Privacy Policy

1. Data we process

• Account data: e-mail address, display name, password hash, organisation name.
• Social sign-in data: identifier, name and e-mail provided by the sign-in provider (e.g. Google).
• Content you upload: brand books, images, logos, briefs and other materials submitted for generation.
• Usage and technical data: operations you run, log records, IP address, browser information.
• Billing data: balance, top-up and spending history. Card details are processed by payment providers and never reach our servers.

2. Purposes and legal bases

• Providing the Service (contract performance): account management, running generation operations, delivering results, support.
• Billing and accounting (contract performance; legal obligation).
• Service security and abuse prevention (legitimate interest).
• Product analytics and improvement of generation quality (legitimate interest).
• Communications you have requested (contract performance or consent).

3. Processors and transfers

To provide the Service we share data with processors acting on our instructions: hosting and infrastructure providers, payment providers, e-mail delivery services, and third-party AI model providers that process your uploaded content solely to produce your requested outputs. Where processors are located outside the EEA, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We do not sell personal data and do not use your uploaded content to train our own or third-party foundation models.

4. Retention

Account data is kept for as long as your account exists. Uploaded content and generated results are kept so you can access them in your dashboard and are deleted upon account deletion, except where retention is required by law (e.g. accounting records) or for the establishment of legal claims.

5. Your rights

Subject to the GDPR you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate data;
• erase data ("right to be forgotten");
• restrict or object to processing based on legitimate interest;
• data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection.

To exercise these rights, write to hello@fabrika.ad. We respond within one month.

6. Cookies

The Service uses cookies and similar technologies that are strictly necessary for authentication and security (e.g. the session refresh cookie). We also use Google Analytics (Google Ireland Ltd.) to measure site usage; analytics data is pseudonymous and processed under Google's data-processing terms.

7. Changes and contact

We may update this Policy; the current version is always available on this page. Questions about privacy: hello@fabrika.ad (ELEMENTS GROUP ALEXOLEG TECHNOLOGIES LTD, Andrea Steliou 15, Larnaca 6015, Cyprus).