KONZA PRIVACY POLICY

This Privacy Policy sets out how personal data is collected, used, stored, transferred and protected when using the KONZA service, available at:

https://konza.pro

The owner of the service and the controller of personal data is:

Individual entrepreneur Abelchakov Illia Leonidovych Registration number: 3159601250 Country of registration: Ukraine Address: 19335, Cherkasy region, Zvenyhorodka district, Yablunivka village, Berehova St. 47 Email for enquiries: support@konza.pro

In this Policy the words “KONZA”, “the Service”, “we”, “us” or “our” mean individual entrepreneur Abelchakov Illia Leonidovych and the KONZA software service.

By using KONZA, creating an account, connecting a social network integration or transferring data to the Service, the user confirms that they have read this Policy.

1. Scope of the Policy

This Policy applies to:

• visitors to the KONZA website;
• registered users;
• sole traders and company representatives;
• persons who connect social network accounts;
• persons on whose behalf the user creates or publishes content;
• persons whose personal data the user enters into or uploads to the Service;
• users of current and future KONZA features.

The Policy covers all features relating to the creation, editing, planning, analysis, checking, storage, adaptation or publication of content with the help of artificial intelligence.

KONZA functionality may change. Individual tools may be added, updated, restricted or removed without the need to fully rewrite this Policy, provided that the nature of personal data processing does not change materially.

2. Purpose of KONZA

KONZA is an AI/SaaS software service for working with content.

Depending on the features available at a given moment, the Service may:

• create drafts of texts and posts;
• edit, shorten, expand or rewrite texts;
• adapt content to a style, profession, audience, brand or a specific social network;
• analyse information provided by the user;
• build content plans, topics, headlines, structures and post variants;
• work with news, links, open sources or the user's own materials;
• check content for repetition, compliance with given parameters or other criteria;
• prepare content for LinkedIn, Instagram, Threads and other supported platforms;
• connect to social networks through their official APIs;
• publish content on the user's command or with their consent, where such a feature is available;
• provide other related tools for automating work with content.

The specific list of features is determined by the current version of the Service.

3. What personal data we process

3.1. Registration data

When an account is created we may receive:

• first and last name;
• email address;
• account identifier;
• profile photo, if it is passed on by Google;
• account language and settings;
• information about the registration date and the last sign-in;
• account status;
• information about the plan or the available features.

KONZA uses Google Login for authentication. In that case Google may pass us the data the user agreed to share during authorisation.

KONZA does not receive the password to the user's Google account.

3.2. Profile data

To personalise content the user may provide:

• profession;
• job title;
• field of activity;
• business description;
• information about goods or services;
• professional experience;
• interests;
• hobbies;
• preferred topics;
• unwanted or prohibited topics;
• communication style;
• tone of voice;
• examples of texts or posts;
• description of the target audience;
• professional or public positioning;
• rules and restrictions for content creation;
• other information the user voluntarily provides to configure the Service.

Such data may be stored in a structured form, in particular as an internal user profile required for the Service's features to work.

3.3. User input materials

We may process materials that the user enters, uploads, sends or connects to KONZA:

• texts;
• prompts and instructions;
• previous posts;
• drafts;
• content plans;
• links;
• documents;
• descriptions of goods and services;
• brand materials;
• names, details or materials about third parties;
• information from social networks;
• other data the user needs in order to create content.

The user alone determines the content of such materials and is responsible for the lawfulness of transferring them to KONZA.

3.4. Generated content

We may process and store:

• drafts created by the Service;
• edited texts;
• posts;
• headlines;
• descriptions;
• content plans;
• text variants;
• check results;
• generation history;
• editing history;
• information about publication or publication errors;
• other results of the AI features.

Storing such materials may be necessary to display history, reuse and edit content, check for repetition, support the user and keep the Service working properly.

3.5. Social network data

KONZA may connect to supported social networks through their official APIs.

Depending on the permissions the user grants to the relevant platform, we may receive or process:

• account identifier;
• profile name or title;
• username or handle;
• profile photo;
• the list of pages or accounts available to the user;
• access tokens;
• permissions granted to the integration;
• drafts and posts;
• date, time and status of publication;
• API error messages;
• technical integration metadata.

