DIGI SUITE DATA PROTECTION & USER RIGHTS

This document explains how Digi Suite processes personal data and the privacy rights available to users under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Digi Suite is operated by:

1. Personal Data We Collect

Digi Suite may collect the following categories of personal data:

Account Information

• Name
• Email address
• Username
• Password (encrypted)

Business & Profile Data

• Business name
• Social media profile identifiers
• Connected platform account IDs

Technical & Usage Data

• IP address
• Device type
• Browser type
• Login timestamps
• Feature usage activity

Content Data

• Posts you create
• Scheduled marketing content
• Uploaded media (images, videos, logos)
• AI-generated assets and captions

Integration Data

When you connect third-party platforms (such as Facebook, Instagram, or Google Business Profile), we may receive:

• Page IDs
• Account tokens
• Basic profile information
• Analytics metrics

Digi Suite does NOT collect:

• bank account numbers
• social security numbers
• private messages from social media platforms

2. Why We Process Your Data (Legal Basis – GDPR)

Under GDPR, Digi Suite processes personal data using lawful bases:

Contractual Necessity

To provide the service you signed up for (publishing posts, scheduling, analytics, SEO reporting).

Legitimate Interests

To improve performance, prevent fraud, and maintain security.

User Consent

For integrations, marketing communications, and optional features.

Legal Compliance

To comply with financial, tax, and regulatory obligations.

3. How We Use Your Data

We use data to:

• create and manage your account
• publish and schedule social media content
• perform SEO audits and analytics
• generate AI marketing assets
• connect to social media platforms
• provide support
• secure the platform
• detect fraud and abuse

We do NOT sell your personal data.
We do NOT use your content to train public AI models.

4. Sharing of Information

We only share data with trusted service providers necessary to operate Digi Suite, including:

• cloud hosting providers
• analytics services
• authentication providers
• social media APIs
• SEO data providers

These providers process data only on our instructions and are contractually bound to confidentiality and data protection obligations.

5. Your Rights Under GDPR (EU Users)

If you are located in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, email: contact@digisuite.ai

6. Your Rights Under CCPA/CPRA (California Users)

California residents have the right to:

• Know what personal information we collect
• Request deletion of personal information
• Correct inaccurate information
• Limit use of sensitive personal information
• Opt-out of data sale (we do not sell data)
• Non-discrimination for exercising privacy rights

To make a request, email: contact@digisuite.ai
Subject: California Privacy Request

We will respond within 45 days.

7. International Data Transfers

Digi Suite operates in the United States.
If you access the service from outside the United States, your data may be transferred to and processed in the United States.
By using Digi Suite, you consent to this transfer.

8. Data Retention

We retain personal data only as long as necessary:

• Active accounts: retained while account exists
• After account deletion: up to 30 days in backups
• Billing records: retained for legal obligations

9. Security Measures

We implement industry-standard safeguards including:

• encrypted authentication tokens
• HTTPS secure connections
• restricted internal access
• monitoring and abuse detection

However, no internet system can be 100% secure.

10. Contact & Complaints

For privacy concerns:
Email: contact@digisuite.ai

You also have the right to lodge a complaint with your local data protection authority if you believe your rights were violated.