English · Deutsch
Privacy Policy
1. Who We Are
MiseEnKit is a product of DETGAAO LLC. We provide an AI-powered tool that helps small businesses create consistent visual branding and manage their social media presence.
If you have questions about this policy, contact us at privacy@miseenkit.com.
2. What Data We Collect
At a glance — the categories of personal data we collect, why, and how long we keep them. Each is detailed in the sections that follow.
| Category | What it includes | Why we collect it | Kept for |
|---|---|---|---|
| Account | Email, password hash, authentication provider | Create and secure your account | Life of your account |
| Business profile | Business name and type, city/canton, language, brand colour, posting days, your voice examples | Personalise your captions and schedule | Life of your account |
| Photos & media | Uploaded photos and PDFs, category tags, generated thumbnails/processed versions and AI descriptions | Produce your social posts | Deleted when you delete your account |
| AI-generated content | Captions, hashtags, quality scores, your edits, weekly plans | Deliver and improve the core feature | Life of your account |
| Usage data | Feature usage, timestamps, IP address, browser/device info | Operate, secure and improve the Service | Server logs per §5.2 |
| Payment | Stripe customer reference only (no card numbers on our servers) | Billing after your free trial | Local reference deleted on account deletion |
| People in photos | Consent acknowledgement, timestamp and IP (only when you upload team/customer photos) | Record marketing consent | Life of your account |
| Waitlist | Email address (pre-launch only) | Notify you at launch | Until launch or you unsubscribe |
2.1 Account Information
When you create an account, we collect:
- Email address
- Password (stored as a cryptographic hash, never in plain text)
- Display name (if you sign up via Google OAuth)
- Authentication provider (email or Google)
2.2 Business Profile Information
When you set up your brand profile, we collect:
- Business name
- Business type (e.g., restaurant, cafe, bakery, food truck)
- City and country
- Canton (optional, for Swiss users)
- Preferred language (English or Swiss German)
- Brand color preference
- Preferred posting days
- Voice examples (caption text you provide to train your brand voice)
2.3 Photos and Media
When you upload content to the Service, we collect:
- Photos you upload (JPG, PNG, HEIC, WebP formats)
- PDF documents you upload (menus, flyers)
- Category tags you assign to photos
- Metadata we generate: thumbnails, processed versions of your photos, AI-generated descriptions of photo content
We remove GPS coordinates and device metadata from uploaded photos before storage. Photos are re-encoded so they display in the correct orientation without carrying any location or device information.
2.4 AI-Generated Content
The Service generates content based on your photos and profile. We store:
- AI-generated captions and hashtags
- AI quality scores (used internally to improve output quality)
- Your edits to generated content
- Weekly plans and scheduled posts
2.5 Usage and Interaction Data
We collect information about how you use the Service:
- Login timestamps and session data
- Feature usage patterns (e.g., weekly planner completion time)
- Post approval actions (approved, edited, skipped)
- Notification preferences
- IP address (for security and legal compliance)
2.6 Payment Information
We use Stripe to process payments. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe handles all payment data under their own privacy policy. We store only a Stripe customer reference ID to link your account to your subscription.
2.7 Pre-Launch Waitlist
If you signed up for our pre-launch waitlist, we collected your email address and the source of your signup. This data will be migrated to our email platform after launch and is subject to this policy.
3. How We Use Your Data
To provide the Service: Processing your photos, generating captions and hashtags, scheduling and publishing posts to your connected social media accounts, managing your subscription.
To improve AI output quality: Your brand profile, voice examples, and menu context are used as inputs to our AI caption generation system. Your approval and editing patterns help us understand output quality (we track whether captions are approved as-is or edited, but we do not use your specific edits to train AI models).
To communicate with you: Sending account verification emails, password resets, subscription-related notifications, post scheduling reminders, and service updates.
To maintain security: Detecting unauthorized access, preventing abuse, and maintaining audit logs.
To comply with legal obligations: Tax reporting (via Stripe Tax), responding to lawful data requests, and maintaining records as required by applicable law.
4. Third-Party Data Sharing
We share your data with the following third-party service providers, and only to the extent necessary to deliver the Service:
4.1 Anthropic (AI Processing)
Your photos and brand profile information are sent to Anthropic's Claude API for:
- Photo analysis (identifying what is in your photos)
- Caption and hashtag generation
- Caption quality evaluation
Anthropic processes this data under their data usage policy. We use their API in a configuration where your data is not used to train their models.
4.2 Meta (Social Media Publishing)
If you connect your Instagram Business account or Facebook Page, we share:
- Photos you approve for posting
- Captions and hashtags you approve
- Scheduling information
This sharing only occurs when you explicitly approve a post for publishing. We access your Meta accounts using OAuth tokens you authorize, and we request only the permissions necessary for posting content.
4.3 Stripe (Payments)
We share your email address with Stripe to create your customer account and process payments. Stripe collects payment method details directly. We share location data (country) with Stripe Tax for VAT/tax compliance.
4.4 Supabase (Infrastructure)
Our backend infrastructure runs on Supabase. Your data is stored in Supabase's European data center (Zurich, Switzerland region). Supabase acts as a data processor under our instructions.
