Privacy Policy

1. Data controller

The data controller is Márton Donát e.v. (registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A; tax number: 91557281-1-33; registration number: 61402755; EU tax number: HU91557281). Contact: [email protected].

2. What data we collect and process

To provide the Service, we collect and process the following types of data:

• Personal identification data: Full name and email address provided during registration and profile management.
• Account data and authentication tokens: Access tokens for connected platforms (Facebook, Instagram, TikTok, YouTube, X). These are encrypted (AES-256) and used only for authorized actions.
• Social media content and metadata: Posts, images, videos, descriptions, and performance metrics (likes, comments, reach) from connected accounts for analysis and content generation.
• User-uploaded content: Images, videos, and audio files (for transcription/analysis) uploaded by you. We use secure cloud storage to store this content.
• Billing information: Processed by our payment processor. We store only the customer identifier and subscription status required to operate billing; we do not store your full card details.
• Usage data: Consent-based analytics data about feature usage and performance.
• AI-generated content: Generated brand identities, content roadmaps, ideas, images, and videos, including logs of generation tasks.

3. How we use your data

We use your data for the following purposes:

• Service delivery: To maintain your account and provide AI-driven marketing tools. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• AI functionality: To process your content through AI models for generation and analysis. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• Billing: To manage subscriptions and comply with tax laws. Legal basis: Legal obligation (GDPR Art. 6(1)(c)).
• Communication: For system updates and (with consent) newsletters. Legal basis: Consent (GDPR Art. 6(1)(a)) or Legitimate interest (GDPR Art. 6(1)(f)).

4. AI Processing and Transparency

We use third-party AI and automation services to provide generation, analysis, and assistant features. Transparency: Depending on the feature you use, your prompts, uploaded files, and related instructions may be processed by specialized AI or automation providers acting on our behalf. Human Oversight: Users are expected to review AI-generated content before publishing or relying on it. Our system acts as an assistant; the final decision remains with the human user. Labeling: Content generated entirely by AI on our platform should be identified as such where required by law or platform policies.

5. Data sharing and third parties

We share data with verified service providers and processors to operate the Service:

• Infrastructure: Cloud hosting, storage, content delivery, and infrastructure support providers.
• AI Services: AI inference, transcription, and automation service providers.
• Payments: Payment processing providers.
• Communication: Transactional email and communication providers.

Some providers may process data outside the EEA, including in the USA. Where required, we rely on appropriate transfer safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

6. Data security

We use industry-standard encryption (SSL/TLS for transit, AES-256 for sensitive tokens) and strict workspace isolation to ensure your data is accessible only to authorized users within your organization.

7. Your rights

Under GDPR, you have the right to access, rectify, erase, or restrict processing of your data. You also have the right to object to automated individual decision-making that has legal or significant effects. Since our AI serves as a creative assistant and does not make final binding decisions about you, it typically does not fall under Art. 22 GDPR, but we maintain human-in-the-loop controls regardless.

8. Account deletion

You can request account deletion in your settings. Core account data is removed or anonymized without undue delay after confirmation of the request. Certain billing, tax, and audit records must be retained for 8 years for legal compliance under Hungarian law.

9. Cookies and Tracking

We use essential cookies for authentication, security, and core site preferences such as language and theme. With your consent, we also enable Vercel Analytics and Vercel Speed Insights to measure aggregated public-site usage and performance. We do not currently load advertising or social media tracking cookies on the public site.

10. Legal Remedies

Please contact us first at [email protected] to resolve issues. You have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11. www.naih.hu.

11. Contact

Márton Donát e.v. Registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A Email:

[email protected]