Privacy Policy

About this policy

This Privacy Policy explains how EVENTOS, TECNOLOGIA, Y TEJIDO SOCIAL SAS (“we”, “us”, or “Company”), operator of Wolfgang Hub, handles personal data.

This document is an operational draft for our soft launch and may be updated. It is not a substitute for independent legal advice.

We process personal data in accordance with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and related regulations, including ARCO rights (Access, Rectification, Cancellation, and Opposition).

Contact / privacy requests: help@wolfgang-hub.com

Data controller

Controller: EVENTOS, TECNOLOGIA, Y TEJIDO SOCIAL SAS

Jurisdiction: Mexico

Email: help@wolfgang-hub.com

Personal data we collect

Account data: name, email address, password hash (we do not store plaintext passwords), and email verification status.

Organization and membership data: organization name, roles, and project assignments.

Project and delivery data: briefs, plans, backlog items, comments, effort logs, uploaded requirements text, and related workspace content you or your members submit.

Access tokens: names and hashed values of personal access tokens you create for API or agent integrations.

Preferences: language, region, and theme settings.

Billing data: subscription and customer identifiers managed through Stripe. We do not store full payment card numbers on our servers.

Technical data: session cookies required for authentication, and standard server logs needed to operate and secure the Service.

Purposes

Provide, maintain, and secure the Service (accounts, organizations, projects, backlog, and related features).

Process subscriptions and billing via Stripe.

Send transactional emails such as registration verification codes (for example via Resend).

Operate optional delivery tooling (harness) and integrations you enable, which may involve GitHub, Vercel, Cursor, Slack, or similar providers.

Respond to support requests and improve operational reliability.

Legal basis and consent

We process data as necessary to provide the Service you request, to perform contracts (including subscriptions), to comply with legal obligations, and—where required—based on your consent (for example when you accept these policies at registration).

You may withdraw consent where processing is consent-based, without affecting the lawfulness of prior processing, though some features may become unavailable.

Processors and subprocessors

We use trusted providers to operate the Service, which may include: Stripe (payments), Resend (email), MongoDB Atlas (database), Vercel (hosting), and—when harness or provisioning is enabled—GitHub, Cursor, and related infrastructure providers.

These providers process data on our instructions or as independent controllers for their own services (for example Stripe for payment processing). Their privacy notices also apply to their processing.

Retention

We retain account and workspace data while your account is active and as needed to provide the Service.

After account closure or project deletion, we may retain limited records for legal, security, billing, or dispute-resolution purposes for a reasonable period, then delete or anonymize them where feasible.

Email verification challenges and similar short-lived data are retained only as long as needed for their purpose.

International transfers

Our providers may process data in countries other than Mexico. Where we transfer personal data internationally, we take steps consistent with applicable Mexican law to protect it, including contractual and organizational measures with our providers.

Cookies and similar technologies

We use session and preference cookies necessary to keep you signed in and to remember language, region, and theme settings.

We do not currently use third-party advertising or analytics cookies in the product. If that changes, we will update this policy.

ARCO rights and other requests

You may request Access, Rectification, Cancellation, or Opposition (ARCO) regarding your personal data, and you may limit use or disclosure where applicable.

To exercise these rights, email help@wolfgang-hub.com with enough information to identify your account and your request. We may need to verify your identity before responding.

You may also contact us with privacy questions or complaints at the same address.

Children

The Service is directed to businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.

Changes

We may update this Privacy Policy by posting a revised version on this page with a new effective date. Material changes will be reflected here; continued use of the Service after the effective date means you acknowledge the updated policy.

Questions: help@wolfgang-hub.com