Data Safety & Privacy Information
Last Updated: 9/26/2026
Last Updated: 9/26/2026
What Data We Collect
Account Information
- Email address (required for account creation)
- Full name
- Profile information you provide
- Business card details (name, title, company, phone)
Content You Upload
- Business photos and videos
- Business introduction videos
- Business logos and branding materials
- Music files
- Text descriptions and captions
Usage Data
- Device information (type, operating system, browser)
- IP address and location data
- Pages visited and features used
- Time spent on the platform
- Error logs and performance data
Payment Information
- Payment processed through Stripe (we don't store credit card numbers)
- Billing address and transaction history
- Subscription plan and status
Social Media Tokens
- OAuth access tokens for YouTube, Facebook, LinkedIn, Instagram, TikTok, Twitter, Pinterest, Threads, Bluesky
- Social media profile information (when you connect accounts)
How We Use Your Data
- AI Processing: To generate videos, images, and marketing content using artificial intelligence
- Video Creation: To create marketing videos with your photos and branding
- Social Media Posting: To publish content to your connected social media accounts
- Account Management: To manage your subscription, authentication, and preferences
- Analytics: To improve our services and understand how users interact with the platform
- Customer Support: To respond to your inquiries and provide assistance
- Legal Compliance: To comply with applicable laws and regulations
🤖 AI Services & Data Processing
Our platform uses AI to power core features. Here's exactly how your data is processed:
Chat & Text Generation
Your chat messages and text prompts are sent to OpenAI/Anthropic servers for AI processing. This includes business descriptions, social media captions, and AI assistant conversations.
Image Analysis & Generation
Photos you upload may be analyzed by AI to generate descriptions and titles. AI image generation (DALL-E) uses your text prompts to create images.
Voice Features
When you use voice input with our AI assistant, your speech is converted to text using your browser's Web Speech API. We do not store raw audio. Text is then processed by AI services.
Video Processing
Your uploaded photos and videos are sent to ShotStack for video rendering. The final videos are stored in cloud storage.
Who We Share Data With
Service Providers
- Stripe: Payment processing
- OpenAI: AI content generation, text analysis, and chat features
- Anthropic (Claude): AI content generation and analysis
- ShotStack: Video rendering and processing
- Creatomate / JSON2Video: Additional video processing
- Supabase: File storage and database
- Google Analytics (G-9B4PJ8HZSW): Website analytics and insights
- Base44: Backend infrastructure provider
Social Media Platforms
- YouTube, Facebook, Instagram, LinkedIn, TikTok, Twitter/X, Pinterest, Threads, Bluesky
- Content is shared only when you explicitly request posting to these platforms
We DO NOT:
- ❌ Sell your personal data to third parties
- ❌ Share your data with advertisers
- ❌ Use your content for training AI models without permission
- ❌ Share your data with data brokers
Data Retention
- Account Data: Retained while your account is active
- Uploaded Content: Retained for 30 days after account deletion
- Generated Videos: Retained for 90 days or until you delete them
- Transaction Records: Retained for 7 years (legal requirement)
- Analytics Data: Anonymized and retained indefinitely
- Deleted Account: All personal data permanently deleted within 30 days
Your Rights
- Access: Request a copy of your data
- Correction: Update or correct your information
- Deletion: Request permanent deletion of your account and data
- Portability: Export your data in machine-readable format
- Opt-Out: Unsubscribe from marketing emails
- Restrict Processing: Limit how we use your data
- Lodge Complaint: Contact data protection authorities
To exercise any of these rights, contact us at: support@promomax.ai
Security Measures
- 🔐 End-to-end encryption for data transmission
- 🔐 Secure cloud storage with access controls
- 🔐 Regular security audits and penetration testing
- 🔐 Two-factor authentication available
- 🔐 OAuth 2.0 for social media integrations
- 🔐 Automatic logout after inactivity
- 🔐 Employee access restricted to need-to-know basis
International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place through:
- Standard Contractual Clauses (EU)
- Privacy Shield frameworks (where applicable)
- Adequate data protection agreements
Children's Privacy - 18+ Only
Our service is NOT intended for anyone under 18 years of age. We do not knowingly collect data from children under 18. If we discover that a child under 18 has provided us with personal information, we will immediately delete such information from our servers.
Questions About Data Safety?
If you have any questions about how we handle your data, please contact us at:
Company: PROMOMAX.AI
Brand: PromoMax
support@promomax.ai
Legal Language Disclaimer
The English-language version of this Agreement (including the Privacy Policy, Terms of Service, and all related legal documents) shall be the governing and legally binding version. Any translations displayed in other languages are provided solely for user convenience and shall have no legal effect. In the case of any conflict or discrepancy between the English version and a translated version, the English version shall control.