Personal Data Processing Policy

1. Data controller

Controller: Sole Proprietor Varduhi Sahakyan (TIN/ՀՎՀՀ 40552876).
Address: 25 Mikroshrjan bldg., apt. 7, Hrazdan, Kotayk Province, 2302, Republic of Armenia.
Contacts: info@contentsfactory.tech, +374 77 607 207.

2. Categories of data processed

• identification data: email address;
• authentication data: password (stored as a hash);
• profile and settings: language, generation parameters, brandbook, connected channels and sources;
• user content: uploaded materials and generated results;
• technical data: IP, browser, cookies, activity logs;
• payment metadata: status, amount, asset, network, order and transaction IDs, and public addresses (private keys are unavailable);
• support correspondence.

Special categories of data (health, beliefs, etc.) are not requested and are not deliberately processed.

3. Purposes and legal bases

• concluding and performing the agreement (registration, access, billing);
• legitimate interest: security, abuse prevention;
• consent: analytics cookies, newsletters;
• legal obligations (tax accounting).

4. Retention periods

• account data — while the account exists;
• after deletion — erased/anonymised within 30 days;
• payment records — per Armenian tax law;
• technical logs — up to 12 months;
• support correspondence — up to 24 months.

5. Transfers to third parties

Only to the extent necessary to provide the services: AI providers, infrastructure providers, the NOWPayments payment system, channels connected by the user, and public authorities upon a lawful request. Cross-border transfers require an adequate level of protection as demanded by Armenian law.

6. Data subject rights

• access to your data and a copy of it;
• rectification of data;
• erasure of data;
• withdrawal of consent;
• restriction of processing where provided by law;
• complaint to the Armenian supervisory authority and to court.

7. Data deletion procedure

Send a request to info@contentsfactory.tech from the email linked to the account. The controller confirms receipt, performs deletion within 30 days and notifies the subject. Data with statutory retention periods is kept with restricted access.

8. Storage security

Encrypted communication channels, password hashing, encrypted integration credentials, access control, admin action logging, backups, secrets stored separately from code.

9. Final provisions

The current version is published on this page. Continued use of the platform after changes means acceptance of the new version.