Privacy Policy

This policy explains what personal data we process when you use auwo ads at reklami.auwo.ai (the “Service”), why, how long we keep it, and your rights under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is Vaklin Stoynovski (natural person), Burgas, Bulgaria, trading under the auwo brand. Questions and requests to exercise your rights: audit@auwo.ai. We have not appointed a data protection officer, as one is not required for our type and scale of processing (Art. 37 GDPR).

2. What data we process

• Account: email, name and, with Google sign-in, profile picture. Accounts are run by Clerk.
• The pack form: business name, product description, offer, city, and the phone, address or website you enter. These may contain personal data if they are personal to you.
• Uploaded files: a logo and 1 to 3 photos. Before storing we strip their metadata (including GPS) and downscale them. Please do not upload photos of people without their consent.
• Generated output: texts, images and video for your pack.
• Technical data: IP address (for limits and abuse protection), browser and device type, technical logs.
• Usage counters: how many packs you made this month.

3. Purposes and legal bases

We do not sell your data, do not use it for advertising, and make no automated decisions with legal effects on you. Your content is not used to train models.

• Making the pack you ordered, showing it and letting you download it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Limits, security and abuse protection. Legal basis: legitimate interest (Art. 6(1)(f)).
• Fixing errors (technical logs). Legal basis: legitimate interest.
• Request for a pack of 10: we keep your email and note to reply. Legal basis: steps at your request before entering into a contract.

4. How the pack is made and who sees the data

To make the pack we send to processors: the form text (to write the ads), your photos (to cut out the product and for the video) and scene descriptions (for the backgrounds). Processors act on our behalf and instructions.

5. How long we keep data

• Packs, generated files and the photos and logo you uploaded: 30 days after creation, then deleted automatically. You can delete a pack any time from its page.
• Account: until you delete it.
• Requests for a pack of 10: up to 12 months or until answered.
• Usage counter (an empty row with no content): 90 days after a pack is deleted, so the limit holds.
• Technical logs: briefly, typically up to 30 days.

6. Recipients and processors

Some of them process data in the United States. Transfers are protected by GDPR safeguards: certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

• Vercel Inc.: hosting, file storage (Vercel Blob, private access) and the gateway to the language model (Vercel AI Gateway).
• Anthropic PBC: the language model that writes the ad texts (through Vercel AI Gateway).
• Features and Labels, Inc. (fal.ai): product cutout, background generation and video.
• Railway Corp.: database.
• Clerk Inc.: accounts and sign-in.

7. Security

• Encryption in transit (HTTPS/TLS).
• Files are private: only the pack owner can open them, through our own route after sign-in.
• Automatic deletion after 30 days.
• A daily spending cap and request limits.

8. Your rights

You have the right to access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest. You can delete packs yourself; for everything else write to audit@auwo.ai. We reply within one month.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority where you live.

9. AI-generated content

The images and video in the pack are generated with artificial intelligence and carry a visible “Генерирано с AI” (AI-generated) mark, as Art. 50 of Regulation (EU) 2024/1689 (the AI Act) requires. The product, logo and text are yours, arranged by us.

10. Changes

We may update this policy. The current version and its date are always on this page.