LEGAL
Privacy Policy
Version 1.0 · Effective from [PUBLICATION DATE] · Last updated: October 18, 2026
In 30 seconds
- We collect only what we need to teach and support you: your email, your account and your progress.
- We do not sell your data or use it to train AI models without your express consent.
- We use AI to create, translate and improve content, and we always disclose it. When an AI-powered feature responds to you, we will tell you from the first interaction.
- No decision that significantly affects you is made by a machine alone: you can always request human review.
- You can view, correct, download or delete your data at any time by writing to [PRIVACY EMAIL].
1. Who we are
The House of Routing (“THoR”, “we”) is a learning house for technology, business and personal growth, founded by Jesús Espinoza. We are responsible for processing the personal data we collect on thehouseofrouting.com and the services linked to it.
- Controller: [LEGAL NAME], [ADDRESS].
- Privacy officer: [NAME AND TITLE], [PRIVACY EMAIL].
This policy applies to the website, the waiting list and, once available, the portal, the blog, the learning management system (LMS), the community and the API and webhook integrations. Our social media accounts are also governed by each platform’s policies.
2. What data we collect
| Category | Examples | When |
|---|---|---|
| Contact | Email address and, if you provide it, your name | Today, when you join the waiting list |
| Account and security | Name, email, preferred language, encrypted password, second-factor (2FA) data | When the portal opens |
| Learning | Enrolled paths and Career Plans, progress, lab and assessment results, certificates | When the portal opens |
| AI interactions | The questions you type to an AI assistant and its answers | Only if you use those features |
| Payments | Plan purchased, date and amount. Card details are processed directly by [PAYMENT GATEWAY]; we neither see nor store them | When you purchase a Career Plan |
| Community | Posts, comments and messages you share | When you participate |
| Technical | IP address, browser, device and server logs | Every visit |
We do not ask for sensitive data (health, ethnic origin, beliefs, biometric data). Please do not enter it in forms, comments or conversations with AI.
3. What we use it for
| Purpose | Legal basis |
|---|---|
| Notifying you of the launch and of new Career Plans | Your consent, which you can withdraw at any time |
| Creating and protecting your account, including 2FA | Performance of the service you request |
| Giving you access to paths, labs, mentoring and certificates | Performance of the contract |
| Charging, invoicing and meeting tax obligations | Legal obligation and contract |
| Improving content and measuring what works, using aggregated data | Legitimate interest, balanced against your rights |
| Preventing fraud, abuse and attacks | Legitimate interest and legal obligation |
We do not use your data for purposes incompatible with these without notifying you first and, where applicable, asking for your consent.
4. How we use artificial intelligence
Our house rule is “AI proposes; you decide.” Applied to your data, it means this:
4.1 Content created with AI
We use AI to assist in creating, translating and reviewing classes, posts and materials. Everything generated with AI is labeled as such, and in all four languages (ES · EN · FR · PT) a native speaker reviews each piece before it is published.
4.2 AI features in the portal
- Notice from the start: when an AI-powered assistant, tutor or lab responds to you, you will see it indicated from the first interaction, not hidden in these texts.
- Providers: these features may rely on language model providers such as [AI PROVIDERS, e.g. Anthropic, OpenAI, Google]. We send them only what is needed to respond to you and choose options that do not use your data to train their models.
- Training: we do not use your personal data or your conversations to train our own or third-party models without your express consent, which you can withdraw at any time.
- Retention: we keep AI conversations for [PERIOD, e.g. 30 days] to provide continuity and resolve issues; after that they are deleted or anonymized.
4.3 Automated decisions
We do not make decisions based solely on automated processing that produce legal effects or significantly affect you. AI may suggest your next lab or a path based on your progress; these recommendations are for guidance only. If an automated assessment influences a certificate, you can ask for a person to review it.
5. Who we share it with
We do not sell or rent your data. We share it only with providers that help us deliver the service, under contract and with the same safeguards as this policy:
- Website hosting: Hostinger.
- Database and authentication: [PROVIDER].
- Transactional email and newsletters: [PROVIDER].
- Payments: [PAYMENT GATEWAY].
- AI models: [AI PROVIDERS].
- Automation and notifications: n8n, Make and, if you connect them yourself, Slack or Mattermost via webhooks.
We may also disclose data if required by law or a competent authority, or to protect the rights and safety of the community. If THoR were to change ownership, your data would be transferred with the same protections and we would notify you in advance.
6. International transfers
Our community is in the Americas and Europe, and some providers process data outside your country. When that happens, we use recognized safeguards, such as the European Commission’s standard contractual clauses or equivalent mechanisms, and we assess the risk before transferring, as required by, among others, Quebec’s Law 25 and the GDPR.
7. How long we keep it
- Waiting list: until you unsubscribe or until [PERIOD] after launch.
- Account and progress: while your account is active. If you close it, we delete it within [PERIOD, e.g. 30 days], except for what we must keep by law.
- Certificates: we keep the minimum record needed to verify them at your request or at the request of anyone checking them.
- Billing: for as long as required by applicable tax law.
- Technical logs: [PERIOD, e.g. 90 days].
8. How we protect it
We encrypt connections with TLS and passwords with modern hashing algorithms, offer two-factor authentication, apply the principle of least privilege to internal access and review our controls regularly. No system is infallible: if an incident puts your data at risk, we will notify you and the competent authority within the time limits set by law.
9. Your rights
Depending on your country, you can:
- Access your data and learn how we process it.
- Correct it if it is inaccurate.
- Ask us to delete it.
- Object to or restrict certain processing, including profiling.
- Receive it in a portable format.
- Withdraw your consent at any time, without affecting what was done before.
- Request human review of an automated decision and learn what information it was based on.
Write to us at [PRIVACY EMAIL]. We will respond within 30 days at most. You can also file a complaint with the data protection authority in your country, for example the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, your country’s authority in the European Union, the ANPD in Brazil or the competent authority in Mexico.
10. Minors
Our content is designed for people aged 14 and over. If you are under 14, or under the age your country requires to consent on your own behalf, you need the consent of your parent or guardian to create an account or join the waiting list. To purchase a Career Plan you must be of legal age or have your guardian’s authorization. If we detect a minor’s data without that consent, we will delete it.
11. Cookies and analytics
Today the site uses only the technical cookies it needs to function. If we add analytics or personalization, including any that uses AI, we will ask for your consent first, by category, with the option to reject as easily as to accept. You will be able to change your choice at any time.
12. Changes and contact
We review this policy at least once a year and whenever we add a new AI feature or the law changes. If the change is significant, we will notify you by email or on the portal before it takes effect.
Questions about your data? Write to [PRIVACY EMAIL]. This policy is available in Spanish, English, French and Portuguese.