Privacy Policy

1. Data we process

• Account data: e-mail address, password hash, organisation name.
• Content you upload: your master banner image and the ad formats you choose to generate.
• Usage and technical data: exports you run, log records, IP address, browser information.
• Billing data: credit balance, purchase and spending history. Card details are processed by payment providers and never reach our servers.

2. Purposes and legal bases

• Providing the Service (contract performance): account management, running resize exports, delivering results, support.
• Billing and accounting (contract performance; legal obligation).
• Service security and abuse prevention (legitimate interest).
• Product analytics and improvement of generation quality (legitimate interest).
• Communications you have requested (contract performance or consent).

3. Processors and transfers

To provide the Service we share data with processors acting on our instructions: hosting and infrastructure providers, payment providers, e-mail delivery services, and third-party AI model providers that process your uploaded banner solely to produce your requested formats. Where processors are located outside the EEA, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We do not sell personal data and do not use your uploaded content to train our own or third-party foundation models.

4. Retention

Account data is kept for as long as your account exists. Uploaded banners and generated results are kept so you can access them in your dashboard and are deleted upon account deletion, except where retention is required by law (e.g. accounting records) or for the establishment of legal claims.

5. Your rights

Subject to the GDPR you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate data;
• erase data ("right to be forgotten");
• restrict or object to processing based on legitimate interest;
• data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection.

To exercise these rights, write to hello@fabrika.ad. We respond within one month.

6. Cookies

The Service uses cookies and similar technologies that are strictly necessary for authentication, security and remembering your language preference (e.g. the session refresh cookie). We also use privacy-respecting analytics to measure site usage.

7. Changes and contact

We may update this Policy; the current version is always available on this page. Questions about privacy: hello@fabrika.ad (ELEMENTS GROUP ALEXOLEG TECHNOLOGIES LTD, Andrea Steliou 15, Larnaca 6015, Cyprus).