Privacy Policy

The controller of your personal data is [legal entity name], [registered address]. Contact us about privacy at [contact email]. [data protection contact, if one is appointed]

Account

Name, email address, password (stored only as a secure hash by our sign-in provider), sign-in times.

Projects

Brand details and rules, product information, supplier links and the text we read from them, uploads (photos, screenshots, PDFs, logos), the ideas, copy and images we generate, and your approvals and edits with their dates.

Billing

Packs bought, credits used and refunded, invoices. Card details are handled by the payment provider, not by us.

Technical

IP address, browser and device information, logs and error reports.

Messages

Emails you send us, for example a beta application or a refund request.

Your projects can include personal data about other people, for example a face in a product photo. Only upload it if you are allowed to (see the Acceptable Use Policy).

Providing the service

Running your projects, generating ideas, copy and images, and delivering them. Legal basis: our contract with you.

Billing and tax

Selling credits, refunds and accounting records. Legal basis: contract and legal obligation.

Security and abuse prevention

Protecting accounts, preventing fraud and misuse. Legal basis: legitimate interest.

Improving the service

Measuring which steps work, using usage data about your projects. Legal basis: legitimate interest.

Service emails

Telling you your ads are ready, credits are about to lapse, or the terms change. Legal basis: contract.

Marketing emails

Only if you agree, and you can unsubscribe at any time. Legal basis: consent.

Whether our AI providers may keep or use the content we send them depends on our contracts with them. [provider data-use and retention terms, to be completed once those contracts are signed]

We use these providers to run the service. Each one only receives what it needs for its role.

Hosting and delivery of the app

[provider], [location]. Every request to the app, including your IP address.

Database, sign-in and file storage

[provider], [location]. Your account, projects and uploads.

AI text and document reading

[provider], [location]. Brand and product details, text read from your sources, and the uploads you ask us to read.

AI image generation

[provider], [location]. Image briefs and the product photos you upload, used as visual references for your ads.

Payments (merchant of record)

[provider], [location]. Your name, email, billing address and payment details. We never see your full card number.

Transactional email

[provider], [location]. Your email address and the content of service emails.

Error monitoring

[provider], [location]. Technical logs, which may include your account ID.

We will update this list, and email you about important changes, before a new provider receives your data.

Some providers process data outside your country, for example in the European Union or the United States. When data leaves the EU, we rely on [adequacy decisions or standard contractual clauses].

[transfer notes for Saudi Arabia (PDPL) and the United Arab Emirates, to be completed]

Account

While your account is open.

Projects and uploads

Until you delete them or close your account, then removed from live systems within [30 days] and from backups within [backup period].

Text read from your sources

Kept with the project, because later steps reuse it, until you delete the project or close your account. [shorter retention after you approve the product facts, planned]

Billing records

[7 to 10 years], as tax law requires, with your name removed where the law allows.

Logs

[log retention period]

You can ask us to:

• give you a copy of your personal data, or export it in a usable format;
• correct data that is wrong;
• delete your data and your account;
• restrict or object to some uses, such as service improvement;
• withdraw consent you gave, for example to marketing emails.

Email [contact email] from the address on your account. We reply within one month. You can also complain to a data protection authority (see below).

European Union. If you are in the EU, the General Data Protection Regulation (GDPR) applies to how we handle your data. You can complain to the data protection authority where you live; in France, that is the CNIL.

Morocco. If you are in Morocco, Law 09-08 on the protection of individuals with regard to the processing of personal data applies. The supervisory authority is the CNDP. Transfers of data outside Morocco follow the law's rules and, where required, the CNDP's authorisation. [CNDP declaration or authorisation reference]

We use cookies only to keep you signed in and to remember the language you choose. Your light or dark theme choice is stored in your browser. We do not use advertising cookies. If that changes, we will update this page and ask for your consent where the law requires it.

Data travels over encrypted connections, each account can only reach its own projects, and access to data within our team is limited to what is needed to run and support the service.

We will email you before an important change to this policy. Questions: [contact email].