KONZA may:

• only create drafts for the user to review manually;
• give the user the option to copy the text themselves;
• publish content through the social network's API following the user's command, setting or consent.

The user may revoke KONZA's access through the settings of the relevant social network or by disconnecting the integration in the Service, where that option is available.

Disconnecting an integration does not necessarily delete content that has already been published on the social network.

3.6. Technical data

While the Service is used we may automatically collect:

• IP address;
• browser type;
• device type;
• operating system;
• browser language;
• date and time of the visit;
• session duration;
• pages visited;
• features used;
• error information;
• security logs;
• technical identifiers;
• approximate location based on the IP address;
• information about API requests;
• information about attempts at unauthorised access or rule violations.

3.7. Analytics and advertising data

The website may use:

• Google Analytics;
• Meta Pixel.

These services may collect information about:

• website visits;
• the pages and features used;
• the referral source;
• device type;
• browser;
• approximate location;
• interaction with advertising materials;
• the performance of advertising campaigns;
• other technical and behavioural metrics.

Such tools are used in line with cookie settings, the user's consent where it is required, and the policies of the respective providers.

3.8. Payment data

If KONZA offers paid plans or features, payment may be processed by a third-party payment provider whose name and terms are shown to the user on the payment page.

We may receive:

• payer's name;
• payer's email;
• payment amount;
• currency;
• payment date;
• payment status;
• transaction identifier;
• plan name;
• information about refunds or cancellations;
• data required for accounting and tax records.

If bank card details are entered on the payment provider's secure page, KONZA does not receive or store the full card number, the CVV code or other complete payment credentials.

3.9. Support enquiries

When a user writes to support@konza.pro, we may process:

• name;
• email;
• the content of the message;
• attached files;
• technical data;
• correspondence history;
• information needed to resolve the question or dispute.

4. Third-party data

The user may upload or enter data about other individuals only where there is a lawful basis for doing so.

The user confirms that they:

• are entitled to transfer such data to KONZA;
• have obtained the necessary consent, where it is required;
• have informed the person about the processing of their data, where the law requires it;
• are entitled to use that person's name, style, image, biography, posts or other materials;
• do not use KONZA to unlawfully impersonate another person;
• do not use the data for deception, harassment, defamation or violation of human rights.

KONZA may restrict processing or delete materials where there are reasonable grounds to believe that they breach the law or the rights of third parties.

5. Sensitive personal data

KONZA is not intended for the deliberate processing of:

• medical data;
• biometric data used for identification;
• data on racial or ethnic origin;
• political, religious or philosophical beliefs;
• information about sex life;
• information about criminal offences;
• other high-risk data.

The user must not enter such data unless doing so is lawful and necessary.

If the user transfers sensitive data on their own initiative, they are responsible for having a proper legal basis for its processing.

KONZA may refuse to process or may delete materials that create excessive legal, security or ethical risk.

6. Purposes of personal data processing

We process data in order to:

• create and maintain an account;
• authenticate via Google Login;
• provide KONZA features;
• create, edit and store drafts;
• publish automatically through social network APIs;
• run integrations;
• process user requests;
• keep a history of work;
• prevent repetitive content;
• ensure security;
• detect fraud, abuse and violations;
• provide technical support;
• diagnose errors;
• improve the interface and functionality;
• analyse usage;
• assess advertising performance;
• process payments;
• comply with legal requirements;
• protect the rights and legitimate interests of KONZA;
• resolve disputes;
• develop new features related to the purpose of the Service.

7. Legal bases for processing

We process personal data on the basis of:

• the user's consent;
• the necessity to perform the contract with the user;
• the necessity to comply with legal requirements;
• KONZA's legitimate interest in ensuring security, preventing abuse, improving the Service and protecting rights;
• other grounds provided for by the legislation of Ukraine.

Providing certain data may be voluntary. However, without the data required for authentication, building a profile or fulfilling a request, certain KONZA features may be unavailable.

8. Use of artificial intelligence

For its AI features KONZA uses:

• OpenAI;
• Anthropic.