4.5 Vercel (Hosting)
Our application is hosted on Vercel. Vercel processes web requests and may collect standard server logs (IP addresses, request timestamps, browser information).
4.6 Claid (Image Processing)
Your photos are sent to Claid.ai for background removal, photo enhancement, and format adaptation (such as cropping for social platforms). Claid acts as a data processor under our instructions: it processes your photos only for the purpose of returning the processed result, does not sell or share them, and retains temporary copies only as long as necessary to provide the processing service.
4.7 Resend (Transactional Email)
We use Resend to deliver transactional emails such as sign-up confirmation and password-reset messages. Your email address is shared with Resend solely to deliver these messages; Resend acts as a data processor under our instructions and does not use your address for its own purposes.
We do not sell your data to anyone. We do not share your data with advertisers. We do not use your data for any purpose other than providing and improving the Service.
5. Data Storage and Retention
5.1 Where Your Data Is Stored
Your data is stored in Supabase's European data center (eu-central-2, Zurich, Switzerland). Application hosting is provided by Vercel with global edge distribution.
5.2 Retention Periods
- Photos: Retained for 12 months from upload date. We will notify you before deletion (at 10 months and 11.5 months) and provide an option to download your photos before removal.
- Account data and business profile: Retained for the duration of your active subscription plus 90 days after cancellation or trial expiration.
- Post history and captions: Retained for the duration of your active subscription plus 90 days after cancellation.
- Audit logs (IP address, login timestamps): Retained for 90 days, then deleted.
- Payment records: Stripe retains billing records under their own retention policy. We delete our local Stripe reference when your account is deleted.
5.3 Account Deletion
You can delete your account from Settings at any time. When you request deletion:
- Your account enters a 48-hour cooling period during which you can cancel the deletion.
- After 48 hours, we permanently delete: your account, brand profile, all photos (originals and processed versions), captions, posts, weekly plans, social media connection tokens (revoked via Meta API), notification preferences, and all other user data.
- Published posts on Instagram and Facebook are not removed by account deletion. You must delete those directly on the respective platforms.
- Stripe retains its own billing records per their policy.
6. Your Rights
6.1 For All Users
- Access: You can request a copy of your data. We provide a downloadable export (ZIP file) containing your brand profile, photos, captions, and post history.
- Correction: You can update your brand profile and account information at any time through the app.
- Deletion: You can delete your account and all associated data as described in Section 5.3.
- Data portability: Your data export is provided in standard, machine-readable formats.
6.2 European Union and European Economic Area (GDPR)
If you are in the EU/EEA, you also have the right to:
- Restrict processing of your data in certain circumstances
- Object to processing based on legitimate interests
- Lodge a complaint with your local data protection authority
Our legal basis for processing your data is: performance of a contract (providing the Service you signed up for), legitimate interests (improving service quality, maintaining security), and legal obligations (tax compliance, responding to lawful requests).
6.3 Switzerland (DSG)
If you are in Switzerland, you have rights under the Swiss Federal Act on Data Protection (DSG), including rights of access, correction, deletion, and data portability. You may contact the Federal Data Protection and Information Commissioner (FDPIC) with complaints.
6.4 California (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information.
To exercise any of these rights, contact us at privacy@miseenkit.com.
7. Cookies and Tracking
We use essential cookies for authentication and session management. These are necessary for the Service to function.
We do not use advertising cookies. We do not use third-party tracking pixels. We do not serve ads. We do not use any third-party analytics service.
8. AI Processing Disclosure
MiseEnKit uses artificial intelligence to:
- Analyze the content of your photos (identifying dishes, ingredients, settings)
- Generate captions and hashtags based on photo analysis and your brand profile
- Evaluate caption quality before presenting options to you
All AI-generated content is presented to you for review before publishing. You have full control to edit, regenerate, or reject any AI-generated content.
The AI system may occasionally produce inaccurate descriptions or inappropriate suggestions. You are responsible for reviewing all content before it is published to your social media accounts.
We do not use your data to train AI models. Your photos and brand information are processed through the Anthropic Claude API for the sole purpose of generating content for your use.
9. Children
MiseEnKit is a business tool designed for business owners. We do not knowingly collect personal information from anyone under 16 years of age. If we learn that we have collected data from a child under 16, we will delete it promptly.
10. Security
We protect your data through:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted storage of sensitive credentials (social media access tokens)
- Row-level security in our database (your data is isolated from other users)
- Regular security monitoring and access logging
No system is perfectly secure. If we discover a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
11. International Data Transfers
Your data is primarily stored in Switzerland (Supabase eu-central-2 region). Some processing occurs through services based in the United States (Anthropic, Claid, Stripe, Meta, Vercel, Resend). These transfers are made under appropriate safeguards, including the Swiss–U.S. Data Privacy Framework and standard contractual clauses where applicable.
12. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact
For privacy-related questions, data requests, or complaints:
Email: privacy@miseenkit.com
Mailing address:
DETGAAO LLC
7880 W. Maule Ave, STE 1018
Las Vegas, NV 89113
United States
This privacy policy is provided in English. A German-language version will be made available in a future update.