Privacy Policy

• Account details: your name, email address, sign-in information and account identifiers.
• Brand profiles: brand name, voice, target audience, hashtags, words to avoid, call to action, chosen platforms, approver email and timezone.
• Post requests and content: topics, goals, messages, media links, AI drafts, approvals, approval emails or notes, publication status and links.
• Usage and service records: requests used, subscription plan and status, payment-provider identifiers, support messages and technical records needed to operate and secure the service.

We use this data to create and secure accounts, draft content in your brand voice, send approval emails, publish approved posts, enforce plan allowances, manage subscriptions, provide support and prevent misuse. We also use records to meet legal and accounting duties. Depending on applicable law, these activities rely on providing our contract with you, our legitimate interest in a secure and reliable service, legal obligations, or consent where required. We do not sell your personal data.

We share the information needed to deliver the service with these types of providers:

• Paddle, our payment provider and Merchant of Record, for checkout, subscription payments, refunds and payment support. Paddle also processes payment data under its own privacy policy.
• Our hosting and database provider, Lovable Cloud, to host the app and store account, brand and usage records.
• An AI model provider to generate drafts using the relevant brand profile and post request.
• Our social publishing provider and automation service, including n8n, and the social platforms you choose, to process and publish approved content.
• An email provider to deliver account and approval messages.

Only information relevant to the requested service is shared. Please avoid placing sensitive personal information in your brand profile or post prompts. We may disclose records when legally required or necessary to protect rights and prevent abuse.

Paddle handles payment card data; PHOTOA does not collect or store full card numbers or card security codes. We receive subscription status, plan details and payment-provider identifiers needed to manage your access. See Paddle’s Privacy Policy for its payment-data practices.

We retain account, brand and post records while needed to provide your service. After account closure or a deletion request, we delete or anonymise information no longer needed, subject to legal, accounting, security and dispute-resolution obligations. Backups and provider records may remain for their applicable retention periods. Contact us for details about a specific record.

We use access controls, authenticated accounts and encrypted connections to protect information, and restrict access to those who need it for the service. No online system is completely secure. Keep your sign-in details private and tell us promptly about suspected unauthorised access.

You may request access to, correction, deletion or export of your personal data by contacting us using your account email. You can edit your brand profile in Settings. We may verify your identity before fulfilling a request and explain any lawful reason we cannot fully comply. Depending on your location, you may also have rights to object, restrict processing, withdraw consent or complain to a relevant data protection authority. Account deletion does not automatically cancel a paid subscription; cancel renewals in Billing as well.

We use essential cookies or browser storage to keep you signed in and support secure account sessions. Checkout and sign-in providers may use their own cookies under their policies. If optional analytics or advertising cookies are introduced, we will explain them and obtain consent where required. Blocking essential storage may prevent sign-in or checkout from working.

Our providers may process information outside Tanzania and your country of residence. Data-protection laws may differ in those countries. Where required, we use appropriate contractual or other lawful safeguards for these transfers and can provide further information on request.

The service is intended for businesses and people with legal capacity to enter a contract, not for children. We do not knowingly collect children’s personal data. Contact us if you believe a child has provided personal information so we can investigate and remove it where appropriate.

We may update this policy as our service or legal obligations change. We will communicate material changes and update the dates above.

PHOTOA Digital Services, Tanzania. Owner: Willy John.
Email: inspirewilly@gmail.com
WhatsApp: +255705401415