Privacy policy

Brutux Studio, publisher of Hanny, is the controller of its customers’ data. Contact: contact@brutux.studio.

For content that a customer uploads or has produced about third parties (a team photo, the name of a client quoted in a testimonial), that customer is the controller, and the publisher acts as a processor.

• Account: email address, business name, hashed password, login dates, and proof of acceptance of the terms of service (version, date, IP address). Legal basis: performance of the contract. Necessary to open and secure access.
• Sign-up source: when you arrive on the sign-up page through a tracked link, the source stated in that link (network, placement, campaign) is recorded with your account. It is read from the page address, without any cookie or tracker, and nothing is recorded if the link does not carry one. Legal basis: legitimate interest, to know which channels bring us our customers.
• Brand: name, address of the analysed website, logo, colours, editorial voice, pillars, and, where provided, the profile of the person speaking (name, position, biography). Legal basis: performance of the contract.
• Content: posts produced, uploaded images, calendars, review feedback. Legal basis: performance of the contract.
• Shared review: the first name or name and the feedback entered by the person to whom you send a review link, kept with the post. Legal basis: performance of the contract with the customer who shared the link.
• Billing: plan, payment history, invoices. Legal basis: legal obligation and performance of the contract.
• Technical logs: access logs, audit log of sensitive actions, log of model usage, and technical error reports. Legal basis: legitimate interest, for security, cost control and the proper functioning of the service.

No data is sold, rented or used for advertising purposes. No audience measurement or behavioural tracking tool is installed.

Having a text written means sending it to a model. Here is precisely to whom, and what.

Delegated publishing (upcoming option): once it is activated, a scheduling provider will receive the text, the visual and the date of the approved posts, as well as delegated access to the pages concerned. It will be added to this list before any transmission.

Transfers outside the European Union are based on the European Commission’s standard contractual clauses, supplemented where applicable by the provider’s participation in the EU–US Data Privacy Framework.

Content sent to model providers is sent through their business interfaces, whose terms rule out training on customer data. The publisher does not train any model on its customers’ data.

• Account and content: for the entire duration of the subscription, then thirty days after its termination, to allow an export. Deleted afterwards, files included.
• Unconverted trial: ninety days after your last login, then deleted, files included.
• Invoices: ten years, as required by accounting law.
• Audit log, usage log and proof of acceptance of the terms: five years after the end of the contractual relationship, the commercial limitation period. They survive the deletion of the account and are designed so that they cannot be modified: that is what gives them their value as evidence.
• Login tokens: revoked on expiry or on logout, kept in hashed form until the account is deleted.
• Error reports: according to the retention period of the monitoring service, ninety days at most.

You have the right of access, rectification, erasure, objection, restriction and portability. Two of them can be exercised directly from your account, without writing to anyone:

• Portability: the full export of your data, in a machine-readable format, from the Brands page of your account.
• Erasure: the permanent deletion of the account, its brands, posts and images, from the same page. Only the logs and the proof of acceptance mentioned above remain, and they cannot be modified.

For the others, contact@brutux.studio. We reply within one month. You may also set out instructions on what happens to your data after your death, and lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).

Each account’s data is isolated at two levels: by the database itself, which refuses any read outside the current account, and by the application, which keeps each brand separate. Passwords are hashed, session tokens are never stored in plain text, and sensitive actions are logged.

In the event of a data breach likely to result in a risk, the persons concerned and the supervisory authority are informed within the time limits laid down by the regulation.