Content, AI-Generated Designs, Order Review & Print Provider Policy

This Policy is an integral part of Aurvy's Terms & Conditions and is incorporated into them by reference. By using Aurvy, the User accepts this Policy.

1. Scope

Aurvy allows Users to create, modify, and request the manufacturing of designs through artificial intelligence, digital editing, and print-on-demand production.

2. User responsibility

The User is responsible for the content and designs they submit, generate, approve, or commercialize through Aurvy. The User represents that they hold all rights necessary to use any element incorporated into their designs.

3. Third-party elements prohibited

It is prohibited to use Aurvy to generate designs that reproduce, imitate, or evoke trademarks, logos, protected characters, celebrities, copyrighted works, franchises, or any other element protected by third-party rights — including requests for designs that look like, are inspired by, or are in the style of an identifiable brand or third party.

4. Nature of AI-generated designs

Artificial intelligence systems may produce similar results for different users, or results similar to existing works. Aurvy does not warrant that a generated design is original, exclusive, registrable, or free of third-party rights.

5. Conditional acceptance of orders

Approval of a design or completion of a payment does not guarantee manufacturing or delivery. Every order remains subject to compliance review, intellectual-property review, and the policies of our Print Providers. If Aurvy cancels an order after payment, Aurvy will refund the amount paid for the product that was not manufactured or not shipped.

6. Rejection by Printful or other Print Providers

Aurvy may use Printful or other Print Providers. If a provider rejects a design due to possible infringement, prohibited content, or legal risk, Aurvy may cancel the order. A refund of the amount paid for the unmanufactured product is the User's primary remedy. Refunds for manufacturing defects or logistics errors remain governed by the Refund & Replacement Policy.

7. License granted to Aurvy

The User grants Aurvy a non-exclusive, worldwide, royalty-free license to operate the platform; to generate, process, store, manufacture, and print the requested Designs; and to share them with technology providers, Print Providers, and other third parties as necessary. Unless expressly authorized, Aurvy will not use private Designs for external promotional purposes.

8. Indemnification

To the maximum extent permitted by applicable law, the User will indemnify Aurvy against claims arising from content or designs requested, generated, approved, or commercialized by the User, including actual or alleged infringement of third-party rights.

9. Consumer rights

Nothing in this Policy limits non-waivable consumer rights or excludes liabilities that cannot be excluded under applicable law. Aurvy remains responsible for improper charges, processing errors of its own, quality failures when the product is manufactured and delivered, privacy obligations, and any other obligation that the law does not allow to be excluded.

10. Intellectual-property complaints

To report infringement, contact contact@aurvy.shop including identification of the claimant, of the right allegedly infringed, of the challenged content, and a good-faith statement of ownership of the right.

11. Updates

Aurvy may update this Policy as needed to reflect legal, technical, or operational changes. The applicable version is the one in force at the time the platform is used.

12. Transactional email communications

By creating an account or placing an order with Aurvy, the User authorizes email notifications related to their account and orders. These include: a welcome email after email verification, shipping updates (package shipped, package delivered), and order-incident alerts (rejected orders, holds for manual design review).

These are transactional communications and the User cannot opt out of them while maintaining an active account or an in-progress order, because they are necessary to fulfill the purchase contract and to protect the User against problems with their order. They are distinct from marketing communications, which require separate explicit consent and can be revoked at any time from /email-preferences.

13. Personal-data sub-processors

To manufacture, ship, and track orders, Aurvy shares the minimum necessary personal data with the following sub-processors. Where a sub-processor is located outside the European Economic Area or Mexico, the transfer is made under Standard Contractual Clauses or an equivalent safeguard.

• OpenAI (USA) — the descriptions (prompts) written by the User, sent to its image generation API (model gpt-image-1) to create the designs. Name, email address, and payment data are not shared. Data Processing Agreement (DPA) on file.
• Printful (USA / EU) — name, shipping address, order contents, and tracking metadata. Data Processing Agreement (DPA) on file.
• Stripe (USA / EU) — email address, billing address, and payment metadata.
• Resend (USA) — email address and the content of transactional communications.
• Cloudflare (global) — IP addresses, HTTP headers, asset storage (R2).
• DigitalOcean (USA) — application and database hosting.
• Sentry (USA / EU) — error context that may include user_id and email address.

