Privacy Policy

1. Information We Collect

We collect the following data to provide the Service:

• Account information: name, email address, and profile data
• Subscription plan and payment status (processed via Dodo Payments — we never store full card details)
• Content generated through the Service (posts, prompts, hashtags)
• Usage analytics: posts generated, platforms used, daily activity
• Session data via cookies for authentication (NextAuth.js)

2. How We Use Your Data

Your data is used to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Improve AI generation quality and platform features
• Send service-related communications (billing, updates, security)
• Comply with legal obligations

3. Data Storage & Sovereignty

All user data is stored on Neon PostgreSQL, hosted on AWS servers located in Europe. The Service is designed to keep your data within sovereign infrastructure. We do not transfer data to servers outside Egypt's legal jurisdiction for processing. AI generation requests may be routed through OpenAI's API (US-based) but no identifying user data is transmitted beyond the content prompt.

4. Third-Party Services

We use the following third-party services:

• Dodo Payments — payment processing. Your payment data is handled by Dodo under their privacy policy.
• NextAuth.js — authentication and session management.
• Neon (PostgreSQL) — primary database hosting.
• Vercel — hosting and deployment platform.
• OpenAI API — AI content generation (prompts only, no personal data).
• Upstash (Redis) — seat counter and caching.

Each third party processes data according to its own privacy policy and applicable data protection laws.

5. Data Retention

We retain your account data for as long as your account is active. Generated content is retained for service delivery. Upon account deletion, we delete or anonymize your data within 30 days, except where retention is required by law.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact us at ayman@teosegypt.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication (NextAuth.js session tokens). No tracking or advertising cookies are used. You can control cookies through your browser settings.

8. Data Sharing

We do not sell your personal data to third parties. We do not share your data for advertising or marketing purposes. Limited data sharing with the third-party services listed in Section 4 is required to operate the Service.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via email. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related inquiries or to exercise your rights, contact us at ayman@teosegypt.com.