Privacy policy

This policy explains what personal data Tadaai collects, why, who we share it with, and the rights you have. It applies to the Tadaai website and app at https://tadaaai.com (the "Service").

1. Who is responsible

The data controller is Tadaai (company registration in progress), Sweden. Questions or requests about your data: tuliany@mail.com.

2. What we collect

• Account data: your name, email address and a securely hashed password (we never store the password itself).
• Brand data you give us: your website address, a description of your business, links to example Reels, and the brand profile we create from them (name, tone of voice, products, colours, logo).
• Public website content: when you enter a website, we read its public pages (text, colours, logo and images) to build your brand profile.
• Content you upload: photos and video clips, and the Reels, captions and hashtags created from them.
• Connected accounts (only if you choose to connect them): from Instagram, Facebook, LinkedIn or Google Drive we receive access tokens and the specific data needed for the feature you use – for example your profile name, the posts you publish through Tadaai, or the files you pick in Google Drive.
• Technical data: a login cookie, and basic server logs (time, address requested, errors) kept to run and secure the Service.

We do not sell your data, and we do not use it for advertising.

3. Why we use it, and on what legal basis

• To provide the Service – your account, brand profile, Reels and publishing (performance of our contract with you).
• To keep it secure and working – logs, fraud and abuse prevention (our legitimate interest).
• To contact you about your account, such as password resets and important changes (performance of contract).
• To meet legal obligations, such as bookkeeping once paid plans exist.

4. AI processing

Tadaai uses AI to write brand profiles, ideas, scripts and captions. The text and brand information needed for that is sent to our AI provider, Anthropic. Under its commercial terms, Anthropic does not use this data to train its models. You decide what is published: nothing is posted without your approval.

5. Who we share data with

We use these service providers ("processors"), each only for the purpose listed:

• Railway – hosting of the app, database and uploaded files.
• Anthropic – AI text generation.
• Resend – sending service emails such as password resets.
• Cloudflare – domain name service and network security.
• Meta, LinkedIn and Google – only when you connect those accounts, to publish content or read files you choose.

Some of these providers process data outside the EU/EEA, including in the United States. Where they do, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

6. Google user data

If you connect Google Drive, Tadaai only accesses the files you select yourself. Tadaai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use that data only to add your chosen media to your Tadaai library, we do not use it for advertising, we do not sell it, and no person reads it except where you ask us to for support, where it is needed for security, or where the law requires it.

7. How long we keep data

• Account, brand data, uploads and Reels: for as long as your account exists. When you delete your account, they are deleted within 30 days.
• Access tokens for connected accounts: until you disconnect the account or delete your Tadaai account.
• Server logs: up to 30 days. Password reset links expire after 60 minutes.

8. Cookies

We use one essential cookie to keep you logged in. We do not use advertising or tracking cookies, so no cookie consent banner is needed.

9. Your rights

Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to its use, and move it to another service. Most of it you can view and edit yourself in the app, and you can delete your account and data at any time. For anything else, email tuliany@mail.com; we answer within 30 days. You can also complain to your data protection authority – in Sweden, Integritetsskyddsmyndigheten (IMY), imy.se.

10. Security

Data is sent over encrypted connections (HTTPS), passwords are hashed, login sessions can be ended at any time, and access to your brands is limited to your account.

11. Children

The Service is for businesses and is not intended for anyone under 18.

12. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.