Privacy Policy

01 Introduction

Odyssey Mercantile LLC, doing business as Lopez AI ("Company," "we," "us," or "our"), respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites odysseymercantile.com and lopez.ai (collectively, the "Sites"), use our software products, or engage our consulting services. Please read this policy carefully. If you do not agree with its terms, please do not access the Sites or use our services.

02 Information We Collect

Information You Provide Directly

• > Contact form submissions — name, email address, and message content when you reach out through our contact forms
• > Account information — email, name, and authentication credentials if you create an account for our software products
• > Payment information — billing details processed through Stripe (we do not store credit card numbers on our servers)
• > Communications — emails, messages, and any other content you send us directly
• > Client engagement data — project-related information shared during consulting engagements, governed by your service agreement

Information Collected Automatically

• > Device & browser information — IP address, browser type, operating system, device type, and screen resolution
• > Usage data — pages visited, time on site, click patterns, referring URLs, and navigation paths
• > Location data — approximate geographic location derived from your IP address (city/region level, not precise)

03 How We Use Your Information

We use the information we collect to:

• > Respond to your contact form inquiries and communicate with you
• > Deliver, maintain, and improve our services and software products
• > Process payments and manage subscriptions
• > Send transactional emails (receipts, account updates, service notifications)
• > Analyze site usage to improve user experience and content
• > Detect, prevent, and address technical issues or security threats
• > Comply with legal obligations

We do not sell your personal information. We do not use your information for automated decision-making or profiling that produces legal effects.

04 Third-Party Services

We use the following third-party services that may receive or process your data. Each operates under its own privacy policy:

05 Cookies & Tracking Technologies

Our Sites may use the following types of cookies and tracking technologies:

Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of certain features on our Sites.

06 Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy:

When data is no longer needed, we delete or anonymize it. You may request earlier deletion by contacting us (see Your Rights below).

07 Data Security

We implement reasonable technical and organizational measures to protect your personal information, including HTTPS encryption in transit, secure hosting infrastructure (Vercel), and access controls limiting who can view personal data.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

08 Your Rights

Depending on your location, you may have the following rights regarding your personal information:

All Users

• > Access — Request a copy of the personal information we hold about you
• > Correction — Request correction of inaccurate or incomplete information
• > Deletion — Request deletion of your personal information, subject to legal retention requirements
• > Opt-out of marketing — Unsubscribe from marketing communications at any time

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (as amended by the CPRA):

• > Right to Know — You can request the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the third parties we share it with
• > Right to Delete — You can request deletion of your personal information, with certain exceptions
• > Right to Opt-Out of Sale/Sharing — We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising
• > Non-Discrimination — We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at brian@odysseymercantile.com. We will respond to verifiable requests within 45 days.

09 Children's Privacy

Our Sites and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

10 International Users

Our Sites and services are operated from the United States. If you access them from outside the US, your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your country. By using our Sites, you consent to the transfer of your information to the United States.

11 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. There is no uniform standard for responding to DNT signals, so our Sites do not currently respond to them. However, you can control tracking through your browser cookie settings and the opt-out links provided above.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will provide notice via the Sites or by email. Your continued use of the Sites after the updated policy is posted constitutes acceptance of the changes.

13 Contact Us

For privacy-related questions, requests, or concerns:

We aim to respond to all privacy inquiries within 30 days.