Privacy Policy

Your privacy is important to us. This Privacy Policy describes what information we collect, how we use it, and your rights regarding your data.

1. What We Collect

When you use Selfstorm, we collect the following information:

Personally Identifiable Information (PII):

• Your Google account name and email address (via Supabase Auth)
• Your inputs (brand, brief, region, uploaded documents, etc.) and the outputs generated from them
• Your email preferences and communication consent

Payment Data:

• Subscription details and payment status (via Stripe)
• We do not store any credit card or billing information ourselves

Technical Data:

• IP address, browser type, device info
• Usage data (e.g. pages visited, session time) for analytics

2. How We Use Your Data

We use your data to:

• Authenticate your access to the platform
• Process your form inputs and generate output
• Email you generated reports or presentations
• Send you occasional updates and marketing (if consented)
• Monitor and improve the Service

We do not sell or share your data with third parties for advertising purposes.

To generate outputs, your inputs are processed by AI model providers (Google Gemini, OpenAI and Perplexity) through their paid APIs. Your inputs and outputs are never used to train AI models, by us or by these providers. The full list of service providers that process data for us, with their location and transfer safeguards, is in our Data Processing Addendum.

3. Legal Basis for Processing

We process your personal data under the EU General Data Protection Regulation (GDPR) on these legal bases:

• Performance of a contract (Article 6(1)(b)) to provide your account and the Service, including processing your inputs
• Consent (Article 6(1)(a)) for marketing emails and analytics cookies, which you can withdraw at any time
• Legitimate interest (Article 6(1)(f)) for security, fraud prevention and improving the Service
• Legal obligation (Article 6(1)(c)) for invoicing and accounting records

If you use Selfstorming on behalf of an organisation and enter personal data about its clients or staff, your organisation is the controller of that data and Selfstorming acts as its processor under our Data Processing Addendum.

4. Data Retention

• We retain your data as long as your account exists, so you can return to your sessions. Ending a paid subscription does not delete it.
• You can delete your account and associated data at any time by emailing us at hello@selfstorming.com. We delete it within 30 days, and backups containing it are overwritten within a further 30 days.
• Invoices and payment records are kept for the period required by Slovak accounting law.

5. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw your consent at any time
• Object to processing for marketing purposes
• File a complaint with your local data protection authority

6. Cookies

We use cookies to:

• Maintain your session after login
• Measure performance and usage
• Improve user experience

You can manage cookie settings through your browser.

7. Data Security

We use industry-standard tools to protect your data:

• Supabase for secure user and data storage, hosted in the EU (Frankfurt)
• Stripe for secure payments
• HTTPS encryption across all services and encryption at rest
• Row-level security, so each account can only access its own data

If a personal data breach occurs, we notify the supervisory authority within 72 hours where required and inform affected users without undue delay. Details of our security measures are in our Data Processing Addendum.

8. Data Controller Information

Data Controller:

Provider means: Business company identified as follows:

Business name: Selfstorm s.r.o.
Registered office: Priama cesta 14, 841 10 Bratislava, Slovak Republic
Identification no.: 57 138 036
E-mail for data protection requests: hello@selfstorming.com

9. Policy Updates

We may revise this Privacy Policy over time. When we do, we will post the updated version and notify you in case of major changes.