Privacy Policy

The data controller is BITLEAPPS S.R.L., registered office Via Col Francesco Berte 15, 98057 Milazzo (ME), Italy, VAT number 03859100830. Contact for any personal data request: [email protected].

Account and registration data: e-mail address, name, hashed credentials, the organisation and workspace you belong to. Required to create and use an account.

Uploaded and generated content: images, text, designs, brand kits and material you upload or generate through the AI features, together with their metadata.

Third-party connection data: when you voluntarily connect a social or Google account (for publishing or analytics), MediaJam stores the access tokens needed to act on your behalf. The connection can be revoked at any time.

Post comments and statistics: if you connect a Facebook Page or an Instagram account, MediaJam reads the statistics and the public comments under posts published through MediaJam, to show results and flag audience reactions. For each comment it keeps the text, the date and an author identifier in the form of a one-way hash (not the name). Each comment is classified (tone, type of request, spam) by a classification model; the comment text is treated only as data, never as an instruction.

Technical and diagnostic data: IP address, browser and device type, application error logs. Used to deliver the service securely and to spot faults.

Statistical data: only with your consent, aggregate browsing data collected through Google Analytics 4 under Consent Mode v2.

Data from connected Google accounts: if you connect Google Analytics or Search Console, MediaJam requests read-only access (the analytics.readonly and webmasters.readonly scopes) and reads the traffic and search metrics of the properties you select, to show them in your workspace. This data is not sold or transferred to third parties, is not used for advertising or profiling, and is not read by people except with your consent, for security purposes or where the law requires it. MediaJam’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect the account from MediaJam settings or revoke access from your Google Account.

Providing the service, account management and support: performance of a contract (art. 6(1)(b) GDPR).

Platform security, abuse prevention and error diagnostics: legitimate interest (art. 6(1)(f) GDPR).

Tax and statutory obligations: legal obligation (art. 6(1)(c) GDPR).

Site usage statistics through analytics cookies: your consent (art. 6(1)(a) GDPR), withdrawable at any time from the "Cookie preferences" panel.

Google Ireland Limited — Google Analytics 4 and Google Tag Manager, only after consent to analytics cookies. Google Signals is disabled and data retention is set to 14 months.

Functional Software, Inc. (Sentry) — application error diagnostics, where enabled.

TypeSafe AI — classification of the comments under posts (the comment text and an excerpt of the post caption, without author identifiers).

Contabo GmbH (EU) — hosting and server infrastructure the application runs on.

AI model providers (OpenAI, Anthropic and DeepSeek, depending on the purpose) — process the text and images submitted to the generation features. Personally identifying user data (account details, e-mail, name) is not sent to these providers.

Stripe Payments Europe, Ltd. — subscription payment processing.

The APIs of the social networks and services you choose to connect, limited to what the requested publishing action needs.

Account data and content are kept for as long as the account stays active and are deleted within one month of a deletion request or account closure. Technical logs are kept only as long as strictly needed for security and diagnostics. Accounting and tax records are kept for 10 years as required by law. Analytics data collected through Google Analytics 4 is retained for 14 months.

You may at any time request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest, and withdraw any consent without affecting the lawfulness of processing already carried out. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights or ask for your data to be deleted write to [email protected]: we reply within one month. Deletion instructions are on the Data deletion page (/data-deletion).

The full list of cookies and local storage this site uses is in the Cookie Policy.