This Privacy Policy explains how Feedmate ("Feedmate", "we", "us") collects, uses and protects your information when you use feedmate.ai and the Feedmate application. For any privacy question, contact us at support@feedmate.ai.
1. Information we collect
We collect the following categories of data:
Account data: your name and email address, and an encrypted password managed by our authentication provider.
Connected social accounts: when you connect Instagram, Facebook, LinkedIn, YouTube or TikTok, we receive an OAuth access token and basic account details (handle, account/page/channel IDs, display name, follower counts). We never receive or store your social media passwords.
Billing data: if you subscribe to a paid plan, the payment is handled by our reseller Paddle. We receive your plan, billing country and invoice history. We never receive or store your card details.
Content: the posts, captions, images, videos and publishing schedules you create or that Feedmate generates for you.
Brand information: the website address you provide and publicly available content we analyse to build your brand profile.
Usage data: log data, your IP address, device and browser information, and the actions you take in the app. We record the IP address you connect from to detect and stop automated abuse of the free trial, and we delete it after 90 days.
2. How we use your information
We do not sell your personal data, and we do not use the data from your connected social accounts for advertising.
To provide the service: plan your editorial calendar, generate content, and schedule or publish it to the platforms you connect.
To personalise generated content to your brand.
To provide support, maintain security, prevent abuse, and comply with legal obligations.
To improve the reliability and quality of the service.
3. Connected platforms and publishing
When you connect a social account, you grant Feedmate permission to act on your behalf through the platform's official API, to publish or schedule the posts you approved and to read the connected account's own identity (name, username and profile picture) so we can show you which account is linked. We use these permissions solely to provide the features you request. Our use of information received from Meta, Google, LinkedIn and TikTok complies with each platform's developer terms and policies, including the Meta Platform Terms and Developer Policies.
YouTube: this application uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's own handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).
Feedmate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
You can revoke Feedmate's access to your YouTube channel at any time, either by disconnecting the account inside Feedmate or from the Google security settings page at https://myaccount.google.com/permissions.
Data obtained from the YouTube Data API is stored only for as long as the account stays connected and is refreshed or deleted when the connection ends.
4. Service providers
We share data only with the processors needed to run the service:
Database, authentication and file storage: servers located in Ireland, European Union.
Application hosting and content delivery: servers located in Frankfurt, Germany.
AI generation of text and analysis of images.
AI generation of images and video.
The social platforms you connect (Meta, Google/YouTube, LinkedIn, TikTok): to publish your content to the accounts you have connected.
Paddle.com Market Ltd: reseller and merchant of record for all paid subscriptions: it processes your payment, issues your invoice, and is the name that appears on your bank statement.
The current list of our processors, with their names and locations, is available on request at support@feedmate.ai.
5. Legal bases for processing (EU/EEA and UK users)
We process your personal data on the following legal bases:
Performance of a contract: to create your account, generate your content and publish it to the accounts you connect (Art. 6(1)(b) GDPR).
Legitimate interests: to keep the service secure, prevent abuse and improve reliability, balanced against your rights (Art. 6(1)(f) GDPR).
Legal obligation: to keep accounting and tax records (Art. 6(1)(c) GDPR).
Consent: for optional communications, where we ask for it. You can withdraw consent at any time (Art. 6(1)(a) GDPR).
6. How we protect your data
OAuth access tokens are stored encrypted.
We never store your social media passwords.
Data is isolated per account, so one customer can never access another customer's data.
All data is transmitted over encrypted connections (TLS).
7. Data retention
We keep your data only as long as we need it:
Account and brand data: for as long as your account is active, then deleted within 30 days of a deletion request.
Generated content and editorial calendar: for as long as your account is active; you can delete individual posts at any time.
Social access tokens: until you disconnect the account or delete your account, whichever comes first: the token is erased immediately.
Invoices and accounting records: kept for the period required by applicable tax law, even after the account is closed.
Technical logs: up to 90 days.
8. Your rights
You may have the right to access, correct, delete, export (portability) or restrict the processing of your personal data, to object to processing based on our legitimate interests, and to withdraw any consent you have given. To exercise any of these rights, contact us at support@feedmate.ai: we answer within one month.
You can also delete your data yourself at any time: see our Data Deletion page.
If you are in the EU/EEA or the UK, you have the right to lodge a complaint with your local data protection supervisory authority.
If you are in Albania, you may complain to the Information and Data Protection Commissioner (idp.al).
We do not use your data for automated decision-making that produces legal effects concerning you.
9. Where your data is stored and international transfers
Your account data, your content and your encrypted social tokens are stored on servers located in Ireland (European Union); the application itself is served from Frankfurt, Germany. Some providers (application hosting, AI generation, the social platforms you connect and our payment reseller) may process data outside the EU/EEA, including in the United States. Where that happens, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision. Feedmate itself is established in Albania, a country outside the EEA.
10. If you are in the United States
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. If you are a resident of California or of another state with similar legislation, you have the right to know what personal information we hold about you, to request its deletion, to request a copy of it, and not to be discriminated against for exercising those rights. The same requests, at the same address, work from anywhere in the world: write to support@feedmate.ai.
11. Children
Feedmate is not intended for anyone under the age of 16, and we do not knowingly collect their data.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.
13. Data controller
Romeo Muço, trading as Feedmate, sole trader (NIPT M56507204I), Lagjja Hajro Cakerri, pasuria nr. 13/411/ND2, Vlorë 9401, Albania. Email: support@feedmate.ai.