Privacy Policy

1. Introduction

Eudaimonia D.i. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered digital services and platforms (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, and credentials
• Billing Information: Invoicing data (payments processed by third-party providers; we do not store full card details)
• Content & Data: Text, documents, media, prompts, or other content you upload or generate using our services
• API Keys: If you use Bring Your Own Key (BYOK), keys are stored in encrypted form

3.2 Information Collected Automatically

• Usage Data: Features used, interactions, and generated outputs
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, pages viewed, and error logs

4. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our services
• Improve performance, reliability, and user experience
• Process transactions and issue invoices
• Communicate technical updates, security notices, and support messages
• Respond to inquiries and support requests
• Monitor usage patterns and prevent abuse or fraud
• Ensure legal and regulatory compliance

5. Legal Basis for Processing (GDPR)

We process personal data based on one or more of the following legal grounds:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (service improvement, security, fraud prevention)
• Your explicit consent, where required

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data only in the following cases:

• Service Providers: Trusted third parties providing infrastructure, payment processing, or AI services (e.g., cloud providers, payment gateways)
• Legal Obligations: When required by law or public authorities
• Business Transfers: In case of merger, acquisition, or asset transfer
• With Your Consent: For specific purposes explicitly approved by you

All providers are contractually bound to GDPR-compliant data protection standards.

7. Data Security

We implement appropriate technical and organizational security measures, including:

• Encryption in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Access control and authentication mechanisms
• Regular security updates and monitoring

8. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Service
• Fulfill legal and accounting obligations

You may request deletion of your account and associated data at any time by contacting: info@carosello.app

9. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

• Access: Access your personal data
• Rectify: Rectify inaccurate or incomplete data
• Erase: Erase your data ("right to be forgotten")
• Restrict: Restrict processing
• Portability: Data portability
• Object: Object to processing
• Withdraw: Withdraw consent at any time

Requests can be sent to: info@carosello.app

10. Cookies and Tracking

We use:

• Essential cookies required for platform functionality
• Analytics cookies (where applicable) to improve the Service

You can manage cookie preferences through your browser settings.

11. Third-Party Services

Our services may rely on third-party technologies (e.g., cloud infrastructure, AI model providers, payment processors). Each provider processes data according to its own privacy policy and GDPR obligations.

12. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be published on this page with an updated revision date.