Privacy Policy

1. Data controller

The data controller is •••••• ••••• •.•. (registered office: •••••••, •••• •••••••, •••••• •••• ••-••; tax number: ••••••••-•-••; registration number: ••••••••; EU tax number: ••••••••••Show company details). Contact: •••••@•••••••••.comShow email address.

2. What data we collect and process

To provide the Service, we collect and process the following types of data:

• Personal identification data: Full name and email address provided during registration and profile management.
• Account data and authentication tokens: Access tokens for connected platforms (Facebook, Instagram, TikTok, YouTube, X). These are encrypted (AES-256) and used only for authorized actions.
• Social media content and metadata: Posts, images, videos, descriptions, and performance metrics (likes, comments, reach) from connected accounts for analysis and content generation.
• User-uploaded content: Images, videos, audio files (for transcription/analysis), custom fonts, and similar brand asset files uploaded by you. We use secure cloud storage to store this content.
• Billing information: We retain the payment-processor customer, subscription, invoice, payment, charge, refund, dispute and event identifiers and statuses needed to administer billing, together with credit allowances, usage, reversals, debts and timestamps. We do not store full card details. After account deletion, we may retain a keyed one-way code derived from the normalized account email for the limited periods described below.
• Usage data: Consent-based analytics data about feature usage and performance.
• Technical and connection data: Your IP address, device and browser information, and timestamps. We use these for security, fraud prevention, and rate-limiting, and to detect your approximate region (for example to choose the right language). Approximate location is derived from your IP address using a geolocation service acting as our processor.
• AI-generated content: Generated brand identities, content roadmaps, ideas, images, and videos, including logs of generation tasks.
• Staff member data: When you invite staff members to your account, we process their full name, email address, assigned role, invitation status, and access activity in order to operate team access, authentication, and security.

3. How we use your data

We use your data for the following purposes:

• Service delivery: To maintain your account and provide AI-driven marketing tools. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• AI functionality: To process your content through AI models for generation and analysis. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• Billing: To administer subscriptions, credit allowances, payments, cancellations, refunds and disputes. Legal bases: performance of the contract (GDPR Art. 6(1)(b)); compliance with tax and accounting duties (Art. 6(1)(c)); and our legitimate interests in preventing payment and credit abuse, protecting legal claims and avoiding duplicate value after a reversal (Art. 6(1)(f)).
• Communication: For system updates and (with consent) newsletters. Legal basis: Consent (GDPR Art. 6(1)(a)) or Legitimate interest (GDPR Art. 6(1)(f)).
• Workspace asset handling: To store, organize, display, and process customer-uploaded brand assets, including custom fonts, within your workspace and related generation workflows. We do not verify ownership or licensing status for uploaded assets. Legal basis: Contract performance (GDPR Art. 6(1)(b)).
• Team and staff access: To let invited staff members access your workspaces, authenticate them, enforce role-based permissions, and maintain security and audit records. Legal basis: performance of our contract with you and our legitimate interest in keeping the Service secure.

4. AI Processing and Transparency

We use third-party AI and automation services to provide generation, analysis, and assistant features. Transparency: Depending on the feature you use, your prompts, uploaded files, and related instructions may be processed by specialized AI, generation, web-search, and automation providers acting on our behalf. Some of these providers are located outside the European Economic Area; see the section on international transfers below. Use of your content: These providers process your inputs only to return the requested result. We do not sell your content, and we do not use it to train our own general-purpose AI models. The providers' own handling of inputs is governed by their terms; we select providers and configure features to support our role as a processor of customer content. Human Oversight: Users are expected to review AI-generated content before publishing or relying on it. Our system acts as an assistant; the final decision remains with the human user. Labeling: Content generated entirely by AI on our platform should be identified as such where required by law or platform policies.

4A. Billing, credit and fraud-prevention controls

We use rule-based controls to prevent the same paid allowance from being used after cancellation, refund or payment reversal. Depending on the event, unused plan credits may be removed, reversed purchased credits may be deducted proportionally, already-used reversed credits may offset future credits of the same type, and credit spending or a new checkout may be temporarily paused. A payment dispute means a chargeback or payment dispute reported by our payment provider, not an ordinary support complaint or exercise of a statutory right. For deleted accounts, we may compare a versioned, keyed one-way code derived from the normalized email with a limited billing-risk record. This is pseudonymous personal data, not anonymous data. The control shows only that billing review is required; it does not use full card data or evaluate unrelated behavior. You may contact •••••@•••••••••.comShow email address to contest a restriction, provide context, request human review or settle an outstanding billing issue.

5. Data sharing and third parties

We share data with verified service providers and processors to operate the Service:

• Infrastructure: Cloud hosting, storage, content delivery, and infrastructure support providers.
• AI Services: AI inference, transcription, and automation service providers.
• Payments: Our payment provider processes payment details under its own privacy terms. We receive and retain only the billing and event information needed to operate subscriptions, credits, refunds, disputes, accounting and fraud prevention.
• Communication: Transactional email and communication providers.
• Connected platforms: When you publish or analyze content, the relevant social media platforms you connect (such as Facebook, Instagram, TikTok, and Pinterest) receive the content and tokens needed to carry out your request, under their own terms.
• Analytics and advertising measurement: Consent-based analytics and conversion-measurement providers for the public site.
• Geolocation: An IP-geolocation provider used to detect your approximate region for language selection.
• Authorities: Where legally required — for example, electronic invoice reporting to the Hungarian Tax and Customs Administration (NAV).

We disclose the categories of recipients above rather than a public list of named vendors. We do not sell your personal data. Some providers may process data outside the EEA, including in the USA; see the next section for the safeguards we apply.