The full list, including copies of the current DPAs, is available upon reasoned request to support@aurvy.shop.

14. Notification timing and reliability

Transactional emails are sent on a best-effort basis through external providers (Resend, with SMTP fallback). Aurvy is not responsible for delays or failed deliveries caused by the recipient's mail server filters, incorrect DNS configuration, or provider outages outside Aurvy's control. The authoritative status of any order is the order detail page inside the User's account at /order, not the email itself.

15. ARCO rights and account deletion

The User may at any time exercise the rights of Access, Rectification, Cancellation, and Objection (“ARCO” rights) recognized by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), as well as the equivalent rights under the GDPR (EU Regulation 2016/679) where applicable.

• Access and portability: from /email-preferences the User can request an export of their data in JSON format. Aurvy will email a signed download link valid for 24 hours.
• Rectification: basic profile data can be updated on the same page.
• Cancellation / account deletion: from /email-preferences. After password confirmation, personal data is anonymized immediately. The account enters a 30-day grace period during which the User can contact support to restore sign-in access and any designs or credits not yet purged (profile details already anonymized cannot be recovered); after the grace period the user record is permanently deleted.
• Objection to marketing communications: at any time via the «Unsubscribe» link in any email or from /email-preferences.

Order-record retention. After account deletion, order records (including CFDI tax invoices and data required by the SAT, Mexico's tax authority) are retained for 11 years, stored encrypted and no longer linked to any account. This period aligns with the 10-year record-keeping duty of the Mexican Commercial Code (Art. 38) and Article 1159 of the Mexican Federal Civil Code (10-year civil statute of limitations), plus one additional year of operational margin, and comfortably exceeds the 5-year tax minimum established by the Mexican Federal Tax Code. The legal basis for this retention is compliance with legal obligations (LFPDPPP Art. 11; GDPR Art. 17.3(b)) and the establishment and defense of legal claims (GDPR Art. 17.3(e)).

For any request not covered by the self-service flows above, contact support@aurvy.shop. Response SLA: 20 business days for residents of Mexico (LFPDPPP Art. 32), 30 calendar days for residents of the EU (GDPR Art. 12.3).

16. Retention and de-identification of AI-generated images

Each image generated with our AI engine is the product of a service rendered in exchange for credits previously purchased by the User, which constitutes a commercial transaction under Mexican law (Commercial Code Art. 38 and Federal Tax Code Arts. 28 and 30). Aurvy retains the material documentation of those transactions for a minimum of 10 years from the date each image is generated.

When the User exercises their right of cancellation under LFPDPPP Art. 25 or the right to erasure under GDPR Art. 17, Aurvy applies the following differentiated treatment to comply with both personal-data protection and tax-retention obligations:

• Identifiable data (name, email address, shipping address, the order history visible in the account) is deleted at the end of the 30-day grace period described in section 15.
• Generated images are de-identified from the User: the prompts and the database records linking each image to the account are permanently deleted, and the image files remain stored under opaque, content-based identifiers that contain no personal data. From that moment the image can no longer be correlated with the User's identity by reasonable means and ceases to constitute personal data under Recital 26 of the GDPR and Art. 3(IX) of the LFPDPPP (dissociated information).
• End of retention. Once the legal retention period lapses, de-identified images become eligible for deletion under Aurvy's data-retention policy; because they are fully de-identified, they contain no personal data during any additional storage period.

De-identified images may be used internally by Aurvy to improve and evaluate generation models, for quality control, and for aggregate statistical analysis. This purpose is grounded in Aurvy's legitimate interest in improving service quality and is exercised over data that is no longer identifiable. Aurvy does not redistribute, sell, or transfer these images to third parties for their own commercial purposes.

A User who wishes to challenge this processing by exercising their right of objection (LFPDPPP Art. 27 / GDPR Art. 21) may do so by writing to support@aurvy.shop. Aurvy will assess whether the grounds prevail over the legitimate interest invoked and will respond within the applicable SLA.