Privacy Policy

1. Introduction

This Privacy Policy describes how POPA V.-I. GEORGE PERSOANĂ FIZICĂ AUTORIZATĂ, located in Romania (hereinafter referred to as "we", "us", "our", or "the Company"), operating the website Reoogle (https://reoogle.com), collects, uses, and protects your personal information when you visit our website and use our services.

By accessing or using Reoogle, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the website.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and any profile information you choose to provide.
• Payment Information: When you purchase a subscription, payment details are processed securely through our third-party payment processors (Stripe, Sellix). We do not store your full credit card information on our servers.
• Business Profile: If you use the AI auto-posting feature, we collect the business name, description, target audience, and content preferences you provide to configure AI-generated posts.
• Feedback and Communications: Any feedback, reviews, or messages you send to us through our feedback forms or support channels.

3.2 Reddit Account Connection Data

If you choose to connect your Reddit account to use the AI auto-posting feature, we collect and store the following data obtained through Reddit's official OAuth 2.0 authorization protocol:

• Reddit Username: Your Reddit username, used to identify which account is connected and to display in your dashboard.
• OAuth Access Token and Refresh Token: Encrypted tokens issued by Reddit that allow us to perform authorized actions (submitting posts, editing posts, deleting posts) on your behalf. These tokens are stored securely and encrypted at rest. We never store your Reddit password.
• Token Expiry Information: Timestamps indicating when access tokens expire, used to automatically refresh authorization.
• Authorized Scopes: The specific Reddit API permissions you have authorized (read, submit, edit, delete, identity, history).

You may revoke this authorization at any time through your Reddit account's authorized applications settings at reddit.com/prefs/apps or through the Reoogle dashboard. Revoking authorization prevents future posts but does not automatically delete posts already published to Reddit.

3.3 AI-Generated Post Data

• Post Content: Titles and body text of posts generated by our AI and/or edited by you, stored in our database linked to your account.
• Reddit Post Identifiers: The unique identifiers Reddit assigns to posts published through our Service, used to sync edits and deletions.
• Post Performance Metrics: Score (upvotes minus downvotes), number of comments, upvote ratio, view count, and post status (posted, removed, deleted), retrieved from Reddit's API and updated periodically.
• Subreddit Targets: The names of subreddits you have selected as targets for AI-generated posts.

3.5 Information Collected Automatically

• Usage Data: Information about how you interact with our website, including pages visited, features used, search queries, and time spent on pages.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and other standard server log information.
• Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies to enhance your experience and gather analytics data.

4. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our database, search functionality, and AI auto-posting features.
• AI Post Generation and Publication: To use your business profile information to generate relevant AI content and, using your Reddit OAuth tokens, to publish, edit, and delete posts on Reddit on your behalf in accordance with your instructions.
• Post Tracking: To periodically retrieve performance data (score, comments, view count, status) from Reddit's API for posts published through our Service and display this data in your dashboard.
• Reddit Token Management: To securely store and automatically refresh your Reddit OAuth tokens to maintain uninterrupted access to the authorized features without requiring you to re-authenticate.
• Account Management: To create and manage your account, process transactions, and send you related information.
• Communication: To respond to your inquiries, send service updates, promotional materials (with your consent), and important notices.
• Analytics and Improvement: To understand how users interact with our service and to improve our website, products, and user experience.
• Security: To detect, prevent, and address technical issues, fraud, and unauthorized access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

5. Legal Basis for Processing (GDPR)

As a company located in Romania, we process your personal data in compliance with the General Data Protection Regulation (GDPR). The legal bases for our processing activities include:

• Contractual Necessity: Processing necessary for the performance of our contract with you (e.g., providing the service you subscribed to).
• Consent: Processing based on your explicit consent (e.g., marketing communications, cookies).
• Legitimate Interest: Processing necessary for our legitimate interests, such as improving our services, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal obligations under Romanian and EU law.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Payment Processors: Stripe and Sellix for secure payment processing.
• Hosting and Infrastructure: Netlify (hosting), Supabase (database) for service delivery and secure data storage.
• Reddit, Inc.: When you use the AI auto-posting feature, your OAuth tokens are used to authenticate API requests to Reddit on your behalf. Post content (titles, bodies) and your Reddit account credentials are transmitted to Reddit's servers via Reddit's official API. This transmission is necessary to fulfill the service you requested.
• AI Content Generation Providers: Post titles and body text are generated using third-party large language model APIs (such as OpenAI or similar providers). We transmit your business profile information and target subreddit context to these providers to generate relevant content. We do not transmit your Reddit credentials or personal contact information to AI providers.
• Analytics Providers: To help us understand website usage and improve our services.
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights, privacy, safety, or property.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for as long as your account is active. Upon account deletion, your data will be removed within 30 days.
• Reddit OAuth Tokens: Retained for as long as your Reddit account is connected. Tokens are automatically deleted when you disconnect your Reddit account or delete your Reoogle account. You may also invalidate them at any time through Reddit's authorized applications page.
• AI Post Data: Post content, Reddit post identifiers, and performance metrics are retained for as long as your account is active or until you delete individual posts from your dashboard. Upon account deletion, all post data is removed within 30 days.
• Payment Records: Retained for up to 10 years as required by Romanian fiscal legislation.
• Usage and Analytics Data: Retained for up to 26 months.
• Feedback Data: Retained for as long as necessary for service improvement purposes.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data, subject to certain exceptions.
• Right to Restriction of Processing: You have the right to request that we limit the processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@reoogle.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

9. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the website to function properly (e.g., authentication, session management).
• Analytics Cookies: Help us understand how visitors interact with our website to improve performance and user experience.
• Functional Cookies: Remember your preferences and settings (e.g., language, display options).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness (only with your consent).

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions by the European Commission for the recipient country.
• Other legally recognized transfer mechanisms under the GDPR.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest.
• Secure authentication mechanisms.
• Regular security assessments and updates.
• Access controls and role-based permissions.

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us at info@reoogle.com, and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: