ESEN
Try it for $4

Legal

Privacy Policy

Last updated:

BenDot is a service of INDESA, a sole-proprietorship business registered with the Mercantile Registry of Guatemala ("INDESA," "we," "us"). This policy explains what data we process when you use the studio and its website, what we use it for, who we share it with, how long we keep it and how you can exercise your rights. In short: we use your data to provide the service and bill for it; we don't sell it, we don't use it for advertising and we don't train models on your content. This English version is a translation; if there is any conflict, the Spanish version prevails.

See also: Terms of Service

1. Data controller

INDESA, in Guatemala. For any privacy matter, write to info@bendot.app.

2. What data we process and why

  • Account: your name and your email. If you log in with email and password, Supabase stores the password encrypted and we never see it. If you log in with Google, we receive your name and your email. We use them to create your account, protect it and write to you about it.
  • Payments: Recurrente processes your card. We receive the status of each payment, the amount, the plan and Recurrente's identifiers, never your card number. We use them to give you your credits, manage your subscription, send you its email confirmation and keep our accounting records.
  • Renewal consent: when you start a subscription we store the statement you checked (with the plan, the price and the frequency), the version of these documents, the date, your IP address and your browser type. It is the proof that you accepted automatic renewal.
  • Your work: the projects, the images and files you upload, the files you export and your conversations with the agent. We use them only to provide the service.
  • Shop profile: what you answer during onboarding (type of shop, techniques, machines, country, how you work). It tunes the studio for you; with each task, the agent receives a summary without your free-text answers. We also keep a copy in our database to understand, in the aggregate, which shops use the studio.
  • Usage and credits: the record of each task (model, cost, credits and date). We use it to bill accurately, show you your usage and prevent abuse.
  • Technical data: IP address, browser type and server logs. We use them for the security of the service and to fix errors.

We use no advertising, ad pixels or third-party analytics tools, and we don't sell or share your personal data for advertising.

3. Artificial intelligence

For each task, the studio sends the AI providers what that task needs: the text of your order, the reference images you attach and the summary of your shop profile. The agent works with OpenRouter, which routes it to the chosen model (for example, Google Gemini or Anthropic Claude), and images are generated with Google Gemini or, if it is unavailable, with an image model through OpenRouter. They process that data under their own terms for API use.

We don't use your content to train AI models.

4. Who we share data with

Only with the providers we need to deliver the service, and only what each one needs:

  • Supabase: accounts, login and database.
  • Recurrente: payments and subscriptions.
  • OpenRouter and Google: the AI models (see Section 3).
  • Our server provider: hosts the studio and your files.
  • Our email provider: sends your account emails (confirmation, password recovery and notices).

We may also disclose data if the law or a competent authority requires it, or to defend our rights against abuse.

These providers may be in the United States, in Guatemala or in other countries, so your data may be processed outside your country. We choose providers with appropriate security measures.

5. How long we keep data

  • Your account and your profile: as long as your account exists.
  • Projects and files: until you delete them. A deleted project stays in the trash for 7 days and is then permanently deleted.
  • When you close your account: we delete your projects, files, profile, settings, your usage details and your login immediately, and always within 30 days at most.
  • Payments: the record of each payment and subscription (amount, date, plan and Recurrente's numbers) is kept for as long as accounting and tax laws require, even if you close your account (in that case, without your name or your email).
  • Renewal consents and confirmation emails: what you accepted (plan, price, the statement you checked, the terms version and the time) and what we sent you are kept for as long as consumer laws require, even if you close your account; when you close it, we remove your email, your name, your IP address and your browser.
  • Closure record: we keep for 24 months a record that you closed your account, with the totals of credits and usage, to show that we carried out your request; after that we also delete the account identifier.
  • Technical logs: only as long as needed for security and diagnostics.

6. Your rights

You can ask us to give you access to your data, correct it, send you a copy, delete it or close your account, and you can object to a processing activity. You can download your files yourself from the studio at any time.

To close your account and delete your data you don't need to write to us: do it from Account → "Close my account." For anything else, write to info@bendot.app from your account's email address, so we can verify that it's you. We respond within 30 days at most. Exercising a right costs you nothing and doesn't change the service or the price you get.

If you live in a US state with its own privacy laws (for example, California): we don't sell or share your personal information for advertising, and you can exercise the rights those laws give you by writing to the same email address. You can also file a complaint with the data protection or consumer authority where you live.

7. Cookies and storage in your browser

We only use what is needed for the studio to work:

  • A session cookie that keeps you logged in. It is necessary, no other site reads it, and it expires with your session.
  • In your browser's local storage: your Supabase session, your preferences (light or dark theme, units) and, for a couple of hours, the plan you chose on the website and the page you wanted to go back to.
  • In the tab's storage, which is cleared when you close it: the use case or order you arrived with from the website and, if you are recovering your password, that step.

We use no advertising or analytics cookies, so there is nothing to accept or reject. We respect browser privacy signals such as Global Privacy Control; we don't track you anyway.

8. Security

Everything travels encrypted (HTTPS). Each account has its own separate space and no one else can open your projects. The AI providers' keys live only on the server. No system is infallible: if an incident affecting your data occurs, we'll notify you as the law requires.

9. Minors

BenDot is for people over 18 and is not directed at minors. We don't knowingly collect data from children under 13; if we learn that we have, we delete it.

10. Changes to this policy

If we change something important, we'll notify you by email or inside the studio before it applies. The date above shows the latest version.

11. Contact