Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Méndez Labs, a brand operated by César Francisco Méndez García, an individual with business activity (the “Operator”, “we”), located at Clemente Amaya 1159, Col. El Rincón, Autlán de Navarro, Jalisco, Mexico. For any privacy matter, write to us at cesarfmg58@gmail.com.

2. Data we collect

We only collect the data needed to run and improve our services:

• Contact data you provide voluntarily (for example, your email when you subscribe or reach out).
• Usage and device data (pages visited, browser type, aggregated analytics).
• Payment data where applicable: processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Cookies and similar technologies for site functionality and analytics.

3. How we use your data

• Respond to your messages and requests.
• Operate, maintain and improve our sites and products.
• Send communications you requested (for example, launch notices), which you can unsubscribe from at any time.
• Process payments and subscriptions through Stripe.
• Comply with legal obligations and prevent fraud or abuse.

4. Legal basis and consent

We process your data in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, based on your consent, the performance of a contract, or our legitimate interests, as applicable.

5. Processors and third parties

We do not sell your personal data. We share data only with providers that help us operate, under confidentiality obligations:

• Stripe — payment processing.
• Google Cloud / Firebase and Vercel — infrastructure and hosting.
• Resend — email delivery.
• PostHog — usage analytics.

6. Cookies and analytics

We use cookies and analytics tools to understand and improve how the site is used. You can control cookies in your browser settings; disabling them may affect some features.

7. Retention

We keep your data only for as long as needed for the purposes described or as required by law, then delete or anonymize it.

8. Security

We apply reasonable technical and organizational measures to protect your data. No system is 100% foolproof, but we work to reduce risk.

9. International transfers

Some of our providers operate outside Mexico. By using our services, you understand your data may be processed in other countries under appropriate safeguards.

10. Children

Our general services are not directed to children under 13. Products designed specifically for children (for example, Chispa) have their own privacy policy with additional protections and parental controls.

11. Your rights

You have the right to access, rectify, erase or object to the processing of your data, and to withdraw consent. To exercise them, email us at cesarfmg58@gmail.com with your request; we will respond within the timeframes set by law.

12. The Academy: account, payments and community

If you sign up for the Méndez Labs Academy we process additional data to deliver the educational service.

Payments are processed by Stripe. We do not store your card details: Stripe handles them under its own policies. We only keep your subscription status (active/inactive) and a Stripe customer identifier to manage your access.

Your posts and comments in the community are visible to other signed-in students. Do not share information there that you would not want others to see.

• Account data: name and email (authenticated with Firebase).
• Learning data: your progress, quiz results, guiding project and achievements.
• Community data: posts, comments and your Founder badge if applicable.
• Payment data: subscription status and Stripe customer ID (never your card number).
• Legal basis: performance of the service contract and your consent; you may request access, correction or deletion by emailing us.

13. Changes to this policy

We may update this policy. The current version will be posted on this page with its update date.

14. Contact

Questions about your privacy? Email us at cesarfmg58@gmail.com.