the service constitutes acceptance of the revised policy.
+
+---
+
+## 15. Contact Information
+
+For privacy-related questions or requests, contact:
+
+Spanglish
+Email: [Insert Contact Email]
+Website: [Insert Website URL]
+
+---
+
+## 16. Supervisory Authority
+
+If you believe your data protection rights have been violated, you may contact the relevant Paraguayan regulatory authority.
+
+---
+
+## 17. Acceptance
+
+By using our website and services, you acknowledge that you have read and understood this Privacy Policy.