Privacy Policy

1. Data Controller

The data controller is OreoStudios, an individual entrepreneur registered in France (SIREN 993 823 459, SIRET 993 823 459 00017, Code APE 62.01Z). Contact: privacy@zyntralai.com

2. Data We Collect

We collect the following personal data:

• Account information: email address and password (hashed)
• Social media account tokens when you connect a platform
• Content you create, upload, or generate through the Service
• Usage data: pages visited, features used, timestamps
• Technical data: IP address, browser type, device information

3. How We Use Your Data

We use your data to:

• Provide and operate the Service
• Publish content to your connected social media accounts on your behalf
• Send transactional emails (account verification, password reset)
• Improve and develop the Service
• Comply with legal obligations

4. Legal Basis (GDPR)

We process your data based on: (a) contract performance — to deliver the Service you signed up for; (b) legitimate interests — to improve and secure the Service; (c) legal obligation — where required by law.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Social media platforms you explicitly connect (LinkedIn, Twitter/X, TikTok, etc.)
• AI model providers (Anthropic, OpenAI, Google) to generate content — only the prompts you submit
• Infrastructure providers (hosting, email) under data processing agreements

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is deleted within 30 days, except where retention is required by law.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with the CNIL (French data protection authority)

To exercise your rights, contact us at: privacy@zyntralai.com

8. Cookies

We use only strictly necessary cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Continued use after changes constitutes acceptance.