Privacy Policy

1. Data controller

The data controller is Márton Donát e.v. (registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A; tax number: 91557281-1-33; registration number: 61402755; EU tax number: HU91557281). Contact: [email protected].

2. What data we collect and process

To provide the Service, we collect and process the following types of data:

• Personal identification data: Full name and email address provided during registration and profile management.
• Account data and authentication tokens: Access tokens for connected platforms (Facebook, Instagram, TikTok, YouTube, X). These are encrypted (AES-256) and used only for authorized actions.
• Social media content and metadata: Posts, images, videos, descriptions, and performance metrics (likes, comments, reach) from connected accounts for analysis and content generation.
• User-uploaded content: Images, videos, audio files (for transcription/analysis), custom fonts, and similar brand asset files uploaded by you. We use secure cloud storage to store this content.
• Billing information: Processed by our payment processor. We store only the customer identifier and subscription status required to operate billing; we do not store your full card details.
• Usage data: Consent-based analytics data about feature usage and performance.
• Technical and connection data: Your IP address, device and browser information, and timestamps. We use these for security, fraud prevention, and rate-limiting, and to detect your approximate region (for example to choose the right language). Approximate location is derived from your IP address using a geolocation service acting as our processor.
• AI-generated content: Generated brand identities, content roadmaps, ideas, images, and videos, including logs of generation tasks.

3. How we use your data

We use your data for the following purposes:

• Service delivery: To maintain your account and provide AI-driven marketing tools. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• AI functionality: To process your content through AI models for generation and analysis. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• Billing: To manage subscriptions and comply with tax laws. Legal basis: Legal obligation (GDPR Art. 6(1)(c)).
• Communication: For system updates and (with consent) newsletters. Legal basis: Consent (GDPR Art. 6(1)(a)) or Legitimate interest (GDPR Art. 6(1)(f)).
• Workspace asset handling: To store, organize, display, and process customer-uploaded brand assets, including custom fonts, within your workspace and related generation workflows. We do not verify ownership or licensing status for uploaded assets. Legal basis: Contract performance (GDPR Art. 6(1)(b)).

4. AI Processing and Transparency

We use third-party AI and automation services to provide generation, analysis, and assistant features. Transparency: Depending on the feature you use, your prompts, uploaded files, and related instructions may be processed by specialized AI, generation, web-search, and automation providers acting on our behalf. Some of these providers are located outside the European Economic Area; see the section on international transfers below. Use of your content: These providers process your inputs only to return the requested result. We do not sell your content, and we do not use it to train our own general-purpose AI models. The providers' own handling of inputs is governed by their terms; we select providers and configure features to support our role as a processor of customer content. Human Oversight: Users are expected to review AI-generated content before publishing or relying on it. Our system acts as an assistant; the final decision remains with the human user. Labeling: Content generated entirely by AI on our platform should be identified as such where required by law or platform policies.

5. Data sharing and third parties

We share data with verified service providers and processors to operate the Service:

• Infrastructure: Cloud hosting, storage, content delivery, and infrastructure support providers.
• AI Services: AI inference, transcription, and automation service providers.
• Payments: Payment processing providers.
• Communication: Transactional email and communication providers.
• Connected platforms: When you publish or analyze content, the relevant social media platforms you connect (such as Facebook, Instagram, TikTok, and Pinterest) receive the content and tokens needed to carry out your request, under their own terms.
• Analytics and advertising measurement: Consent-based analytics and conversion-measurement providers for the public site.
• Geolocation: An IP-geolocation provider used to detect your approximate region for language selection.
• Authorities: Where legally required — for example, electronic invoice reporting to the Hungarian Tax and Customs Administration (NAV).

We disclose the categories of recipients above rather than a public list of named vendors. We do not sell your personal data. Some providers may process data outside the EEA, including in the USA; see the next section for the safeguards we apply.

6. Data location and international transfers

Primary storage of your account data and uploaded content is located in the European Union. To deliver certain features — such as AI generation, web search, payments, email delivery, and connectivity with social platforms — some processors are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request more information about the safeguards we apply by contacting us at [email protected].

7. Data retention

We keep personal data only as long as necessary for the purposes described in this Policy. Account and workspace data are kept while your account is active and are deleted or anonymized without undue delay after you delete your account. Billing, tax, and audit records are retained for 8 years as required by Hungarian law. Security and rate-limiting logs and short-lived verification codes are kept only for a short period. AI inputs are processed to deliver the requested feature and are not retained by us for unrelated purposes.

8. When we act as a processor

When you upload or process personal data about third parties (for example your own clients or their audiences), you are the controller of that data and we act as your processor. That processing is governed by our Data Processing Agreement, which forms part of our Terms of Service and reflects the requirements of Article 28 GDPR.

9. Data security

We use industry-standard encryption (SSL/TLS for transit, AES-256 for sensitive tokens) and strict workspace isolation to ensure your data is accessible only to authorized users within your organization.

10. Your rights

Under GDPR, you have the right to access, rectify, erase, or restrict processing of your data. You also have the right to object to automated individual decision-making that has legal or significant effects. Since our AI serves as a creative assistant and does not make final binding decisions about you, it typically does not fall under Art. 22 GDPR, but we maintain human-in-the-loop controls regardless.

11. Submitting a data subject request

To exercise any of the rights described above, you can submit a request as follows:

• How to submit: Email us at [email protected] with the subject "Data request", or use our contact page. You can also request account deletion directly in your account settings.
• What to include: Tell us which right you wish to exercise and the email address linked to your account so we can locate your data.
• Identity verification: To protect your data, we may ask for further information to verify your identity before acting on a request.
• Response time: We respond free of charge within one month. For complex or numerous requests, we may extend this by up to two further months and will let you know.

[email protected]

12. Account deletion

You can request account deletion in your settings. Core account data is removed or anonymized without undue delay after confirmation of the request. Certain billing, tax, and audit records must be retained for 8 years for legal compliance under Hungarian law.

13. Cookies and Tracking

We use essential cookies for authentication, security, and core site preferences such as language and theme. With your consent, we also enable analytics and conversion-measurement technologies to measure aggregated public-site usage and performance. We do not load social media tracking cookies on the public site. For full details and to manage your choices, see our Cookie Policy.

14. Legal Remedies

Please contact us first at [email protected] to resolve issues. You have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11. www.naih.hu.

15. Google API Services and YouTube

SEENALYZE AI lets you connect Google services — including your YouTube channel (to publish, schedule, and analyze videos) and Google Ads (for reporting) — and uses Google sign-in. These features rely on YouTube API Services and other Google APIs. SEENALYZE AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

When you connect a Google or YouTube account, we access and process only the following, and only after you explicitly authorize it:

• Data we access: Your YouTube channel and account details, your videos and their metadata and performance metrics, and — where you request it — the ability to upload and manage videos on your behalf. For Google Ads, aggregated reporting data from the accounts you connect.
• How we use it: Solely to provide the publishing, scheduling, analytics, and reporting features you request inside your workspace. We never sell Google or YouTube data, use it for advertising, or use it to develop, train, or improve generalized AI or machine-learning models.
• Storage: Google and YouTube access and refresh tokens are encrypted (AES-256) and stored only to perform the actions you authorize. Content is processed transiently and retained only as long as needed to deliver the feature.
• Revoking access: You can disconnect a Google or YouTube account at any time in your workspace settings, and you can revoke SEENALYZE AI's access to your Google Account at any time via the Google security settings page. Revoking deletes the stored tokens.

To review or revoke SEENALYZE AI's access to your Google data, visit Google Account permissions.

16. Contact

Márton Donát e.v. Registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A Email:

[email protected]