Privacy Policy

1. Introduction

THXU UO ("we", "our", or "us"), a company registered in Estonia, operates Doc2Campaign (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered campaign generation platform.

By using Doc2Campaign, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (email address, name, password)
• Profile information (company name, industry, preferences)
• Payment information (processed securely through third-party payment processors)
• Communication data (support requests, feedback)

2.2 Content Data

When you use our Service, we collect and process:

• Documents you upload (PDFs, DOCX, TXT files)
• GitHub repositories you connect
• Generated campaign content and images
• Project memory and brand preferences
• Campaign history and performance data

2.3 Usage Information

We automatically collect certain information about your use of the Service:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Usage patterns (features used, campaigns created, generation requests)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve Doc2Campaign's AI-powered campaign generation
• Personalization: To learn your preferences and deliver more relevant campaign suggestions
• AI Processing: To train and improve our AI models for better content generation
• Communication: To send you updates, technical notices, and support messages
• Analytics: To analyze usage patterns and optimize the Service
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with applicable laws and regulations

4. AI and Data Processing

Doc2Campaign uses artificial intelligence to generate marketing campaigns. Here's how your data is processed:

• Content Analysis: Your uploaded documents are analyzed by AI to extract key information
• Content Generation: AI models use your data to generate customized campaign content
• Image Generation: AI creates images based on your campaign content and preferences
• Learning: We use aggregated, anonymized data to improve our AI models
• No Training on Your Data: Your specific content is NOT used to train third-party AI models without your consent

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

• Supabase: Database and authentication services (data stored in secure cloud infrastructure)
• Groq: AI inference for content generation
• Fal AI: Image generation services
• GitHub: When you connect your GitHub account for repository ingestion

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security audits and vulnerability assessments
• Data Centers: Data is stored in secure, EU-compliant data centers
• Retention: We retain your data only as long as necessary for the purposes outlined in this policy

7. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@doc2campaign.com

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide security features

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

9. International Data Transfers

As THXU UO is based in Estonia (European Union), we primarily process data within the EU. When data is transferred outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses or other approved mechanisms.

10. Children's Privacy

Doc2Campaign is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the Service. Your continued use of Doc2Campaign after changes constitutes acceptance of the updated policy.

12. Contact Information

For questions or concerns about this Privacy Policy or our data practices, please contact:

13. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local data protection authority.