Version 1.0. This policy explains how we process personal data on AngeldeskAI IA (https://www.angeldeskai.com/), in accordance with the General Data Protection Regulation (GDPR), the Danish Data Protection Act and the EU Artificial Intelligence Act.
1. Who is the controller
[complete in Equipo IA → Ajustes], company registration number (CVR) [complete in Equipo IA → Ajustes], [complete in Equipo IA → Ajustes]. Email for privacy matters: jennygori@hotmail.com.
We are not required to appoint a data protection officer; for any privacy question, write to us at the email above.
2. What data we process
- Account: name, email, password (stored encrypted), sign-up date, plan, language, and the date and version of the policies you accepted.
- Content you enter: the DNA of your businesses, your messages with the assistants, the generated replies and your ratings.
- Sales agent (if you turn it on): the conversations with your customers, their contact details and appointments. For this data, you are the controller and we act as your processor (see section 6).
- Instagram and Facebook (if you connect them): the name and ID of your Facebook Page and your Instagram account, your Facebook or Instagram ID for our app and the access permissions (tokens), which we store encrypted. We only use them to receive the direct messages your customers send you and to answer them with your sales agent or with your own replies, and to publish on your Page or account the images and videos you decide to publish. We do not read your posts, your contacts or any other data in your accounts. You can disconnect them in the dashboard or by removing the app in your Facebook or Instagram settings; when you do, we delete this connection data.
- TikTok (if you connect it): your display name, your profile picture, your TikTok ID for our app and the access permissions (tokens), which we store encrypted. We only use them to show you which account you are posting with and to publish the videos and photos you choose, with the privacy and options you select. You can disconnect it in the dashboard or remove access in your TikTok settings; when you disconnect it, we delete this data.
- Posts: the image or video, the caption, the networks and the date you choose, and the links to what was published, to publish it when you say and show you the history.
- Technical and usage data: number of messages, consumption, access dates and, temporarily, your IP address for security and abuse prevention.
- Payments: handled by the payment provider you choose (for example PayPal, Stripe or Hotmart). We do not store card details.
Sensitive data: please do not enter health data or other special categories of data about other people. If you decide to include information about your own health, the legal basis is your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time by deleting it.
Do you have to give us your data? Your name, email and password are necessary to create the account and provide the service; without them we cannot provide it. Everything else (DNA, conversations, ratings) is up to you.
3. Purposes and legal bases
- Providing the service and managing your account and plan: performance of a contract (Art. 6(1)(b)).
- Security and prevention of fraud and abuse: legitimate interest (Art. 6(1)(f)).
- Improving the assistants’ instructions based on ratings (“like / dislike”) and usage statistics, in aggregated form and without identifying you: legitimate interest. You can object by writing to us.
- Complying with accounting and tax obligations: legal obligation (Art. 6(1)(c)).
- Sending you marketing news: only with your consent, which you can withdraw at any time.
4. Artificial intelligence
- The assistants run on Claude models from Anthropic PBC (USA), which acts as a processor. Your content is sent to Anthropic only to generate the reply.
- Under its commercial terms, Anthropic does not use its customers’ content to train its models. We do not use your conversations to train any model either.
- The replies are generated by an AI and may contain errors: review them before using them. We do not make automated decisions with legal effects concerning you (Art. 22 GDPR).
- The assistants always identify themselves as artificial intelligence, in accordance with Article 50 of the AI Act.
- AI images and videos: the descriptions, scripts and reference photos you submit are sent to Higgsfield (USA), which acts as a processor and in turn uses model providers (for example OpenAI for images and Kling for videos). Everything generated is marked “AI-generated” on the platform, in the file data and, in videos, visibly.
- SEO website review: when you write a website address in the chat with the SEO specialist, the platform opens that public page (and its robots.txt and sitemap) to measure it and, if enabled, sends the address to Google PageSpeed Insights to measure its speed. Google only receives the page address, not your personal data.
- Your own voice: we only clone it with your written permission, and we delete it when you withdraw that permission.
5. Who we share data with
- Web hosting: [complete in Equipo IA → Ajustes] (processor).
- Anthropic PBC (USA), to generate the replies (processor).
- Higgsfield (USA), to create the images, voices and videos you request (processor).
- Services you connect with your own account, such as Google Calendar, Outlook (Microsoft), Calendly, WhatsApp Business, Instagram, Facebook or Messenger (Meta), TikTok or your email service (your SMTP server or Brevo). We only use them following your instructions.
- Google (PageSpeed Insights), only the public address of the pages you ask the SEO specialist to review.
- Payment providers, which act as independent controllers.
- Authorities, only when required by law.
We do not sell your data or use it for third-party advertising.
6. Sales agent: your customers
If you turn on the sales agent, we process your customers’ data on your behalf, under the Data processing agreement that you accept when you turn it on. You must inform your customers (for example, in your own privacy policy) and have a legal basis for processing their data.
7. Transfers outside the European Economic Area
Anthropic processes data in the United States. The transfer is based on the European Commission’s standard contractual clauses included in its data processing agreement (modules 2 and 3), together with additional security measures. You can ask us for a copy of these safeguards by writing to jennygori@hotmail.com. Higgsfield and its model providers may process data outside the European Economic Area; that transfer is based on the standard contractual clauses in its data processing agreement. Google, Microsoft, Calendly and Meta apply their own mechanisms (the EU-US Data Privacy Framework or standard contractual clauses) to the accounts you connect.
8. How long we keep data
- Account and content: while your account is active. You can delete your content whenever you want.
- Inactive accounts: if you do not log in for 24 months, we notify you and, 30 days later, delete your businesses, your DNA and your conversations.
- Sales agent conversations and contacts, and the history of emails to your contacts: 12 months from the last activity, unless you delete them earlier. Contacts subscribed to your newsletters are kept for as long as they remain subscribed.
- Images, videos and reference photos: until you delete them or delete your account. Higgsfield deletes its copies after 7 days or later.
- Instagram, Facebook and TikTok connection data: until you disconnect them, remove the app in Facebook, Instagram or TikTok, or delete your account.
- Photos and videos you upload to publish: 30 days after they are published, or the next day if you do not use them. Your post history: until you delete the business or your account.
- Billing data: 5 years, under the Danish Bookkeeping Act (bogføringsloven).
- Security data (IP address and usage limits): a few hours.
Anthropic may temporarily retain data under its own policies (for example, content flagged for safety reasons).
9. Your rights
You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent:
- From My account: “Download my data” and “Delete my data”.
- By writing to jennygori@hotmail.com. We reply within one month at the latest.
If you are not satisfied, you can complain to the Danish Data Protection Agency, Datatilsynet (www.datatilsynet.dk), or to the authority in your country.
10. Security
We use an encrypted connection (HTTPS), encrypted passwords, encrypted keys and connection credentials on the server, restricted access and backups. If a security breach occurs that poses a risk, we notify the authority within 72 hours and, where appropriate, the people affected.
11. Minors
The service is intended for people aged 18 and over.
12. Cookies
We only use strictly necessary technical cookies. More information in the Cookie policy.
13. Changes
If we change this policy in an important way, we will notify you by email or on the platform before the change takes effect.