This English version is provided for convenience. The Spanish version governs.

Privacy Notice

Last updated: October 9, 2026 · Version 2026-10-09

1. Who is responsible

David Payan Garcia (“Atril”), located at Alazan 8951, Interior 2, Hacienda de las Torres, C.P. 32695, Ciudad Juárez, Chihuahua, México, is responsible for your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable law.

Contact for anything about your personal data: d.payan09@outlook.com · Phone +52 657 192 9339. This contact handles access, rectification, cancellation and objection (ARCO) requests.

2. Data we process

• Contact data: your email address.
• Sign-in data: your password, stored only as an irreversible hash (PBKDF2-SHA256). No one at Atril can see it.
• Content you write: titles, lyrics and chords of your songs, if you use an account.
• Subscription data: plan, status, renewal dates, the customer ID Stripe assigns us and the record of your authorization for recurring charges (accepted text, date and time).
• Security data: a session cookie and the minimal technical logs kept by our infrastructure provider (such as IP address) to protect the service.

Payment data: Atril does not receive or store your card details. You enter them directly on Stripe's secure page, and Stripe handles them as a controller under its own privacy notice.

We do not process sensitive personal data.

Guest mode: as a guest, your songs and preferences are stored only on your device (browser local storage) and are not sent to our servers.

3. Purposes

We use your data for these purposes, all necessary for our relationship with you:

1. Creating and managing your account and signing you in.
2. Providing the service: saving your songs and giving you access to your plan's features.
3. Processing your subscription, charges, cancellations and refunds through Stripe.
4. Sending service emails: password resets, a notice before each renewal and confirmations of account changes.
5. Keeping proof of your express consent to recurring charges, as Mexico's Federal Consumer Protection Law requires.
6. Protecting the service and preventing fraud and unauthorized access.
7. Handling your requests, complaints and rights, and meeting legal and tax obligations.

We do not use your data for advertising, marketing or profiling, and we do not sell it. We make no automated decisions with legal effects on you.

4. Processors and transfers

To operate, we share data with providers that process it on Atril's behalf and under our instructions:

• Cloudflare, Inc. (United States): website hosting, database and security.
• Stripe: payment and subscription processing.
• Resend (United States): service emails.

Some of these providers process data outside Mexico under contractual safeguards. We disclose data to authorities only when a law or a valid order requires it. Otherwise, we do not transfer your data to third parties.

5. Your ARCO rights and withdrawing consent

You may Access, Rectify or update, Cancel (delete) and Object to the processing of your data, and withdraw your consent, free of charge.

Instantly in the app: in My account you can download all your data (access), change your email and password (rectification) and delete your account (cancellation).

By email: write to d.payan09@outlook.com from your account email with your name, the right you are exercising, a clear description of your request and, if acting for someone else, proof of representation. We will reply within 20 days and, if your request is valid, carry it out within the following 15 days. Each period may be extended once by an equal period when justified.

Withdrawing consent or deleting data the service needs means we can no longer provide it and, where applicable, your subscription will be canceled.

6. Limiting the use of your data

Atril does not send advertising. To limit any other use, email d.payan09@outlook.com.

7. Cookies and local storage

We use one strictly necessary cookie to keep you signed in (atril_s, up to 30 days). We keep your preferences (language, notation, text size) and, in guest mode, your songs in your browser's local storage. We use no third-party tracking, analytics or advertising cookies. Fonts are served from our own site.

8. Retention

We keep your data while you have an account. When you delete it we erase your email, password, songs and sessions. We keep only: (a) the record of your recurring-charge authorization, without your email in clear text, to resolve disputes under consumer law, and (b) the payment records Stripe keeps and those tax law requires, for the periods those laws set (generally 5 years).

9. Security

We apply administrative, technical and physical safeguards: encryption in transit (HTTPS), hashed passwords, protected cookies, lockout after repeated failed sign-ins and restricted database access. If a breach significantly affects your rights, we will tell you right away.

10. Minors

Atril is intended for people 18 and older. Minors must use it with the permission and supervision of a parent or guardian, who is responsible for giving consent.

11. Changes

We will post any change on this page with its update date. If a change is substantial, we will email you and, where the law requires it, ask for your consent again.

12. Authority

If you believe your right to personal data protection has been violated, you may contact Mexico's Secretaría Anticorrupción y Buen Gobierno, the competent authority.