Privacy Policy

Last updated: October 24, 2026

This policy explains how [COMPANY LEGAL NAME] [LEGAL FORM] ("Feeverso", "we", "us") collects and uses personal data when you use the Feeverso web app, including the AI marketing agent, the Studio of templates and the media generator (the "Service"), and when you visit our website. If anything is unclear, write to privacy@feeverso.example.

1. Who is responsible for your data

[COMPANY LEGAL NAME] [LEGAL FORM] is the controller of the personal data described in this policy.

[EU/UK REPRESENTATIVE — IF APPLICABLE] acts as our representative in the European Union for data protection matters where Article 27 GDPR requires one. You can contact them instead of us on any matter covered by this policy.

2. What this policy covers

This policy covers the Service and our website. It does not cover stripe.com, where checkout and payments run under Stripe's own privacy policy, or websites you reach from the Service.

3. Personal data we collect

3.1 Data you give us

• Account data: your email address, your name and your password. We store only a hash of your password, never the password itself.
• Brand kits: the brand details you save, such as name, tone of voice, audience, product descriptions and example text.
• Conversations and prompts: your messages to the agent, your instructions, and the outputs generated for you.
• Uploads: images and other files you send to the Studio or generator.
• Support and rights requests: what you write to us, and our replies.

3.2 Data we collect automatically

• Technical data: your IP address and user agent, used for sessions and security, plus rate-limit counters to stop one account overloading the Service.
• Usage data for billing: which generations ran, how many credits they used, and whether they failed. Failed generations are refunded automatically.

3.3 Data we receive from others

• From Stripe: your Stripe customer ID, plan, subscription status, renewal and cancellation events, and payment confirmations. We never receive or store your card number.
• From our AI providers: usage information returned with a generation, such as token counts used to calculate credits.

3.4 Data we do not collect

We do not collect card numbers, bank details, precise location, your contacts, advertising identifiers or cross-site browsing profiles, and we do not buy data from brokers. Please do not put special category data (health, biometric, political, religious or trade-union information) or other people's personal data into prompts or uploads without a lawful basis.

4. Why we use your data, and our legal bases

You do not have to give us data, but without an email address and password we cannot create your account.

Optional product news. We only send product news if you actively opt in, and you can withdraw that consent at any time. In the current version of the Service we do not send service emails: confirmations, including cancellation confirmations, are shown on screen and can be downloaded or printed. Withdrawing marketing consent does not affect those confirmations or your account.

5. AI features and your content

5.1 What is sent to AI providers

When you ask the agent to write something or the media generator to create an image or video, we send what the request needs: your prompt and instructions, the brand kit details relevant to it, images you upload and the earlier messages needed for context.

5.2 Who processes it

• Text: requests go to OpenRouter, Inc., which routes them to model providers such as DeepSeek, Anthropic, OpenAI and Google. The selected provider generates the text and returns it.
• Images and videos: requests go to Atlas Cloud, which runs the image and video models.

These providers process your content as our processors or as independent controllers under their own terms, to return a result to us.

5.3 No training on your content

We do not train AI models on your content. Your conversations, uploads and generated assets are not used to train our models or build advertising profiles.

5.4 No automated decisions with legal effects

We do not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects you. Credit balances and rate limits are calculated automatically: they decide whether a request can run and what it costs. They do not evaluate you as a person or decide your access, price or rights.

5.5 Outputs can be wrong

AI outputs may be inaccurate, incomplete or similar to other customers' outputs. Review them before publishing, especially claims, prices and legal, health or financial statements.

6. Cookies

We use one first-party cookie, fv_session, strictly necessary to keep you signed in. We use no analytics, advertising or tracking cookies. The Cookie Policy explains this in detail, including Stripe's cookies on its checkout pages.

7. Who we share data with

We do not sell your personal data. We share it only with providers that help us run the Service, as needed.

We may also disclose data where the law requires it, to answer a valid legal request, to protect our rights or others' safety, or as part of a merger or sale of assets.

We do not sell or share personal information for cross-context behavioural advertising, and we do not disclose it for advertising or data-broker purposes.

8. International transfers

Some providers are outside the EEA and the UK. Where data leaves the EEA or the UK, we rely on the Standard Contractual Clauses approved by the European Commission (2021/914) and, for the UK, the UK International Data Transfer Addendum, or another lawful transfer mechanism. You can ask about these safeguards at privacy@feeverso.example.

