Privacy Policy

1. Data Controller

FirstTouch s.r.o., registered in Prague, Czech Republic, is the data controller for personal data processed through this service. Contact: [email protected].

2. Data We Collect

• Account data: name, email address, company name
• Brand voice data: writing samples, tone preferences, dos/don'ts you provide
• Content data: posts drafted and approved through the platform
• Usage data: login times, feature interactions (no third-party analytics trackers)
• Communication data: Telegram messages used for approval workflows

3. Legal Basis (GDPR Art. 6)

We process your data on the basis of contract performance (Art. 6(1)(b)) for delivering the service, and legitimate interests (Art. 6(1)(f)) for improving content quality. We do not rely on consent for core service processing.

4. How We Use Your Data

• Generate personalised content drafts in your voice using AI
• Send you content for approval via Telegram
• Provide account management and billing
• Improve our AI models — only using aggregated, anonymised signals

5. Data Sharing

We share data only with: (a) Hetzner (EU-hosted VPS, database storage), (b) Anthropic/Google (AI inference — no data retained for training), (c) Resend (transactional email). We do not sell your data. We do not share with advertisers.

6. Data Retention

Account data is retained for the duration of your subscription plus 90 days. Upon written request, we delete all personal data within 30 days. Aggregated, anonymised analytics are retained indefinitely.

7. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any right, email [email protected]. You may also lodge a complaint with your national supervisory authority.

8. Cookies

We use only strictly necessary session cookies for authentication. No advertising or tracking cookies. No cookie consent banner required.

9. Security

Data is encrypted in transit (TLS 1.3) and at rest. Access is restricted to authorised FirstTouch personnel only. We conduct periodic security reviews.

10. Changes to This Policy

We will notify you by email at least 14 days before any material changes to this policy take effect.