The user's input data may be transferred to these providers to the extent necessary to fulfil a specific request.

Such data may include:

• the text of the request;
• the user's instructions;
• fragments of the profile;
• style examples;
• previous content;
• materials required for generation;
• technical parameters of the request.

KONZA does not transfer more data to AI providers than is reasonably necessary for the relevant feature to work.

The user must not enter confidential information or third parties' personal data unless it is needed and there is a lawful basis for doing so.

9. Policy on training AI models

KONZA:

• does not use users' personal data to train or fine-tune its own AI models;
• does not use users' input materials and generated results to train or fine-tune its own models;
• does not transfer materials to OpenAI or Anthropic for the purpose of training or fine-tuning their models;
• uses the providers' relevant APIs or commercial modes to fulfil user requests.

Data may be technically processed by AI providers in order to produce a response, ensure security, prevent abuse, provide technical support and comply with their legal obligations under the terms of the relevant provider.

Anonymised or aggregated technical metrics may be used by us for analytics, security and improvement of the Service, provided that such metrics do not allow a specific user to be identified.

10. Automated processing

KONZA uses automated systems for:

• text analysis;
• content creation;
• editing;
• topic classification;
• style personalisation;
• searching for repetition;
• checking compliance with given criteria;
• automated publication;
• security checks;
• detection of abuse.

Such processes are not intended to take decisions that in themselves produce legal effects for the user or significantly affect their rights.

The user decides for themselves whether to use, edit or publish the content that has been created.

11. Who data may be transferred to

Data may be transferred to the following categories of recipients:

11.1. AI providers

• OpenAI;
• Anthropic.

The transfer takes place in order to generate, analyse or edit content.

11.2. Hosting and technical infrastructure

Hetzner is used to host and run the Service.

The following may be stored or processed on Hetzner servers:

• account data;
• profile data;
• input materials;
• generated content;
• operation logs;
• technical data;
• backups.

11.3. Authentication

Google Login may be used to sign in.

Google processes information in accordance with its own policy and the user's settings.

11.4. Analytics and advertising

• Google Analytics;
• Meta Pixel.

11.5. Social networks

Data is transferred to the relevant social network when the user:

• connects an account;
• grants permissions;
• sends content for publication;
• uses another API feature.

11.6. Payment providers

If the user makes a payment, the data is transferred to the payment provider whose name is displayed before the payment is made.

11.7. Public authorities and professional advisers

Data may be disclosed to:

• a court;
• law enforcement authorities;
• state authorities;
• tax authorities;
• lawyers;
• accountants;
• auditors;

where this is required by law or in order to protect KONZA's rights.

We do not sell databases of users' personal data.

12. Processing of data outside Ukraine

OpenAI, Anthropic, Google, Meta, Hetzner or other technology providers may use infrastructure located outside Ukraine.

Personal data may therefore be technically processed or stored in other countries.

KONZA uses such providers only to the extent necessary for the Service to function, and takes into account their contractual terms, privacy policies and data protection measures.

By using the relevant feature or connecting an integration, the user agrees that technical processing may take place outside Ukraine.

13. Retention periods

Since the exact period depends on the category of data and the way the Service is used, KONZA applies the following criteria:

• account data is kept while the account is active;
• profile data is kept while it is needed to personalise the Service;
• input materials and generated content are kept while they are available in the account or needed to provide features;
• social network tokens are kept while the relevant integration is active or while storing them is necessary for the integration to work;
• security and technical logs are kept for the period necessary for security, diagnostics and the investigation of violations;
• data on payments and business transactions is kept for the periods established by the accounting, tax and other legislation of Ukraine;
• correspondence with support is kept while it is needed to resolve the enquiry or dispute or to protect rights;
• backups may be kept for a limited technical period after the primary copy is deleted.

Once the relevant period ends, data is deleted, anonymised, or kept only to the extent required by law.

KONZA may keep certain data after an account is closed where this is necessary for:

• complying with legal obligations;
• accounting or tax records;
• preventing fraud;
• handling complaints;
• resolving disputes;
• protecting the rights of KONZA or third parties.

