Legal document · GDPR

Privacy Policy

Last updated 20 October 2026
Scope European Union · GDPR
01

Data controller

The controller of the personal data collected on this platform is:

Name Jesús Carbajo Cortés
Address Sant Cugat del Vallès, Spain
02

Purpose of processing

At Ailoquence we process your personal data for the following purposes:

  • Managing your access to and use of the Ailoquence platform
  • Allowing optional sign-in with your Google account (OAuth)
  • Generating personalized content with artificial intelligence based on your texts
  • Connecting to and publishing content on third-party social networks (Meta and TikTok) when you expressly authorize it
  • Ensuring the security and technical stability of the service
03

What data we collect

The personal data collected is:

  • Your name
  • Your email address
  • The text content you generate or edit within the platform
  • If you connect a social network (Meta or TikTok), your public profile and the access tokens needed to publish content on your behalf — see section 05
04

Use of the Google API

Ailoquence uses Google authentication (OAuth 2.0) on an optional basis to let users sign in with their Google account.

If you authorize this access, we use the scope https://www.googleapis.com/auth/gmail.send, exclusively to send emails on your behalf from the platform.

  • NO We do not access, read, store or analyze your inbox.
  • NO We do not access your contacts, drafts or any other personal Gmail information.
  • YES We only use the gmail.send endpoint to send emails that you generate.
🔒
We comply with Google’s Limited Use data policies and never use your data for advertising purposes.
05

Connected social media (Meta and TikTok)

Ailoquence lets you connect social media accounts to publish the content you generate on the platform. We currently offer integration with Meta (Facebook and Instagram) and TikTok. This connection is always optional and requires your explicit authorization through each platform’s OAuth process.

Meta (Facebook and Instagram)

  • We obtain your public profile (name and photo) and the Facebook pages or Instagram business accounts that you manage and decide to connect.
  • We store the access token needed to publish on your behalf the content you generate in Ailoquence, only on the pages or accounts you connect.
  • We do not access private messages, contacts or any other information from your Meta account beyond what is strictly necessary to publish content.
  • You can revoke access at any time from your Meta account settings or from Ailoquence; when you do, we permanently delete the stored token.

TikTok

  • We obtain basic information from your TikTok public profile (username and profile picture) and the access tokens (access_token / refresh_token) needed to connect your account.
  • We use this data to publish on your TikTok account the video you generate in Ailoquence. Before each post we show you the privacy level available for your account (public, friends only or private) and whether you have disabled duet, stitch or comments, so you can choose how each video is published. Depending on the features available on your account, the post can be made directly to your profile or sent to your TikTok inbox for you to confirm manually from the app.
  • We do not access your TikTok messages, contacts or private content.
  • You can disconnect your TikTok account at any time from Ailoquence; when you do, we permanently delete the stored tokens.
🔒
We comply with the developer policies of Meta and TikTok. We do not share, sell or transfer this data to third parties, and we do not use it for advertising purposes.
06

Providers that process data on behalf of Ailoquence

To provide the service we rely on the following providers, who act as data processors and only process the data necessary for their function:

  • Hostinger (servers in the EU): hosting of the application and the website.
  • Stripe: subscription billing and payment management. Ailoquence does not store your card details.
  • Amazon Web Services (S3, servers in the EU): storage of the images, videos and audio you generate or upload.
  • OpenAI and Google (Gemini): generation of texts and scripts, and subtitle transcription, based on what you write or upload.
  • fal.ai: generation of images, videos and avatars.
  • ElevenLabs: voice generation and voice cloning from the reference audio you upload.
  • Mailgun (Sinch Email, servers in the EU): sending your store’s Newsletter to your customers and recording deliveries, bounces and complaints.
  • Google Workspace: sending your account emails (verification, subscription notices…).
  • Meta: measuring sign-ups and purchases coming from our advertising campaigns through its Conversions API; the email is sent hashed, never in plain text.
🌍
Some of these providers (Stripe, OpenAI, fal.ai, ElevenLabs, Google and Meta) may process data outside the European Economic Area. In those cases, the transfer is covered by the safeguards provided for in the GDPR: the standard contractual clauses approved by the European Commission or, where the provider has signed up to it, the EU-U.S. Data Privacy Framework
07

Your store’s customers’ data

If you connect your WooCommerce or Shopify store, Ailoquence processes on your behalf the data of your customers that it needs for two functions: the Newsletter (email, name, orders, carts and marketing consent) and the store statistics (for example, your best customers). Regarding that data, you are the data controller and Ailoquence acts as processor, under the Data Processing Agreement you accept when activating the Newsletter. We do not ask for your customers’ phone number or address.

  • Emails are only sent to customers who have given their marketing consent.
  • Each email includes a link to unsubscribe.
  • Addresses that bounce or mark an email as spam are automatically excluded from subsequent sends.
  • Your customers’ personal data is automatically anonymized: abandoned carts after 90 days of inactivity and the send log after 365 days.
  • In Shopify stores, when a customer asks for their data to be deleted, Shopify notifies us and we delete it. If you uninstall the app, Shopify notifies us after 48 hours and we delete your store’s data (unless you have reinstalled it).
08

Data retention

  • Your data is kept for as long as your account remains active.
  • If you delete your account, all your data will be permanently deleted.
  • In case of inactivity, it will be deleted automatically after 1 year.
  • Meta and TikTok access tokens are kept only while the connection remains active; they are permanently deleted when you disconnect the account or delete your Ailoquence account.
09

Security

Ailoquence applies appropriate technical and organizational measures to protect your data:

  • Secure authentication with OAuth 2.0
  • Encrypted storage of access tokens and credentials (WordPress, WooCommerce, Shopify, Meta and TikTok), database encrypted at rest and encrypted backups
  • Protection against unauthorized access
  • Automated deletion when closing your account or disconnecting a social network
10

User rights (GDPR)

If you reside in the European Union, you have the right to:

👁️
Access
Access your personal data stored on the platform.
✏️
Rectification
Rectify incorrect or incomplete data.
🗑️
Erasure
Request the deletion of your personal data.
🚫
Objection
Object to the processing of your data in certain cases.
📦
Portability
Request the portability of your data to another service.
⏸️
Restriction
Request the restriction of processing in certain circumstances.
✉️
You can exercise these rights by writing to help@ailoquence.com
11

Account deletion

You can delete your account from your profile at any time. This action is irreversible and involves:

  • Immediate removal of your access to the platform
  • Permanent deletion of all your personal data
  • Permanent deletion of all your connection tokens, including those obtained through Meta and TikTok
  • Permanent deletion of all the generated content in your account

If you only want to disconnect a social network without deleting your whole account, you can do so from Ailoquence’s connection settings; the corresponding token is deleted immediately and permanently.

12

Changes to this policy

We reserve the right to update this Privacy Policy when necessary. We will notify you of important changes through the platform or by email sufficiently in advance.

The last updated date will always be visible at the top of this document.

Need more information?

For any questions about this policy, write to us directly.

Write to us →