This Privacy Policy explains how Feedmate ("Feedmate", "we", "us") collects, uses and protects your information when you use feedmate.ai and the Feedmate application. For any privacy question, contact us at support@feedmate.ai.
1. Information we collect
We collect the following categories of data:
Account data: your name and email address, and an encrypted password managed by our authentication provider.
Connected social accounts: when you connect Instagram, Facebook, LinkedIn, YouTube or TikTok, we receive an OAuth access token and basic account details (handle, account/page/channel IDs, display name, follower counts). We never receive or store your social media passwords.
Billing data: if you subscribe to a paid plan, the payment is handled by our authorised reseller (Merchant of Record) shown at checkout. We receive your plan, billing country and invoice history and, if you cancel, the reason and the comment you choose to give in the cancellation form and the reply you choose to send us from the link in our email after you cancel. We never receive or store your card details.
Content: the posts, captions, images, videos and publishing schedules you create or that Feedmate generates for you.
Photos and videos of people: the content you upload may show people's faces or voices. We use it only to prepare and publish your posts as you ask, and never to recognise or identify anyone. You must have the consent of the people shown (see our Acceptable Use Policy).
Brand information: the website address you provide and publicly available content we analyse to build your brand profile.
Usage data: log data, your IP address, device and browser information, and the actions you take in the app. We record the IP address you connect from to detect and stop automated abuse of the free trial, and we delete it after 90 days.
2. How we use your information
We do not sell your personal data, and we do not use the data from your connected social accounts for advertising.
To provide the service: plan your editorial calendar, prepare the drafts, and schedule or publish what you approve to the platforms you connect.
To personalise generated content to your brand.
To provide support, maintain security, prevent abuse, and comply with legal obligations.
To improve the reliability and quality of the service.
If you have paid for a plan and it then ends, because you cancel it or do not pay a renewal: to understand why customers leave and, within 90 days of your plan stopping, to send you a few emails about Feedmate: what is waiting for you if you come back and an offer on our plans. They only concern our own service, and you can stop them at any time, free of charge, with the "Stop offers" link at the bottom of each of these emails or by turning off "Send me offers" in Account & login. Notices about your workspace do not depend on this.
3. Connected platforms and publishing
When you connect a social account, you grant Feedmate permission to act on your behalf through the platform's official API, to publish or schedule the posts you approved and to read the connected account's own identity (name, username and profile picture) so we can show you which account is linked. We use these permissions solely to provide the features you request. Our use of information received from Meta, Google, LinkedIn and TikTok complies with each platform's developer terms and policies, including the Meta Platform Terms and Developer Policies.
YouTube: this application uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's own handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).
Feedmate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
You can revoke Feedmate's access to your YouTube channel at any time, either by disconnecting the account inside Feedmate or from the Google security settings page at https://myaccount.google.com/permissions.
Data obtained from the YouTube Data API is stored only for as long as the account stays connected and is refreshed or deleted when the connection ends.
4. Service providers
We share data only with the processors needed to run the service:
Database, authentication and file storage: servers located in Ireland, European Union.
Application hosting and content delivery: servers located in Frankfurt, Germany.
Background processing (video cropping and conversion, scheduled jobs, backups): a server we run, located in Germany, European Union.
Email delivery (account confirmation, password recovery, alerts about your posts and connections and, after a paid plan ends, our offers): servers located in the European Union.
AI generation of text and analysis of images.
AI generation of images and video.
Collection of publicly available data from reference social accounts (public posts and public profile information, never private content), used to study what works on social media and to suggest ideas.
Bot protection on the sign-up, sign-in and password recovery pages, when enabled.
The social platforms you connect (Meta, Google/YouTube, LinkedIn, TikTok, Pinterest): to publish your content to the accounts you have connected.
Our authorised reseller (Merchant of Record) shown at checkout, for all paid subscriptions: it processes your payment, issues your invoice, and is the name that appears on your bank statement.
The full list of the categories of sub-processors we use, with the location of each, is published at feedmate.ai/subprocessors.
