Privacy policy

The controller of your personal data is Exion s. r. o., Belinského 1036/18, 851 01 Bratislava, Slovakia, IČO 54783127, registered in the Commercial Register of the Bratislava III City Court, section Sro, file 163909/B. For any privacy question or request, email digital@exion.sk.

• Account data: your email address, your name if you add it, and your password, which we store only as a secure hash.
• Project data: the domains you add, public content of those websites that we crawl, documents you upload, your Google Maps listing details, texts you paste to teach the app your writing voice, and the drafts and posts created in your projects.
• Google account data: if you connect Google Analytics or Search Console, read-only reports for the properties you select and the access tokens needed to fetch them. Tokens are stored encrypted.
• Notification data: your Telegram chat ID, only if you turn on Telegram alerts.
• Billing data: company name, address and company IDs needed for invoices.
• Technical data: IP address, browser type, time and requested address, recorded in server logs for security and troubleshooting.
• Messages: what you send us by email.

• To create your account and provide the service you signed up for, including the integrations you choose to connect (performance of a contract, Art. 6(1)(b) GDPR).
• To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c) GDPR).
• To keep the service secure, prevent abuse and fix errors (legitimate interest, Art. 6(1)(f) GDPR).
• To answer your messages and contact you about your trial or subscription (performance of a contract or legitimate interest).

We do not sell personal data and we do not use it for advertising.

To measure AI answers and create drafts, posts and translations, we send project content to AI model and machine translation providers. This includes buyer questions, public website text, your business facts, documents you upload and draft text. We do not send your password or Google access tokens.

We do not use your data to train our own AI models. Please do not upload documents containing personal data of other people unless you need them for your project and have the right to share them.

If you connect Google Analytics or Search Console, we request read-only access and use the data only to show you reports and to improve the recommendations and drafts in your own projects. We do not use it for advertising, we do not sell it, and people at Exion read it only with your permission, for security reasons or when the law requires it.

Exion Content's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google at any time in the app or in your Google account settings.

We share personal data only with service providers that process it for us under contract:

• Hosting: Oracle Cloud Infrastructure, data centre in Frankfurt, Germany.
• Google: AI models through Google Cloud, Maps and Places, PageSpeed Insights, and the Analytics and Search Console APIs you connect.
• Other AI model and machine translation providers used to answer buyer questions and to create drafts and translations.
• Telegram, only if you turn on alerts.
• Our email provider and our accountants, for messages and invoices.

A current list of providers is available on request at digital@exion.sk.

Some providers process data outside the European Economic Area, for example in the United States. In those cases we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on the Commission's standard contractual clauses.

• Account and project data: while your account is active. After you close your account, we delete your projects within 30 days and remove them from backups within 90 days.
• Invoices and accounting records: 10 years, as required by Slovak accounting law.
• Server logs: up to 90 days.
• Emails: as long as needed to handle your request.

We use only cookies that are necessary to sign you in and keep your session secure. We do not use analytics or advertising cookies, so we do not ask for cookie consent.

You have the right to:

• access the personal data we hold about you and get a copy of it
• have incorrect data corrected
• have your data deleted
• restrict or object to processing based on legitimate interest
• receive your data in a portable format
• withdraw consent at any time, where processing is based on consent

To use any of these rights, email digital@exion.sk. We answer within one month. You can also file a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

All traffic is encrypted with HTTPS. Passwords are stored as hashes, integration tokens are encrypted, and access to production systems is limited to the people who run the service.

Exion Content is a business tool and is not meant for people under 16.

If we change this policy, we update the date at the top. If the change is significant, we tell account holders by email before it takes effect.