Comprehensive Privacy Notice

Goetia.ai

Data Controller: Nube Ninja, S.A. de C.V.

Website: https://nube.ninja

Privacy Contact Email: hola@nube.ninja

Address: Montecito 38 Piso 16 Oficina 25, Col. Nápoles, Mexico City, Mexico.

1. Identity and address of the data controller

Nube Ninja, S.A. de C.V. is the company responsible for processing the personal data collected through the Goetia.ai platform and its related forms, microsites, informational pages, applications, and digital channels (hereinafter, the "Platform").

For any matter related to privacy, protection of personal data, exercise of rights, or revocation of consent, you can contact us at: hola@nube.ninja.

2. Personal data we may collect

Depending on the service you request within the Platform, we may collect the following categories of personal data:

a) Identification and contact data

Full name.
Email address.
Phone number.
Country and city of residence.
Age.
Sex or gender, when requested by the form.
Additional contact details you voluntarily share with us.

b) Birth, location, and astral context data

Exact date of birth.
Exact or approximate time of birth.
City and country of birth.
Geographical data derived or necessary for the calculation of the service, including latitude, longitude, and other astronomical or location-based birth variables necessary to generate astrological or equivalent reports.

c) Physical data processed through images

High-resolution photographs of one or both hands.
Morphological features, proportions, lines, mounts, visible texture, and other physical elements inferred from images you upload for palmistry analysis.

d) Family and systemic data

Information about your family structure.
Basic genogram of up to three generations.
Data regarding living or deceased relatives.
Information about miscarriages, gestational losses, unrecognized relatives, silenced members of the family system, or other data you may voluntarily provide.
The position you hold among your siblings.

e) Sensitive personal data

We may process sensitive personal data, including but not limited to, when you voluntarily provide them, such as:

Information related to physical or mental health, symptoms, ailments, discomforts, blockages, or illnesses.
Information about emotional, affective, or psychological states.
Accounts of dreams, nightmares, intimate content, grief, breakups, infidelities, traumatic experiences, or personal conflicts.
Information about affective, love, family, or sexual life that you decide to share.
Data that, by their nature, belong to your most intimate sphere or that could lead to discrimination or serious risk in case of improper use.

f) Technical and navigation data

IP address.
Browser, device, operating system, language, and time zone data.
Access logs, date and time of interaction.
Online identifiers.
Data derived from safety measures, fraud prevention, and the use of validation tools like Google reCAPTCHA.
Cookies, similar technologies, and usage data, under the terms of the corresponding policy.

3. Third-party data provided by you

In some services, you may share information about third parties, for example, relatives, partners, ascendants, descendants, or members of your family system. By doing so, you declare under your responsibility that you have sufficient legitimacy to provide such information or that you provide it on your own initiative and liability, acknowledging that certain data may correspond to third parties who are not direct users of the Platform.

When possible and reasonable, you should inform these third parties that you have shared data related to them on the Platform.

4. Purposes of processing

Your personal data may be processed for the following primary purposes, to provide the requested services:

To identify you as a user of the Platform.
To register, authenticate, or manage your service request.
To process forms, requests, consultations, and requirements.
To generate reports, answers, analyses, interpretations, or personalized documents.
To execute mathematical, astronomical, statistical, symbolic, or alphanumeric calculations necessary for the services offered.
To process information using artificial intelligence engines, algorithmic models, automated systems, computational analysis tools, and inference flows.
To analyze photographs of hands for morphological recognition and elaboration of palmistry reports.
To process accounts of dreams, emotions, personal contexts, and related data for the elaboration of personalized interpretations.
To process genograms, family structures, symptoms, or phenomenological descriptions to generate systemic analyses or related reports.
To issue responses, results, or deliverables via email or other digital means.
To provide technical support, user assistance, and request tracking.
To prevent fraud, abuse, unauthorized access, illicit uses, or security breaches.
To comply with legal, regulatory, contractual, and safety obligations.

Additionally, your data may be processed for the following secondary purposes:

To improve our models, flows, engines, and internal processes.
To perform quality metrics, analytics, technical auditing, and service improvement.
To elaborate statistics, internal reports, aggregated analysis, or disconnected information.
To send you communications about updates, changes, features, or relevant service information.
To carry out marketing or commercial prospecting activities, only when permitted by applicable regulations or when there is a sufficient legal basis.

If you do not want your data to be processed for secondary purposes, you can request it via email at hola@nube.ninja.

5. Automated processing and artificial intelligence

The Platform uses artificial intelligence and automated processing systems to analyze the information you provide and generate personalized reports, interpretations, inferences, classifications, output texts, and results.

You accept that:

A substantial part of the processing may be performed by automated means.
The generated results may include inferences, correlations, synthesis, probabilistic interpretations, or algorithmic approximations.
The results do not constitute, by themselves, medical, psychological, psychiatric, legal, financial, or regulated professional diagnoses.
In no case should they be considered a substitute for human professional attention when the nature of the matter requires it.

6. Legal basis for processing

When Mexican law applies, processing is based on the consent of the data subject and, where applicable, the legal relationship derived from the service request.

When the General Data Protection Regulation of the European Union or other analogous European legislation applies, the legal basis may consist, as the case may be, of:

Your explicit consent.
The execution of pre-contractual measures or a service requested by you.
Compliance with legal obligations.
Legitimate interests of the controller, provided they do not override your fundamental rights and freedoms.

