Privacy Policy for intelldom

Last updated: [[date]]

1. Data Controller

The personal data controller is the owner and operator of the intelldom service (hereinafter referred to as “we”, “us”, or “our”). We process personal data in compliance with the Law of Georgia “On Personal Data Protection”, as well as the General Data Protection Regulation (EU) 2016/679 (GDPR) for users located in the European Economic Area (EEA).

Controller details and point of contact for data protection inquiries:

• IE Evgeny Savchenko (AIPractics) — individual entrepreneur registered in Georgia
• Registration number: 328900159
• Registered address: v. Mashavera, Dmanisi region, Georgia
• Enquiries: support@intelldom.com

If you have any questions regarding your personal data or wish to exercise your rights, please contact us at: support@intelldom.com. We review and respond to requests within 30 calendar days.

2. Information We Collect

During Registration and Authentication

• The name you provide or that is shared by the third-party authentication provider (Google, GitHub, Telegram);
• Email address — if you register via email or if provided via Google or GitHub;
• Unique account identifier assigned by the login provider; for Telegram — numeric User ID and username;
• Password — stored exclusively as an irreversible cryptographic hash (Argon2); we never receive or store your password in plain text;
• Authenticator app secrets (2FA) and backup codes — stored encrypted or as secure hashes;
• Timestamp and version of your acceptance of the Terms of Service and Privacy Policy.

When You Visit Our Public Website

We use Google Analytics on our public pages. Google Analytics places a cookie in your browser with a randomized pseudonymous ID and collects information on visited pages, visit timestamps, device and browser specifications, and approximate geographic location derived from your IP address. We only access aggregated statistical reports and do not link this data to your individual user account. The internal application dashboard (admin.intelldom.com) does not run analytics: your actions inside the platform are never transmitted to Google.

Analytics cookies are placed only after you grant explicit consent via our cookie banner; until consent is provided, no analytical tracking occurs. You can decline cookies upon your initial visit, withdraw your consent at any time via the “Cookie Settings” link in the website footer, disable cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on. Google advertising signals are disabled: the service does not create advertising profiles or serve ads.

During Service Operation

• IP address and browser user-agent details for active sessions and login attempts — to maintain security and prevent brute-force attacks;
• Audit and activity logs within the dashboard (recording user identity, action performed, and timestamp);
• Telegram bot tokens and API keys you provide — stored exclusively in encrypted form using AES-256-GCM symmetric encryption;
• Channel settings, connected content sources, drafts, published post history, and uploaded media files;
• Token consumption metrics and usage balance for language model integrations.

If you connect external content feeds or submit drafts that contain personal data of third parties (e.g., author names, quotes, contact details), you represent and warrant that you hold the necessary legal rights and authority to disclose such information to intelldom for processing.

We never access or store your passwords for Google, GitHub, or Telegram, and we never request access to your private correspondence, personal emails, or private repositories.

3. Purposes and Legal Bases for Processing

We process your data strictly for legitimate operational purposes, grounded in the following legal bases:

Purpose of Processing	Data Categories	Legal Basis
Account registration, authentication, and core service delivery (draft generation, scheduled cross-posting to Telegram channels)	Name, email address, provider IDs, channel configurations, content sources, drafts	Performance of a contract / Terms of Service (necessary to provide the service requested)
Transactional communications (email verification, password reset, team invitations)	Email address	Performance of a contract
System security and fraud prevention (brute-force mitigation, suspicious activity detection, audit logging)	Session IP addresses, user-agent strings, system audit logs	Legitimate interests (protecting the integrity of our platform and user accounts)
Usage accounting and rate limiting	LLM API token consumption, subscription status	Performance of a contract and Legitimate interests
Optional notifications (Telegram updates on draft status)	Telegram Chat ID	Consent (managed directly by you in account settings)
Public website traffic analytics	Pseudonymous web analytics, IP-derived general geolocation, cookie identifiers	Consent (obtained via the cookie banner)
Tax and accounting compliance	Customer identifiers from the billing gateway, invoice records	Legal obligation (compliance with applicable statutory requirements)

We do not sell your personal data to third parties, nor do we use it for advertising purposes.

