Privacy Policy

Effective Date: March 2, 2026 · Last updated: August 24, 2026

This Privacy Policy explains how we collect, use, and protect your information when you use https://rakaai.com.

1. Information We Collect

We may collect:

• Name and profile picture (via Meta Login)
• Email address
• Facebook Page ID and metadata
• Instagram Business Account ID
• Access tokens required for publishing
• User-generated content
• Analytics and usage data
• Device and browser information

We do NOT collect social media passwords.

2. Legal Basis for Processing (GDPR)

For EU users, we process data based on:

• Contract performance
• Legitimate interest
• User consent
• Legal compliance

3. How We Use Information

We use data to:

• Authenticate users
• Retrieve managed Pages
• Publish and schedule content
• Display engagement metrics
• Provide customer support
• Improve platform performance

4. Data Sharing

We do not sell personal data.

We may share data with:

• Meta Platforms, Inc.
• AI service providers — see section 4.1 for the full list and what exactly is shared
• Hosting providers
• Analytics providers
• Payment processors

4.1. Third-Party AI Providers

Raka AI generates content (captions, images, videos, marketing plans, chat answers) using third-party artificial intelligence services. When you use an AI feature, the following data is transmitted to one or more of these providers, solely for the purpose of generating the content you requested:

• Text you enter: prompts, product names and descriptions, captions, chat and support messages
• Photos and videos you upload for generation, analysis or editing
• Your brand settings: brand name, tone of voice, target audience, call-to-action style
• Product information from your connected store or product feed (titles, descriptions, images, prices)

The AI providers we use are:

• Google LLC (Gemini models) — text and image generation, content analysis
• OpenAI, L.L.C. (GPT models) — caption and text generation
• Anthropic, PBC (Claude models) — text generation and assistants
• Features and Labels Inc. (fal.ai) — image and video generation models

Important limits on this sharing:

• Data is sent only when you actively use an AI feature — never in the background
• In the mobile app, no data is sent to AI providers until you explicitly agree to AI data processing; you can give or withdraw this consent at any time in More → Privacy & AI
• We do not send your password, payment details, or social media access tokens to AI providers
• These providers process the data as our processors to fulfil your request; we use API terms under which the data is not used to train their public models
• We never sell your personal data

4a. Sign in with Google and Apple

If you sign in with Google or Apple, we receive your name and email address from the provider to create or match your account. We never see your Google or Apple password. Apple users may use "Hide My Email"; the relay address then serves as your account email.

4b. YouTube API Services

Connecting a YouTube channel uses YouTube API Services. By connecting, you agree to the YouTube Terms of Service; Google's handling of data is described in the Google Privacy Policy. We store only the tokens and channel metadata needed to upload the videos you request, and we do not use YouTube data for advertising. You can revoke our access at any time in the Service or at Google security settings.

4c. Mobile Applications

• Camera, microphone and photo library are used only when you shoot or pick product photos and videos for content creation; nothing is accessed in the background.
• Biometric app lock (Face ID / fingerprint) is optional and processed entirely on your device by the operating system; we never receive biometric data.
• Session tokens on mobile are stored in the operating system's secure keychain.

4d. Payments

Website payments are processed by Stripe; Shopify app charges are billed by Shopify. We never receive or store full card numbers. Billing records are retained as required by Czech accounting law.

5. International Transfers

Data may be processed outside the EU. We implement appropriate safeguards such as Standard Contractual Clauses where required.

6. Data Retention

We retain data only while your account is active or as required by law.

7. User Rights

EU users may:

• Request access
• Request correction
• Request deletion
• Object to processing
• Request data portability

California residents may:

• Request disclosure of collected data
• Request deletion
• Opt out of sale (we do not sell data)

To exercise rights: support@rakaai.com. You also have the right to lodge a complaint with the Czech supervisory authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).

8. Security

We implement industry-standard technical and organizational safeguards.

9. Data Deletion

Instructions available at: https://rakaai.com/data-deletion

10. Children's Privacy

The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at support@rakaai.com and we will delete it.

11. Push Notifications and App Diagnostics

If you enable notifications in our mobile app, a push token is stored with your profile and used only to deliver notifications through Apple Push Notification service or Google's push service; you can disable them at any time in the app or device settings. We also collect application logs and usage diagnostics (features used, errors, performance) to keep the Service reliable and improve it.

12. Disclosures Required by Law; Business Transfers

We may preserve or disclose personal information where required by applicable law, regulation, legal process or enforceable governmental request, or where necessary to prevent fraud, enforce our agreements, or protect the safety of our users.

We do not intend to sell the business; in the unlikely event of a merger, acquisition or sale, the acquiring entity will be bound to honour the commitments of this Privacy Policy, and you will be notified by email or a prominent notice of any change in ownership or in the use of your personal data, together with any choices you have.

13. External Links and Social Platforms

Our website and blog may link to external sites, and connected social platforms operate under their own privacy policies. Information you submit to third parties is governed by their policies — review them before sharing personal information.

14. Do Not Track

Some browsers send "Do Not Track" signals. As there is currently no accepted standard for responding to them, we do not act on DNT signals; we will follow a standard if one emerges.

15. Changes to this Privacy Policy

We may update this Privacy Policy. For material changes that affect your rights we will give at least 14 days' notice by email or a notice in the Service before the changes take effect; the "Last updated" date at the top always reflects the current version. Continued use after the effective date constitutes acceptance of the updated policy.

16. Contact

support@rakaai.com