In the case of processing sensitive data or special categories of data, consent will be considered reinforced through the express acceptance mechanism implemented in the corresponding forms or processes.

7. Transfers and third parties

Your data may be shared or made available to:

Hosting, cloud, storage, security, email, analytics, and monitoring providers.
Technological providers involved in the processing, generation, or delivery of the service.
Data processors who process data on our behalf.
Competent authorities, when there is a legal obligation, well-founded requirement, or valid mandate.
Third parties necessary for the safe, continuous, or legally required operation of the Platform.

The Platform uses Google reCAPTCHA for protection against automated abuse, spam, and fraud. By submitting forms, you are also bound to the Privacy Policy and Terms of Service of Google as they relate to this tool.

We will not sell your personal data in violation of applicable law. If any applicable legislation considers any disclosure as "sale," "sharing," or an equivalent figure, we will make available the legal mechanisms to exercise their rights.

8. International transfers

Due to the digital and technological nature of the Platform, your data may be stored or processed outside your country of residence, including Mexico, the United States, and other countries where our providers or technological infrastructure operate.

When regulations governing international data transfers apply, Nube Ninja, S.A. de C.V. will adopt reasonable measures and the necessary legal mechanisms to legitimize such transfers in accordance with the corresponding legislation.

9. Data retention

We will keep your personal data only for the time reasonably necessary to:

Fulfill the purposes described in this notice.
Provide the requested service.
Address clarifications, claims, or audits.
Comply with legal, fiscal, security, or legal defense obligations.

As a general rule, personal data may be kept for a period of up to 3 (three) years, except when a legal, regulatory, contractual obligation or an ongoing dispute justifies a longer period. When no longer necessary, data will be eliminated, blocked, anonymized, or dissociated, as appropriate.

10. Rights of the data subjects

In Mexico

You may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as revoke your consent when applicable.

In the European Union and analogous jurisdictions

You may request, as applicable:

Access.
Rectification.
Erasure.
Restriction of processing.
Opposition.
Portability.
Withdrawal of consent.
Review of certain automated processing, when provided by law.

In the United States, when any state law is applicable

Depending on your state of residence and the legal thresholds applicable to the controller, you could have rights such as:

Knowing what personal data is being collected.
Accessing them.
Correcting inaccurate data.
Requesting their deletion.
Obtaining a portable copy.
Opting out of the sale, sharing for cross-context behavioral advertising, or certain profiles, when applicable.
Limiting the use or disclosure of sensitive information, when provided by law.
Not experiencing discrimination for exercising your rights.

11. Procedure for exercising rights

To exercise your rights, you must send a request to the email hola@nube.ninja with the following information:

Full name of the data subject.
Contact email.
Relationship with the Platform or service requested.
Right you wish to exercise.
Clear and precise description of your request.
Reasonable information or documentation to verify your identity, or your representation if applicable.

We will address your request within the deadlines provided by the applicable law or, otherwise, within a reasonable timeframe, depending on the nature of the request.

12. Limitation of use or disclosure

You may request the limitation of the use or disclosure of your data by writing to hola@nube.ninja. In your case, we will implement reasonable measures available according to the nature of the processing and our operational capabilities.

13. Minors

The Platform is not directed to minors in those services expressly reserved for people over 18 years of age. If we detect that personal data of a minor has been collected in violation of our rules or applicable law, we may cancel the service, block the account, and delete the corresponding information.

14. Security

We adopt reasonable administrative, technical, and physical measures to protect your personal data against damage, loss, alteration, destruction, unauthorized access, use, or processing, considering the nature of the information and associated risks.

However, no system is absolutely invulnerable, so we cannot guarantee total security against external events, sophisticated attacks, or third-party actions beyond our control.

15. Voluntary nature of sensitive information

In services involving sensitive information, we will try to clearly identify the necessary fields and request reinforced consent. If you decide not to provide certain data, we may not be able to generate the requested analysis, report, or result.

16. Data accuracy

You are responsible for ensuring that the data provided is accurate, complete, correct, and updated. In services like birth charts, palmistry, dream interpretation, or family constellations, the quality of the result heavily depends on the accuracy and sufficiency of the information you provide.

17. Cookies and similar technologies

The Platform can use cookies, pixels, tags, local storage, and similar technologies for security, functioning, analytical, personalization, and service-improvement purposes. When required by applicable law, consent will be requested through a specific preference management mechanism.

18. Changes to the Privacy Notice

We reserve the right to modify, update, or adapt this privacy notice at any time due to legal, regulatory, operational, technological, or business changes.

Modifications will be made available through the Platform itself or the digital medium we determine as official. We recommend you review this notice periodically.

19. Authority and claims

If you believe your right to personal data protection has been violated, you can first contact us at hola@nube.ninja.

Notwithstanding this, you can turn to the competent authority according to the legislation applicable to your case.

20. Consent

By providing your personal data, using the Platform, uploading images, sending forms, requesting analysis, or checking the corresponding boxes, you manifest that:

You have read this Privacy Notice.
You understand the nature of the processing.
You give your consent for the processing of your personal data and, where applicable, sensitive data, as per this notice.
You understand that certain services are processed using artificial intelligence and automated systems.
You accept that providing the service may require data transfers and processing by external technological handlers.

Last update: April 9, 2026.