iDoopy

Privacy Policy

This privacy policy explains what personal data we process when you use iDoopy (idoopy.com and app.idoopy.com), for what purposes, and what rights you have. "iDoopy", "we", "us" refers to OM Power Up Business LLC, the data controller, unless stated otherwise.

1. Controller and EU Representative

Controller: OM Power Up Business LLC, 2201 Menaul Blvd NE Ste A, Albuquerque, NM 87107, USA. Email: info@idoopy.com

As we are established outside the European Union, our EU representative pursuant to Art. 27 GDPR is Goolux GmbH, Milower Landstraße 7, 14712 Rathenow, Germany, email info@goolux24.com. You may contact either party regarding this policy or to exercise your rights.

Given the size of our company, we are not required to appoint a Data Protection Officer.

2. What Data We Process, and Why

2.1 Account and Authentication

When you register, we process your email address to create your account and to send you a passwordless "magic link" for signing in. This is necessary to provide the service (Art. 6(1)(b) GDPR). Authentication is handled by our database and authentication provider, Supabase, whose infrastructure for this project is located in Frankfurt, Germany (EU). We use an essential session cookie to keep you signed in; this cookie is strictly necessary and does not require consent.

2.2 Purchase and Subscription

iDoopy subscriptions are sold through our payment service provider, Digistore24 GmbH (Germany). When you purchase a subscription, Digistore24 collects and processes your payment and billing information directly; we receive your email address and order details from Digistore24 to activate and manage your account and usage quota. Please refer to Digistore24's own privacy policy for how they process your payment data. This processing is necessary to perform our contract with you (Art. 6(1)(b) GDPR).

2.3 Profile Data and Generated Content

To generate texts for you, you provide information such as your product, target audience, offer details, and preferred writing style ("Grundprofil" and project data). This data, together with your specific request, is sent to our AI provider, Anthropic (operator of the Claude API, USA), solely to generate the requested text. According to Anthropic's API terms, data submitted via the API is not used to train their models. Data transfers to Anthropic and other providers outside the EU are safeguarded by Standard Contractual Clauses. This processing is necessary to perform our contract with you (Art. 6(1)(b) GDPR).

2.4 Transactional Emails

We use Resend (USA) to deliver transactional emails, such as your sign-in link and replies to contact form submissions. Only the email address and message content necessary for delivery are processed (Art. 6(1)(b) and, for contact requests, Art. 6(1)(f) GDPR, our legitimate interest in responding to inquiries).

2.5 Contact Form

If you contact us via our contact form, we process the data you provide (name, email address, message) to answer your request. We use a spam-prevention mechanism that does not involve processing any additional personal data beyond your submission. This processing is based on our legitimate interest in handling inquiries efficiently (Art. 6(1)(f) GDPR) or, where the inquiry relates to a contract, Art. 6(1)(b) GDPR.

2.6 Hosting and Server Log Data

Our application is hosted on Vercel (USA). When you access our website, technical data such as your IP address, browser type, and access times are processed temporarily in server logs to operate and secure the service (Art. 6(1)(f) GDPR, our legitimate interest in providing a stable and secure service).

2.7 Cookies and Analytics

We use a strictly necessary session cookie to keep you signed in; this does not require your consent. On our marketing website, we may additionally use analytics or advertising cookies (such as Google Analytics or Meta Pixel) to understand how visitors use our site and to measure the effectiveness of our advertising. These cookies are only set if you actively consent via our cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by clearing your cookies and revisiting the banner.

3. Recipients of Your Data

Depending on the purpose above, your data may be shared with:

  • Supabase (database and authentication, hosted in the EU)
  • Anthropic (AI text generation, USA)
  • Vercel (application hosting, USA)
  • Resend (transactional email delivery, USA)
  • Digistore24 GmbH (payment processing, Germany)
  • Google (Google Analytics) and Meta (Meta Pixel), USA, only if you consented via our cookie banner

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

4. International Data Transfers

Where personal data is transferred to service providers outside the European Economic Area (such as Anthropic, Vercel, and Resend, all based in the USA), we rely on the EU Standard Contractual Clauses or an equivalent legal basis to ensure an adequate level of data protection.

5. Retention Period

We retain your account and project data for as long as your account is active. If you cancel your subscription, we retain your data for a reasonable period in case you resubscribe, and delete it thereafter unless we are legally required to retain it longer (for example, for tax and accounting purposes).

6. Your Rights

Under the GDPR, you have the right to:

  • request access to the personal data we hold about you (Art. 15),
  • request rectification of inaccurate data (Art. 16),
  • request erasure of your data (Art. 17),
  • request restriction of processing (Art. 18),
  • receive your data in a portable format (Art. 20),
  • object to processing based on our legitimate interest (Art. 21), and
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at info@idoopy.com or our EU representative at info@goolux24.com.

7. Data Security

We use appropriate technical and organizational measures, such as encrypted connections (TLS) and access restrictions, to protect your data against unauthorized access, loss, or misuse.

8. Changes to This Policy

We may update this privacy policy from time to time to reflect changes to our service or legal requirements. The current version is always available on this page.