Privacy Policy

This Privacy Policy explains how Falcon Solutions s. r. o. ("we", "us", "our") collects, uses, and protects personal data when you use CreatorHab (the "Service"), in accordance with the EU General Data Protection Regulation (GDPR) and applicable Slovak data protection law.

1. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, and profile picture obtained from Google when you sign in via Google OAuth.
• Billing data: subscription tier, billing history, and payment status. Card details are collected and processed directly by Stripe, our payment processor — we do not store your full card number.
• Content you provide: your Creator Profile and Target Avatar descriptions, YouTube URLs or pasted text/transcripts submitted to tools, uploaded documents (for tools that support file upload), and the outputs generated for you.
• Usage data: tool run history, credit transactions, login timestamps, and general analytics events.
• Technical data: IP address, browser/device information, and cookies (see Section 5).

2. How We Use Your Data

• To create and operate your account and authenticate you (legal basis: performance of a contract).
• To process payments and manage your subscription (legal basis: performance of a contract).
• To run the AI tools you request, including sending relevant content (e.g. a video transcript, comments, or your profile text) to third-party AI providers to generate a result (legal basis: performance of a contract).
• To secure the Service, prevent abuse, and enforce our Terms of Service (legal basis: legitimate interest).
• To understand aggregate usage of the Service through analytics (legal basis: legitimate interest / consent, where cookies require it).

3. Who We Share Data With

We do not sell your personal data. We share data with the following categories of service providers, strictly as needed to operate the Service:

• Stripe — payment processing and billing.
• Google — sign-in (OAuth) and Google Analytics (GA4) for aggregate usage analytics.
• OpenAI — processes content you submit (e.g. comments, transcripts, profile text) to generate AI analysis and results.
• YouTube Data API / YouTube transcripts — used to retrieve public video metadata, comments, and transcripts for videos you submit.
• Cloudflare — bot protection (Turnstile) on our login page.

Some of these providers may process data on servers located outside the European Economic Area (e.g. the United States). Where this occurs, the provider relies on an adequate safeguard recognized under GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

4. Data Retention

We retain account and usage data for as long as your account remains active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations (invoices and billing records are generally retained for 10 years under Slovak accounting law). You may request deletion of your account and associated data at any time, subject to the retention obligations described above.

5. Cookies

We use a session cookie/token to keep you signed in, a Cloudflare Turnstile cookie on the login page for bot protection, and Google Analytics (GA4) cookies to understand aggregate site usage. You can control or delete cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

6. Your Rights

Under GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at falconsolutionssro@gmail.com.

You also have the right to lodge a complaint with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky) or your local EU data protection authority.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) and token-based authentication. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.

8. Children's Privacy

The Service is not directed at individuals under 16 years of age, and we do not knowingly collect personal data from children under 16.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

10. Contact

For any privacy-related questions or requests, contact us at falconsolutionssro@gmail.com.