Privacy Policy

1. Controller

Nethek, s.r.o.
Stvrt M. R. Stefanika 2414/9, 984 01 Lucenec, Slovakia
Company ID: 52799832  ·  VAT ID: SK2121135753
Email: info@inzaria.com  ·  Website: www.inzaria.com

The controller processes personal data in accordance with GDPR and Slovak personal data protection law.

2. What personal data we process

Depending on how you use the platform, we process these categories of data:

• Account data: username, email address, phone number, hashed password, registration and login times, interface language.
• Payment and billing data: billing address, Stripe customer identifier, payment history and subscription status. We do not store card numbers.
• User content: uploaded photos, property/product/service texts and parameters, generated texts, post drafts, visualizations and edited images.
• AI agent and social media data: connected Facebook/Instagram account/page identifiers, selected pages or groups, scheduled posts, published post history, comments, lead messages, performance metrics, content preferences, approval history and feedback.
• AI memory and conversation data: onboarding answers, company profile, chat history, instructions, compliance limits, preferred wording and long-term memory used to keep the assistant consistent.
• Technical and operational data: IP address, login/logout logs, UTM campaign parameters, reCAPTCHA score and verification result, diagnostic logs, error traces, request metadata and account status snapshots.

3. Purposes and legal bases

Purpose	Legal basis
Providing the service, account and subscription management	Contract performance
Invoices and tax obligations	Legal obligation
Platform security, reCAPTCHA and activity logs	Legitimate interest
Marketing campaign evaluation	Legitimate interest
Transactional emails	Contract performance
Email marketing and newsletters	Consent
AI photo processing and visualization generation	Contract performance
AI marketing agent, post scheduling, social media publishing, comment/lead handling and analytics	Contract performance
Long-term AI memory and personalization of outputs	Contract performance and legitimate interest
Operational diagnostics, error monitoring and abuse prevention	Legitimate interest

4. Processors and third parties

We use service providers that may access personal data only where necessary and under contractual data protection obligations.

Processor	Purpose	Location
Stripe, Inc.	Payments, subscriptions and billing	USA, under SCCs
Meta Platforms Ireland Ltd. / Meta Platforms, Inc.	Facebook and Instagram account connection, publishing, comments, leads and analytics	EU/USA, under applicable transfer safeguards
Google LLC	reCAPTCHA, Analytics, Tag Manager and AI photo processing	USA, under SCCs
OpenAI, Inc.	AI text processing for listings, social posts, chat assistance and image-related workflows	USA, under SCCs
Replicate, Inc.	AI visualization processing and generation	USA, under SCCs
AI orchestration and memory providers used by the platform	AI agent workflow, business memory, conversation context and automation support	EU/USA depending on provider, under applicable transfer safeguards
EcoMail a.s.	Transactional emails and email marketing	Czech Republic, EU
Hosting provider	Server and database operation	EU

SCCs are European Commission Standard Contractual Clauses for transfers to third countries.

5. Photos and AI processing

Uploaded photos, entered texts, post instructions, business profile data and chat messages may be sent to AI systems for ordered services such as visualizations, photo editing, listing creation, social post generation, lead/comment assistance and AI chat support. We do not publish uploaded photos without user consent and do not use them to train AI models without explicit consent.

If the user enables autonomous or scheduled publishing, the platform processes content calendars, approval status, planned publication times and social network metadata necessary to perform the requested automation.

6. Data retention

• Account data and content: for the account duration plus 90 days after cancellation.
• Invoices: 10 years from issue, as required by law.
• Activity logs: 12 months.
• Diagnostic/error logs: normally 12 months, unless longer retention is needed to investigate abuse, security incidents or legal claims.
• AI memory, onboarding profile, feedback and post history: for the account duration, until deleted/reset by the user where available, plus 90 days after account cancellation.
• Social network tokens and connected account metadata: while the integration is connected or until token expiry/revocation.
• reCAPTCHA logs: 6 months.
• UTM marketing data: cookies for 30 days; database storage for the account duration.
• Email communication: 3 years from the last contact.
• Marketing consent: until consent is withdrawn.

7. Your rights

You may exercise GDPR rights by contacting info@inzaria.com:

• access to your data, correction, deletion, restriction of processing and portability;
• objection to processing based on legitimate interest;
• withdrawal of marketing consent at any time;
• complaint to the Slovak Data Protection Authority.

We respond to requests within 30 days of receipt.

8. Cookies and tracking

We use essential cookies, analytics cookies and marketing cookies. Consent for analytics and marketing cookies can be withdrawn through the cookie banner or browser settings. See the Cookie Policy for details.

9. Data security

• Encrypted HTTPS/TLS communication.
• Passwords stored only as hashes.
• Payment card data handled exclusively by Stripe.
• Data access limited to authorized personnel.
• Regular database backups.
• Diagnostic logs are designed to avoid readable passwords, card numbers and social network access tokens.

10. Policy changes

We will notify users about material changes by email or on the website at least 14 days before they take effect.

11. Contact

Nethek, s.r.o.
Stvrt M. R. Stefanika 2414/9, 984 01 Lucenec, Slovakia
Email: info@inzaria.com