6. Data location and international transfers

Primary storage of your account data and uploaded content is located in the European Union. To deliver certain features — such as AI generation, web search, payments, email delivery, and connectivity with social platforms — some processors are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request more information about the safeguards we apply by contacting us at •••••@•••••••••.comShow email address.

7. Data retention

We keep personal data only as long as necessary for the purposes described in this Policy. Account and workspace data are kept while your account is active and are deleted or anonymized without undue delay after account deletion. Billing, tax, invoice and audit records are retained for 8 years where required by Hungarian law. Closed payment-dispute operational records are normally removed after 24 months. After account deletion, a minimal pseudonymous billing-risk tombstone may restrict repeat checkout for up to 18 months and is removed after no more than 24 months unless it is linked to an unresolved liability or legal hold. An open reversal liability may be enforced for up to 5 years and minimal resolution evidence may be retained for up to 8 years after resolution; a documented legal hold can extend retention only while necessary for a specific claim. Expired records are removed by scheduled cleanup. Security logs, rate-limiting records and short-lived verification codes are kept only briefly. AI inputs are not retained by us for unrelated purposes.

8. When we act as a processor

When you upload or process personal data about third parties (for example your own clients or their audiences), you are the controller of that data and we act as your processor. That processing is governed by our Data Processing Agreement, which forms part of our Terms of Service and reflects the requirements of Article 28 GDPR.

8A. Customer email marketing data

If you use email marketing, we process the contacts you upload, including email address, name, company, tags, your recorded permission basis and source, unsubscribe or delivery-suppression status, campaign content and scheduling, and delivery events. You remain the controller and sender for recipient data; we process it to provide the feature and use an email-delivery provider as a sub-processor. Contact and campaign data is kept while your workspace is active or until you delete it. We may retain minimal suppression records for as long as reasonably necessary to prevent further sends, handle complaints, and meet legal obligations.

9. Data security

We use industry-standard encryption (SSL/TLS for transit, AES-256 for sensitive tokens) and strict workspace isolation to ensure your data is accessible only to authorized users within your organization.

10. Your rights

Under GDPR, you may request access, rectification, erasure, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. You may also request meaningful information about, contest and obtain human review of a rule-based billing restriction. Our creative AI does not make final binding decisions about you. Contact •••••@•••••••••.comShow email address to exercise these rights; statutory exceptions, including records required for tax obligations or legal claims, may apply.

11. Submitting a data subject request

To exercise any of the rights described above, you can submit a request as follows:

• How to submit: Email us at •••••@•••••••••.comShow email address with the subject "Data request", or use our contact page. You can also request account deletion directly in your account settings.
• What to include: Tell us which right you wish to exercise and the email address linked to your account so we can locate your data.
• Identity verification: To protect your data, we may ask for further information to verify your identity before acting on a request.
• Response time: We respond free of charge within one month. For complex or numerous requests, we may extend this by up to two further months and will let you know.

•••••@•••••••••.comShow email address

12. Account deletion

You can request account deletion in settings. Core account and workspace data are removed or anonymized without undue delay. Account closure may be paused while an active payment dispute or reversed-credit debt must be resolved; this does not prevent you from making a GDPR request, which we assess separately. We retain only the limited billing, tax, dispute and pseudonymous anti-abuse records, and only for the periods and purposes described above.

13. Cookies and Tracking

We use essential cookies for authentication, security, and core site preferences such as language and theme. With your consent, we also enable analytics and conversion-measurement technologies to measure aggregated public-site usage and performance. We do not load social media tracking cookies on the public site. For full details and to manage your choices, see our Cookie Policy.

14. Legal Remedies

Please contact us first at •••••@•••••••••.comShow email address to resolve issues. You have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11. www.naih.hu.

15. Google API Services and YouTube

SEENALYZE AI lets you connect Google services — including your YouTube channel (to publish, schedule, and analyze videos) and Google Ads (for reporting) — and uses Google sign-in. These features rely on YouTube API Services and other Google APIs. SEENALYZE AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

When you connect a Google or YouTube account, we access and process only the following, and only after you explicitly authorize it:

• Data we access: Your YouTube channel and account details, your videos and their metadata and performance metrics, and — where you request it — the ability to upload and manage videos on your behalf. For Google Ads, aggregated reporting data from the accounts you connect.
• How we use it: Solely to provide the publishing, scheduling, analytics, and reporting features you request inside your workspace. We never sell Google or YouTube data, use it for advertising, or use it to develop, train, or improve generalized AI or machine-learning models.
• Storage: Google and YouTube access and refresh tokens are encrypted (AES-256) and stored only to perform the actions you authorize. Content is processed transiently and retained only as long as needed to deliver the feature.
• Revoking access: You can disconnect a Google or YouTube account at any time in your workspace settings, and you can revoke SEENALYZE AI's access to your Google Account at any time via the Google security settings page. Revoking deletes the stored tokens.

To review or revoke SEENALYZE AI's access to your Google data, visit Google Account permissions.

16. Marketing communications

With your consent, we send product news, feature announcements, tips and occasional offers by email. Marketing is optional and appears as a separate choice from the mandatory legal acceptance. You can change that selection before submitting, including when creating an account with Google, and we record the choice you confirm. Legal basis: Your consent (GDPR Art. 6(1)(a)). How to opt out: Every marketing email includes a one-click unsubscribe link, and you can change your preference at any time by contacting •••••@•••••••••.comShow email address. Opting out never affects transactional and service messages needed to operate your account. Data we use: We process your email address, language, subscription status and a record of when and how consent was given or withdrawn. We keep you on the marketing list until you unsubscribe or delete your account.

17. Contact

•••••• ••••• •.•. Registered office: •••••••, •••• •••••••, •••••• •••• ••-••Show company details Email:

•••••@•••••••••.comShow email address