14. Cookies and similar technologies

KONZA may use:

• necessary cookies;
• authentication cookies;
• preference cookies;
• analytics cookies;
• advertising cookies;
• pixels;
• local storage;
• other similar technologies.

Necessary cookies may be used for:

• signing in to an account;
• maintaining the session;
• security;
• remembering technical settings;
• running the features the user requests.

Google Analytics and Meta Pixel may be used for analytics and advertising measurement.

Where the law requires prior consent for certain cookies or tracking technologies, such technologies must be activated only after the user's consent has been obtained.

The user may restrict cookies through their browser settings. Disabling necessary cookies may cause certain features to work incorrectly.

15. Data security

KONZA applies reasonable technical and organisational measures to protect data, in particular:

• access restrictions;
• authentication mechanisms;
• access rights control;
• secure connections;
• logging of technical events;
• backups;
• security monitoring;
• restricted access for employees and contractors;
• vetting of technical providers;
• incident response.

No method of transferring or storing data guarantees absolute security. KONZA does not promise the complete absence of any risks, but takes reasonable measures appropriate to the nature of the data and the available technologies.

The user is also responsible for:

• the security of their Google account;
• the devices they sign in from;
• preventing access by unauthorised persons;
• disconnecting unnecessary integrations in good time;
• notifying KONZA of suspicious activity.

16. User rights

The user has the right to:

• know the sources from which their personal data was collected and where it is held;
• receive information about the conditions of access to it;
• receive information about the third parties their data is transferred to;
• obtain access to their personal data;
• request the correction of inaccurate or outdated data;
• request the deletion of data where there are lawful grounds;
• withdraw consent to processing where the processing is based on consent;
• object to certain processing;
• lodge a complaint with a competent authority or a court;
• protect their rights by other means provided for by the legislation of Ukraine.

To exercise these rights, write to:

support@konza.pro

The request should state:

• name;
• the account email;
• the substance of the request;
• the data needed to verify identity.

KONZA may ask for additional information where this is necessary to verify identity and to prevent data being handed to someone else.

17. Deletion of the account and data

The user may request deletion of the account and the related data by sending a message to:

support@konza.pro

Deleting an account may result in the loss of:

• profile settings;
• generation history;
• drafts;
• connected integrations;
• other information associated with the account.

Data that KONZA is obliged to keep under the law, accounting rules, security requirements or in order to resolve a dispute may not be deleted immediately.

Content already published on social networks is not deleted automatically as a result of deleting a KONZA account. The user must delete such content directly on the relevant social network.

18. Revoking social network permissions

The user may revoke KONZA's permissions:

• through the settings of the relevant social network;
• through the integration settings in KONZA, where such a feature is available;
• by writing to support@konza.pro.

Once permissions are revoked, automated publication or other features of the relevant integration may stop working.

19. Minors

KONZA is intended for persons who are at least 18 years old.

Persons under 18 must not create an account or transfer personal data to KONZA on their own.

If we reasonably establish that an account belongs to a minor, we may:

• restrict access;
• request age verification;
• delete the account;
• delete the associated data, where the law does not require it to be kept.

20. Third-party websites and services

KONZA may contain links to, or integrations with, third-party websites and platforms.

This Policy does not govern the independent data processing carried out by:

• Google;
• OpenAI;
• Anthropic;
• Meta;
• LinkedIn;
• Instagram;
• Threads;
• Hetzner;
• payment providers;
• other third-party services.

The user should read the policies of the relevant third-party service before using it.

21. Changes to the Policy

KONZA may change this Policy in connection with:

• the development of functionality;
• the addition of new providers;
• changes in the ways data is processed;
• legal requirements;
• security measures;
• changes in business processes.

The current version is published on the KONZA website.

If the changes materially affect the user's rights or the nature of data processing, KONZA may additionally notify them through the account, the website or by email.

22. Contact information

For questions about privacy, personal data, account deletion, integrations or the exercise of rights, please contact:

Individual entrepreneur Abelchakov Illia Leonidovych Registration number: 3159601250 Address: 19335, Cherkasy region, Zvenyhorodka district, Yablunivka village, Berehova St. 47 Email: support@konza.pro Website: https://konza.pro