Privacy Policy

This policy explains what personal data Fliqo processes, why, and the rights you have. It describes how the software actually behaves.

Who we are

The controller is [not yet configured], [not yet configured], [not yet configured]. Privacy contact: [not yet configured].

What we collect

• Account data: email address, hashed password (managed by our authentication provider), display name, timezone and language.
• Creator profile: what you tell us about your niche, goals, platforms, equipment, locations, wardrobe/props and camera preferences.
• Content and results: ideas, content packs, shoot plans, calendar items, and the post details and metrics you enter or import. Imported data is labelled as imported.
• Media you choose to upload: room photos and test frames. These are analysed and not stored unless you choose “Save to my environment”. Saved photos are private to you.
• Usage and security data: AI usage counts and costs, request identifiers, and security events (such as sign-ins and account changes). IP addresses are stored only as salted one-way hashes.
• Billing: if you subscribe, Stripe processes your payment. We receive subscription status, never your full card details.

Why we use it (and legal bases)

• To provide the service you signed up for: account, plans, shoot instructions, analysis (performance of a contract).
• To personalise recommendations using your profile and results. You can switch personalisation off in Settings → Privacy (contract / your choice).
• To keep the service secure, prevent abuse and keep audit records (legitimate interests).
• To process payments and meet tax and accounting obligations (contract / legal obligation).
• Optional: anonymised product improvement, analytics cookies and marketing emails, only with your consent, which you can withdraw at any time.

AI processing and profiling

Fliqo uses an external AI provider to generate ideas, plans and image feedback. Each request sends only the minimum context needed for that task.

Content you import (for example captions) is treated as data, never as instructions. Fliqo builds a “Creator DNA” profile from your answers and results to tailor recommendations. This doesn't produce legal or similarly significant effects. By default your data is not used to improve Fliqo for other users; that setting is off unless you turn it on. For the AI provider's own data handling, see its terms. We don't make claims about it beyond what our configuration does.

Who we share it with

Only the service providers listed on our subprocessors page, under contract, to run Fliqo. We don't sell personal data.

International transfers

Our database is hosted in the EU. Some providers may process data outside the EEA. Where they do, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

• Account and content: until you delete them or your account.
• Unsaved uploads: deleted automatically within about 24 hours.
• Security and audit logs: kept for a limited period for security and accountability.
• Billing records: as long as tax law requires (held by our payment provider and in our records).

Your rights

You can access, correct, export and delete your data, object to or restrict certain processing, and withdraw consent. Most of this is self-service in Settings → Privacy: Download my data, consent switches and Delete my account. You can also contact [not yet configured]. You have the right to complain to your data protection authority.

Security

Data is encrypted in transit. Access is restricted per user at the database level. Social-account tokens (when that feature launches) are encrypted at rest. Sessions use secure, HttpOnly cookies. If a breach affects your data, we'll notify you and the authorities where the law requires.

Children

Fliqo isn't intended for children under 16.

Changes

If we change this policy materially, we'll tell you in the app and record the new version you accept.