9. How long we keep data

Deletion is self-service: Account → Delete account, confirmed with your password. This cancels any subscription immediately and deletes your brand kits, conversations, uploads and generated files. Billing records and the compliance audit trail are kept as described above because the law requires them; the audit trail records the deletion, not the deleted content.

10. How we protect data

• passwords stored as hashes using scrypt, never in plain text;
• hashed session tokens, so a stolen database copy does not hand over live sessions;
• an httpOnly session cookie, unreadable by scripts in the page;
• TLS encryption in transit between your browser and our servers;
• access controls that limit who on our team can reach production data;
• rate limiting to reduce automated attacks and abuse.

If a breach affects your data and the law requires it, we will tell you and the supervisory authority.

11. Your rights

If you are in the EEA, the UK or another country with similar laws, you have the right to:

• Access the personal data we hold and get a copy.
• Rectify data that is wrong or incomplete.
• Erase your data, subject to records we must keep by law.
• Restrict processing while a question about your data is being resolved.
• Portability: receive your data in a structured, machine-readable format, and ask us to send it to another provider where technically feasible.
• Object to processing based on our legitimate interests, including security-related processing where your situation gives grounds.
• Withdraw consent at any time, without affecting processing that already happened.
• Not be subject to automated decision-making with legal effects; we do not use any.
• Complain to a supervisory authority. In the EU, you can complain to the authority where you live or work. In the UK, that is the Information Commissioner's Office (ICO).

12. How to exercise your rights

You can do most of this yourself, without asking us:

• Export my data: Account → Export my data gives you a JSON export of your data.
• Delete my account: Account → Delete account, confirmed with your password.
• Manage your subscription: Account → Subscription, including Cancel subscription in two clicks.
• Cancel without logging in: the public /cancel page accepts cancellation and withdrawal requests without signing in.

For anything else, write to privacy@feeverso.example. We answer at the address you contact us from, or in the app, within one month; for complex requests we may extend that by up to two months and will tell you why. Requests are free unless they are clearly unfounded or excessive, in which case we may charge a fee or refuse.

We may need to verify that a request comes from you: use the in-app tools while signed in, or write from your account email. We will never ask for your password.

13. California and US privacy notice

This section applies to California residents and uses the terms of the CCPA/CPRA.

13.1 Categories we collect

• Identifiers: name, email, IP address, user agent, Stripe customer ID, account ID.
• Commercial information: plan, credits, purchase and cancellation history.
• Network activity: prompts, conversations, generated content, and how you use the Service.
• Visual information: images you upload and images or videos generated for you.
• Account credentials: your password, stored only as a hash and used only to sign you in. It is sensitive personal information under the CPRA.

We collect no biometric data, precise geolocation or health data, and do not use sensitive personal information to infer characteristics.

13.2 Sources and disclosure

We collect these categories from you, automatically from your use of the Service, and from Stripe. We use them for the purposes in section 4 and disclose them to the providers in section 7 as business purposes under written contracts. We do not sell personal information and do not share it for cross-context behavioural advertising. We have not done so in the past 12 months and do not knowingly sell or share data of under-18s.

13.3 Your California rights

• Know what categories and pieces we collected, the sources, purposes and recipients.
• Delete personal information we collected from you, subject to legal exceptions such as tax records.
• Correct inaccurate personal information.
• Opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, but the right remains.
• Limit the use of sensitive personal information. We use credentials only to provide the Service.
• Non-discrimination. We will not deny you the Service, charge more or give you worse service because you used a privacy right.

13.4 Authorised agents and verification

You may use an authorised agent with your written permission; we may still contact you to confirm your identity. We verify requests by matching your details against our records, or by having you use the signed-in tools. We respond within 45 days, or tell you if we need up to 45 more. If we refuse, reply and ask us to review the decision. Residents of other US states with comprehensive privacy laws have the same rights and channels.

14. Children

You must be at least 18 years old to use the Service. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete the data. If you believe a minor has given us data, contact privacy@feeverso.example.

15. Changes to this policy

We may update this policy to reflect changes in the Service or the law. The version that applies is the one published here, with the date at the top. If a change materially affects how we use your data, we will announce it in the app before it takes effect and, where the law requires it, ask for your consent.

16. Contact

• Email: privacy@feeverso.example
• Data protection: [DATA PROTECTION OFFICER OR PRIVACY CONTACT]
• Post: [COMPANY LEGAL NAME] [LEGAL FORM], [STREET AND NUMBER], [POSTAL CODE] [CITY], [COUNTRY]

If you are not satisfied with our answer, you can complain to your local supervisory authority (in the UK, the ICO).