Who is responsible
The controller of the personal data, under Argentine Law 25.326, is YaEsMio.
Address: Belgrano 1179, B1663AAA San Miguel, Buenos Aires, Argentina
Contact: [email protected]
The registration of this database with the AAIP is in progress.
Data we process
Account: email, the name you give us, the account mode, and the version of the terms and privacy text you accepted, with date, IP address and user agent.
Works: the fingerprint, the title, the type, the authorship statement you make, and the seal date. The work file stays on your device. YaEsMio keeps the fingerprint and the certificate. A file stored by an earlier seal stays on the server until you delete the account.
Public verification shows the fingerprint and the date. The title and the holder appear only if you turn that on.
Support messages you send, deletion and withdrawal requests, the beta waitlist (email, date and source) if you join it, and, if you pay, the payment reference from the store or from the web checkout.
First-party product events (page and action names, without an advertising profile) and client error reports, so we can see what failed.
Why
To create the account, seal the work, keep the vault, show the public check, send the access link and the notice that a seal is ready, and answer access, correction and deletion requests.
The legal bases are your consent when you create the account and the contract for the service you ask for.
Recipients
To date the seal we use the fingerprint of the work.
Data processors acting on our behalf: DonWeb (hosting of the app and the database), Cloudflare (DNS and reverse proxy) and Resend (transactional email: access link, invitation and seal notice).
Apple or Google process the store payment if you buy inside the store app. We do not sell data and we do not use it for third-party ads.
Transfers
DonWeb, the timestamp authorities, Cloudflare or Resend may be outside Argentina. When that happens, the transfer is the one needed to provide the service, and this policy is the notice of that transfer.
Access, correction and deletion
Under Argentine Law 25.326 you have the rights of access, rectification and deletion of your personal data, and to update them when they are incomplete or inaccurate.
You can export the account and correct your name inside the app. You can delete the account from Cuenta, with the button Eliminar cuenta.
You can also ask on the web, without opening the app, at /borrar-cuenta. We send a one-time link to that email. The account is deleted only after you confirm. Typing an email alone does not delete it.
You can write to the contact address above for access, rectification or deletion. If the address is not loaded yet, use the contact form on /contacto.
The supervisory authority is the Agencia de Acceso a la Información Pública (AAIP). You may file a complaint with the AAIP under Law 25.326.
Retention and deletion
The account keeps the fingerprint and the certificate. The file of a new seal stays on your device. A file stored by an earlier seal stays until you delete the account: then we delete that file and the wrapped key, and replace the email. The fingerprint, the seal date and the audit trail remain, because they are the proof that was issued.
Beta waitlist emails stay until you ask us to remove them or the beta closes. Invitation codes stay while they can be used or until they are revoked.
Access-link requests are rate limited: 5 per email address and 20 per IP address every 15 minutes.
Cookies
We use first-party cookies, not advertising cookies. The session cookie (yaesmio_sesion) keeps you signed in. yaesmio_tema stores the light, dark or system theme.
There are also short-lived technical cookies for sign-in (OAuth state and, in development, the access link). We do not use third-party tracking cookies.
Children
The service is not directed to people under 18.