Privacy Policy

1. Data controller

The data controller is Márton Donát e.v. (registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A; tax number: 91557281-1-33; registration number: 61402755; EU tax number: HU91557281). Contact: [email protected].

2. What data we collect and process

To provide the Service, we collect and process the following types of data:

• Personal identification data: Full name and email address provided during registration.
• Account data and authentication tokens: When you connect your Facebook, Instagram (and in the future TikTok) accounts, we securely store the platform-issued access tokens. These tokens are encrypted and only used to operate the Service (for example, fetching posts or publishing).
• Social media content and metadata: We retrieve posts, images, videos, descriptions, and related performance metrics (likes, comments, reach) from connected accounts. These data power AI-driven analytics and brand identity generation.
• User-uploaded content: This includes images uploaded for posts, audio files uploaded for transcription, and media used for video generation. Images uploaded for posts are permanently deleted once publishing is completed.
• Billing information: Payments are handled by Stripe. We do not store card details. Stripe's customer identifier (stripe_customer_id) is stored in your profile to manage billing and subscriptions.
• Usage data: We collect anonymised data about how you use the platform, including feature usage and interactions, to improve the Service.
• AI-generated content and metadata: The system stores AI-generated brand identities (brand_identities table), content roadmaps (content_roadmaps table), saved ideas (stored_ideas table) including generated media URLs and transcripts, AI-generated avatars (avatars table), and asynchronous generation task logs (async_generation_tasks table) containing metadata about generation requests.

3. How we use your data

We use your data for the following purposes:

• Service delivery and registration: To provide, maintain, and personalise the Service. Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
• AI-powered features: To generate brand identities, content ideas, images, videos, and copy by using your social media data and context. Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
• Billing and credit management: To track credit balances and log transactions. Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)), in accordance with Act C of 2000 on Accounting.
• Communication: To contact you, including system notifications, newsletters, and support. Legal basis: your voluntary consent (GDPR Art. 6(1)(a)) or our legitimate interest (GDPR Art. 6(1)(f)).
• Security: To protect the security and integrity of the Service. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)).
• Legal compliance: To comply with legal obligations. Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)).

4. Data sharing and third parties

We do not sell your data to third parties. We share certain data with subcontractors to operate the Service:

• Supabase: Database provider.
• Cloudflare R2: Cloud storage provider.
• Stripe: Payment processor for credit purchases and subscriptions.
• AI generation providers: AI-generated videos, text, and images are created by third-party providers. These providers may use the data you provide and the generated content to train and improve their models.

These providers process data exclusively based on our instructions. Some of our partners may store data outside the European Economic Area (EEA), specifically in the United States (USA). For these providers, the level of data protection is guaranteed by the European Commission's adequacy decision (Data Privacy Framework) or by Standard Contractual Clauses (SCC) forming part of the Terms of Service.

5. Data security

We are committed to protecting your data. We implement technical and organisational measures, including strong encryption of access tokens (AES-256-CBC), to safeguard against unauthorised access, alteration, or destruction.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, or restrict the processing of your personal data. You can exercise these rights through your account settings or by contacting us.

7. Account deletion

You may request deletion of your account at any time. In the event of account deletion, your personal data and uploaded content will be deleted from our systems, EXCEPT for data that we are required by law to retain. Based on Section 169 (2) of Act C of 2000 on Accounting, we are required to retain invoices and billing data for 8 years from the date of issue.

8. Cookies

The website uses cookies for proper operation (e.g. maintaining login sessions, analytics). Cookies are small data packets placed on your device by the browser. By using the service, you accept the use of cookies to ensure session continuity.

9. Legal Remedies

If you feel that we have violated your rights during the processing of your personal data, please contact us first at the contact details above so that we can settle the matter amicably. You are also entitled to lodge a complaint with the authority: National Authority for Data Protection and Freedom of Information (NAIH) Address: 1055 Budapest, Falk Miksa utca 9-11. Mailing address: 1363 Budapest, Pf.: 9. Email: [email protected] Website: www.naih.hu You may also turn to the court; the adjudication of the lawsuit falls within the competence of the tribunal. The lawsuit may also be initiated before the tribunal of your place of residence or stay, at your choice.

10. Contact

If you have any questions or concerns about data processing, please contact us: Márton Donát e.v. Registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A Tax number: 91557281-1-33 Registration number: 61402755 EU tax number: HU91557281 Email:

[email protected]