PRIVACY POLICY

Last Updated: 01/12/2025

1. Introduction

G. M. POWERSOFT COMPUTER SOLUTIONS LIMITED ("we", "us", "our") is committed to protecting your personal data and handling it with transparency and care. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the AI-SEOGen website and services ("Service").

This Policy is prepared in accordance with:

• The General Data Protection Regulation (EU 2016/679) ("GDPR")
• The applicable Data Protection Laws of the Republic of Cyprus

We act as Data Controller with registration number 84900, located at Leoforos Larnakos 39-41, 1046 Nicosia, Cyprus.

2. Definitions

• Data Controller: The entity determining the purposes and means of processing personal data.
• Data Protection Officer (DPO): The person responsible for overseeing compliance with data protection laws.
• Personal Data: Any information relating to an identifiable natural person.
• Processing: Any operation performed on personal data, automated or otherwise.
• Special Categories of Data: Sensitive information such as health data, biometric data, political opinions, etc.
• Third Party: Any external recipient of your personal data.

3. What Information We Collect

A. Information You Provide Directly

• Name, email, and contact information (e.g., when you create an account, request support, or contact us).
• Billing information, such as VAT number or company details, when purchasing tokens.
• Login and authentication data

B. Information Automatically Collected

We collect minimal technical data required for service security and analytics, such as:

• IP address (short-lived, anonymized where possible)
• Browser type and version
• Device information
• Usage logs
• Cookies (see Cookie Policy below)
• Analytics data (page views, session duration, referral sources)

C. No Upload Storage (CSV Data)

When you upload CSV files to generate SEO descriptions or images:

• All CSV processing occurs locally in your browser.
• We do not store, copy, or transmit your catalog data to our servers (unless explicitly required for purchase or account operations).
• We may collect minimal metadata, such as the number of rows processed, for billing or analytics purposes.

D. No Image or SEO Content Storage

Generated SEO text or returned images:

• Are produced dynamically
• Are not stored on our servers
• Are not used to train AI models
• Are not shared with third parties

4. Legal Basis for Processing

We process personal data under the following lawful bases:

A. Contractual Necessity

To provide you access to the Service, including:

• Account creation
• Token purchases
• Service support
• Fraud prevention
• Delivery of requested features

B. Legitimate Interests

For purposes such as:

• Improving the Service
• Monitoring performance
• Security and abuse prevention
• Logs for troubleshooting
• Commercial communication relevant to our business relationship (non-marketing)

C. Consent

You may provide consent when:

• Submitting website forms
• Accepting cookies
• Signing up for newsletters
• Allowing analytics tracking

You may withdraw consent at any time.

D. Legal Obligations

We may process data to comply with:

• Tax and accounting laws
• Regulatory obligations
• Security and incident-reporting requirements

5. How We Use Your Personal Data

We may use your information to:

• Provide and maintain the Service
• Process token payments
• Respond to support requests
• Improve site performance and functionality
• Prevent misuse, fraud, or abuse
• Send administrative communications
• Comply with legal obligations

We never:

• Sell personal data
• Train AI models using customer data
• Share your catalog data with third parties
• Store your generated content or CSV uploads

6. Sharing Your Personal Data

We only share personal data with trusted third parties when necessary:

• Employees and authorized personnel
• IT and hosting providers
• Payment processors
• Security and analytics providers
• Regulators or authorities, where required by law

All third parties operate under binding confidentiality obligations and GDPR-compliant data-processing agreements.

We do not share product catalogs, CSV uploads, or AI-generated outputs with any third party.

7. International Data Transfers

Our general practice is not to transfer personal data outside the EEA.

If a transfer is necessary, it will only occur when:

• The destination country has an EU adequacy decision, or
• The recipient signs EU-approved Standard Contractual Clauses (SCCs), or
• You explicitly consent to the transfer.

We ensure appropriate protection for all data transferred outside the EEA.

8. Data Retention

We retain personal data only for as long as necessary:

• Account and billing data: up to 7 years (legal requirement)
• Support tickets and emails: up to 3 years
• Analytics and logs: up to 12–24 months, anonymized where possible
• CSV uploads: never stored
• AI outputs: never stored

9. Data Security

We implement industry-standard technical and organizational measures:

• Encryption
• Access controls
• Firewalls and intrusion detection
• Secure hosting
• Confidentiality agreements
• Staff training
• Regular audits and monitoring

While no system is 100% secure, we continuously enhance our security posture.

10. Your Rights

You have the following GDPR rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data where applicable.
• Right to Restrict Processing: Limit how your data is used.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time.
• Right to Lodge a Complaint: You may contact the Cyprus Data Protection Authority if you believe your rights have been infringed.

You may contact the Cyprus Data Protection Authority:

Office Address: Iasonos 1, 1082 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia
Tel: +357 22818456
Email: commissioner@dataprotection.gov.cy

11. Contact Details

If you wish to exercise any right or learn more about our data practices, contact our representative:

Address: Leoforos Larnakos 39-41, 1046 Nicosia, Cyprus
Email: sales@powersoft.com.cy

12. Changes to This Policy

We may update this Policy at any time. Changes will be posted on this page with the "Last Updated" date. Continued use of the Service constitutes acceptance of the updated Policy.

COOKIE POLICY

Our website uses cookies to ensure proper functionality, support analytics, and improve user experience.

1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for site operation—login, security, session handling.
• Functionality Cookies: Remember user preferences (e.g., language, settings).
• Navigation / Performance Cookies: Help analyze how visitors interact with the site (anonymous).
• Analytical Cookies: Used by analytics tools (e.g., Google Analytics) to improve performance.

2. Third-Party Cookies

We use:

• Google Analytics
• Security and error-tracking tools

No personally identifiable information is collected through these tools.

3. Disabling Cookies

You can disable cookies via your browser settings. Note: Some features may not function correctly if cookies are disabled.