5. Legal bases for processing (EU/EEA and UK users)
We process your personal data on the following legal bases:
Performance of a contract: to create your account, generate your content and publish it to the accounts you connect (Art. 6(1)(b) GDPR).
Legitimate interests: to keep the service secure, prevent abuse, improve reliability and understand why customers cancel, balanced against your rights (Art. 6(1)(f) GDPR).
Legitimate interests, for direct marketing: emails with offers on our plans to people who have paid for one (Art. 6(1)(f) GDPR), as allowed for existing customers by Art. 13(2) of Directive 2002/58/EC and the national laws that implement it. You can object at any time, free of charge.
Legal obligation: to keep accounting and tax records (Art. 6(1)(c) GDPR).
Consent: for optional communications, where we ask for it. You can withdraw consent at any time (Art. 6(1)(a) GDPR).
6. How we protect your data
OAuth access tokens are stored encrypted.
We never store your social media passwords.
Data is isolated per account, so one customer can never access another customer's data.
All data is transmitted over encrypted connections (TLS).
7. Data retention
We keep your data only as long as we need it:
Account and brand data: for as long as your account is active, or until the retention period after your plan stops ends (see below), then deleted within 30 days of a deletion request.
Generated content and editorial calendar: for as long as your account is active, or until the retention period after your plan stops ends (see below); you can delete individual posts at any time.
Content of a workspace whose plan is no longer active (the trial has ended, or the subscription has ended, is paused or is suspended): kept unchanged for 30 days from the email that tells you the exact date, or for 60 days if you have paid for a plan at least once, then deleted (posts, media and their versions, library, documents, brand identity, connected social accounts, competitor analyses and learned preferences). If the plan becomes active again before that date, nothing is deleted. Your login, your workspace with its plan and your billing details are kept, so you can start again.
Cancellation details of a paid plan (the reason and comment you give when cancelling, the reply you send us from our email, when your access ends, and a count of what your workspace contained, such as the number of posts and the connected platforms): kept until you delete your account.
Social access tokens: until you disconnect the account or delete your account, whichever comes first: the token is erased immediately.
Invoices and accounting records: kept for the period required by applicable tax law, even after the account is closed.
Technical logs: up to 90 days.
8. Your rights
You may have the right to access, correct, delete, export (portability) or restrict the processing of your personal data, to object to processing based on our legitimate interests, and to withdraw any consent you have given. To exercise any of these rights, contact us at support@feedmate.ai: we answer within one month.
You can also delete your data yourself at any time: see our Data Deletion page.
You can object to our offers at any time, free of charge: use the "Stop offers" link at the bottom of the email or turn off "Send me offers" in Account & login.
If you are in the EU/EEA or the UK, you have the right to lodge a complaint with your local data protection supervisory authority.
If you are in Albania, you may complain to the Information and Data Protection Commissioner (idp.al).
We do not use your data for automated decision-making that produces legal effects concerning you.
9. Where your data is stored and international transfers
Your account data, your content and your encrypted social tokens are stored on servers located in Ireland (European Union); the application itself is served from Frankfurt, Germany. Some providers (application hosting, AI generation, the social platforms you connect and our payment reseller) may process data outside the EU/EEA, including in the United States. Where that happens, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision. Feedmate itself is established in Albania, a country outside the EEA.
10. If you are in the United States
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. If you are a resident of California or of another state with similar legislation, you have the right to know what personal information we hold about you, to request its deletion, to request a copy of it, and not to be discriminated against for exercising those rights. The same requests, at the same address, work from anywhere in the world: write to support@feedmate.ai.
11. Children
Feedmate is not intended for anyone under the age of 16, and we do not knowingly collect their data.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.
13. Data controller
Romeo Muço, trading as Feedmate, sole trader (NIPT M56507204I), Lagjja Hajro Cakerri, pasuria nr. 13/411/ND2, Vlorë 9401, Albania. Email: support@feedmate.ai.