4. Third-Party Disclosures and Service Providers

We share data only with trusted third-party processors strictly as required for system functionality:

• Contabo GmbH (Germany / France) — Infrastructure and cloud hosting provider. The primary intelldom database and application services are hosted in a data center located in France (European Union).
• Identity and Authentication Providers (Google LLC, GitHub Inc., Telegram FZ-LLC) — Transfer of user identifiers during the authentication process.
• Telegram FZ-LLC — Publishing posts and sending system notifications via the Telegram Bot API.
• Large Language Model (LLM) Providers — e.g., Google LLC (Google Gemini API). Providers receive raw source text and prompt content to generate channel drafts. Your user account credentials and billing information are never shared with LLM providers. We utilize commercial API agreements that prohibit provider use of customer data for training foundation AI models.
• Transactional Email Gateways — Specialized delivery services used to send service notifications, confirmations, and security codes.
• Google LLC (Google Analytics) — Pseudonymous traffic reporting on public-facing pages. Processing terms are available in the Google Privacy Policy.
• Paddle.com Market Limited (United Kingdom) — Merchant of Record for subscription management and payments. Paddle collects payment credentials, billing addresses, and country data to calculate taxes and issue formal invoices. Credit card details are processed directly on Paddle’s secure checkout page and never touch intelldom servers. We only receive a customer identifier, subscription status, country, and transaction amounts. For more details, consult the Paddle Privacy Policy.

International Data Transfers:
Our primary database is located within the EU (France). Where third-party service providers (such as AI model APIs or analytics tools) process data outside the EEA or Georgia (notably in the United States), such transfers are governed by recognized cross-border transfer safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-U.S. Data Privacy Framework.

5. Data Retention and Storage

Your data is stored in the intelldom database on Contabo servers in France (European Union) and within encrypted backups.

• Account data, channel preferences, and content: Retained for as long as your account remains active.
• Audit logs, login records, and session IP addresses: Automatically deleted once no longer required for investigating security incidents, and in no event retained longer than 90 calendar days.
• Database backups: Upon account deletion (performed by you in the dashboard or requested via support), active records are purged immediately from production databases. Encrypted disaster recovery snapshots are rotated and permanently overwritten within 30 calendar days.
• Aggregated financial records: Pseudonymous token consumption aggregates and statutory financial transaction records are retained for the duration required by applicable commercial and tax laws.

Posts that have already been published to Telegram reside on Telegram’s infrastructure and in your channels; you can manage or delete them directly through the Telegram application.

6. Your Rights

Subject to applicable data protection legislation, you are entitled to the following rights:

• Right of access and portability: You may request a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format (JSON or CSV).
• Right to rectification: You may update or correct inaccurate or incomplete information through your account settings or by contacting our support team.
• Right to erasure (“Right to be forgotten”): You can delete your account and associated data at any time via: Dashboard → “Account” → “Delete Account”, or by emailing us.
• Right to restriction and objection: You may request restriction of processing or object to data processing activities grounded in our legitimate interests.
• Right to withdraw consent: You may withdraw consent at any time for analytics cookies or optional notification services. If you withdraw consent for core data essential to operating your account, we will be unable to continue providing the service, resulting in account deletion.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority — specifically the Personal Data Protection Service of Georgia, or your local data protection authority within the EU/EEA.

To exercise any of these rights, contact us at: support@intelldom.com. We respond to all verified requests within 30 days.

7. Changes to This Privacy Policy

We may periodically revise this Privacy Policy.

The most current version will always be available on this page, accompanied by the updated effective date. In the event of material changes affecting your rights or the scope of processing, we will provide at least 14 days’ prior notice via an in-app banner in the dashboard or via email sent to your registered account address.