Privacy policy

Data controller

Farosio is operated by Nitin Gupta. For any privacy matter, the responsible contact is:

Nitin Gupta
Operating as Farosio
Mexico City, Mexico
privacy@farosio.com

What Farosio does

Farosio helps brand owners publish structured public brand profiles. Some information is public by design because the product exists to make brand facts easier for people, search engines, crawlers, AI systems, media, investors, partners, and other profile visitors to read.

Farosio may also take discovery steps to help approved public profiles be found by participating search engines or similar discovery systems. Farosio does not control when or whether any external system crawls, indexes, stores, summarizes, ranks, or uses a public profile.

Information we collect

We collect account information (login email, authentication provider, and related account identifiers), brand profile details submitted by the brand owner (name, description, website, social links, location, founder information, offerings such as products or services, availability channels, external directory links, logos), onboarding submissions, language preferences, verification status records, rejection reasons, customer-facing review notes, internal admin notes, operational emails sent and received, and basic technical data including request logs, public profile activity summaries, and security events needed for abuse prevention and platform operation.

For website verification, Farosio may generate and process DNS TXT verification tokens, claimed domain records, domain verification status, verification timestamps, and manual domain review notes. DNS verification is used to check technical control of a domain. It does not prove legal ownership of a brand, trademark rights, professional credentials, product quality, service quality, licensing, or factual accuracy of other profile claims.

Site and public profile activity is used internally by Farosio to understand whether Farosio pages are being reached by visitors, referrers, search engines, or crawlers. To estimate unique visitors, Farosio may set an anonymous first-party cookie and store only a hashed version of that identifier. Farosio does not use this to create personal visitor profiles and does not store IP addresses or full user-agent strings for this activity summary.

Public information

Published brand profile information may include brand name, description, category, city, country, website, logo, founder information, social links, external profile links, offerings, availability channels, and reviewed or verified credibility signals. Public profile information may be viewed, copied, indexed, cached, summarized, or processed by third parties once it is published.

Farosio may show interface labels, status pages, public profile labels, and transactional emails in a selected language. Brand-entered content remains exactly as submitted by the brand owner unless the brand owner edits it. Farosio does not automatically translate, certify, or validate the meaning of user-entered brand content.

Account login emails, verification tokens, internal admin notes, unpublished review data, security logs, and private operational records are not displayed on public profile pages. Customer-facing rejection notes may be sent to the relevant account owner by email or shown in the dashboard, but they are not intended to be displayed on the public profile. Internal admin notes are for Farosio operations and are not customer-facing.

Legal basis for processing

Farosio processes personal data on the following bases depending on the activity:

Automated decision-making

Farosio calculates an AI Signal Score for each brand profile. This score is computed automatically based on the completeness and verification status of submitted profile sections. It affects how your profile is presented in the dashboard, how pending or verified signal states are displayed, and how profile progress is summarized.

The score is calculated from defined rules applied to your submitted data — not from an opaque algorithmic model. Manual review may still be required for onboarding submissions, social links, domain status, narrative quality, credibility signals, and other review-required items. You can see which sections contribute to your score from the dashboard. You may request a human review of your score by contacting privacy@farosio.com.

Service providers and data transfers

Farosio uses infrastructure providers to operate the platform. These providers may process data in the United States or other jurisdictions outside your country of residence. Current providers are listed on the Subprocessors page.

Data transfers outside Mexico or the European Economic Area rely on the contractual commitments of these providers, which include standard data processing agreements and, where applicable, standard contractual clauses.

Retention

Account and profile data is kept while your account or public profile is active. Rejected onboarding submissions may be closed and removed from the active product record, but Farosio may retain limited operational records, email records, logs, or review history where necessary for security, legal compliance, fraud prevention, dispute handling, appeals, or enforcement of the terms of use. Account restriction, restoration, deletion confirmation, and deletion audit records may also be retained in limited form for those purposes. Operational logs are retained for a limited period determined by the service provider or Farosio's operational needs.

Deleting an account or profile removes it from Farosio's active service, subject to the limited retention described above. Deletion from Farosio does not guarantee removal from search engines, AI systems, archives, caches, screenshots, or other third-party systems that may already have accessed public profile information.

Your rights

Depending on where you are located, you may have rights over your personal data. These include:

Submit any of these requests through the Privacy and profile requests form. Farosio will respond within a reasonable time. Complex requests or those requiring identity verification may take longer.

Mexico: ARCO rights and Aviso de Privacidad

If you are located in Mexico, you have rights under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) to Access, Rectify, Cancel, and Object to the processing of your personal data (ARCO rights).

To exercise ARCO rights, submit a written request to privacy@farosio.com including your full name, a description of the right you wish to exercise, and any information that helps identify your account or data. Farosio will respond within 20 business days as required by law.

This privacy policy also serves as Farosio's Aviso de Privacidad under LFPDPPP.

Contact and complaints

Privacy questions and data rights requests: privacy@farosio.com

Reports about inaccurate, misleading, or unauthorized public profile content that are not privacy rights requests should be sent to reports@farosio.com.

If you believe Farosio has not handled your personal data correctly, you may lodge a complaint with the relevant supervisory authority in your country. In Mexico, this means the competent authority responsible for personal data protection under applicable Mexican law. In the European Economic Area, contact your local data protection authority.