Effective date: December 1, 2025
This GDPR Privacy Statement supplements the Altyaa LLC Privacy Policy and applies to individuals located in the European Economic Area ("EEA"), the United Kingdom ("UK"), and Switzerland. It describes how Altyaa processes personal data in accordance with the EU GDPR, the UK GDPR, and the Swiss Federal Act on Data Protection (FADP).
Purposes of processing
Personal data is processed to create and manage accounts, provide reputation management and social media services, generate AI-assisted content and agent automation, send operational messages, secure and improve performance, process subscription payments via Stripe, enable posting to connected platforms, provide support, and comply with legal obligations.
Lawful bases for processing
Legitimate interests — operating and improving the Services, authentication, monitoring performance, detecting abuse, developing features, and ensuring security.
Consent — optional marketing communications, cookie-based analytics, connecting external integrations, AI functions requiring personal data input, and media uploads for posting. You may withdraw consent at any time.
Contractual necessity — providing access to the platform, delivering AI-assisted tools, managing subscription billing, and posting content to connected platforms at your direction.
Legal obligations — tax and financial laws, security investigations, and regulatory obligations.
Categories of personal data processed
Name, email address, business name and type, hashed login credentials, IP address and device data, usage analytics, social media content you upload, photos and videos uploaded for posting, review responses and captions, AI-generated content created within your account, and connected platform identifiers. We do not intentionally process special categories of data unless voluntarily provided.
Recipients of personal data
We may share personal data with service providers acting as processors (hosting and cloud infrastructure, email and notification providers, AI processing providers under strict terms, security and analytics tools, and Stripe), all bound by GDPR-compliant data processing agreements; with third-party integrations you connect (Google, Meta, TikTok) as authorized by you; with legal and regulatory authorities when required; and with corporate successors in the event of a merger or acquisition.
International transfers
Altyaa LLC is based in the United States, where most processing occurs. To ensure compliance we use the European Commission's Standard Contractual Clauses (SCCs), apply the UK Addendum and Swiss Addendum where required, implement supplemental technical and organizational safeguards, use encryption in transit and at rest, and minimize data collection and retention.
Retention
We retain personal data only as necessary to deliver the Services, protect platform integrity, fulfill legal obligations, resolve disputes, and enforce agreements. Photos and videos uploaded for posting are stored securely, retained only while your account is active, and deleted upon account deletion or request, subject to legal obligations. Content already posted to third-party platforms remains under their control.
Your GDPR rights
Individuals in the EEA, UK, and Switzerland have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, objection to processing based on legitimate interests, withdrawal of consent, data portability, and the right to lodge a complaint with a supervisory authority. To exercise these rights, email [email protected]. We may require verification of your identity.
Security
Altyaa maintains GDPR-compliant security measures, including encrypted transmission (TLS), encrypted storage of sensitive metadata, strict access controls, secure password hashing, multi-region redundancy, continuous monitoring, backup and disaster recovery, and incident response protocols.
Updates to this statement
We may update this Statement from time to time. Material changes will be communicated by email or in-app notice, and continued use of the Services indicates acceptance.