Legal

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how UTOPMED STUDIOS SRL ("AdAngel", "we", "us", or "our") collects, uses, and shares information about you when you use https://adangel.app and our related services (the "Service").

We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA). By using the Service you agree to this Policy.

1. Data controller

The data controller is UTOPMED STUDIOS SRL, with registered office at Strada Varariei Nr. 18, Bl. A1, Bârlad, Jud. Vaslui, Romania. For privacy questions contact privacy@adangel.app.

Our lead supervisory authority is ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romania). You have the right to lodge a complaint with them or with your local data protection authority.

2. Information we collect

Information you provide

  • Account data: email, name, password hash, profile details.
  • Billing data: handled by Stripe; we store only subscription metadata.
  • Content: briefs, SOPs, skills, prompts, generated assets, uploads.
  • Support: messages you send to support.

Information collected automatically

  • Usage data: pages viewed, features used, generation counts.
  • Device data: IP address, browser, OS, device identifiers.
  • Cookies & similar tech: see our Cookie Policy.

3. Legal bases (GDPR)

  • Contract: to provide and bill the Service.
  • Legitimate interests: to secure, debug, and improve the Service.
  • Consent: for non-essential cookies and marketing emails.
  • Legal obligation: for tax, accounting, and fraud prevention.

4. How we use your data

  • Operate, maintain, and improve the Service.
  • Process payments and manage subscriptions.
  • Send transactional emails (receipts, security alerts).
  • Detect, prevent, and address fraud or abuse.
  • Comply with legal obligations.
  • With your consent, send product updates and marketing.

5. Sub-processors we share data with

We do not sell your personal data. We share it only with vetted sub-processors:

  • Supabase (database, auth, storage) — EU/US.
  • Stripe (payments, tax, invoicing) — US/IE, with SCCs.
  • Cloudflare (hosting, CDN, security) — global.
  • OpenAI (LLMs, image generation) — US, with no-training endpoints.
  • Google (Gemini models) — US/EU, with no-training endpoints.
  • ElevenLabs (voice synthesis) — US.
  • kie.ai (image & video generation) — US.
  • Kling AI (video generation) — Singapore.
  • Firecrawl (website analysis for brand DNA) — US.
  • Resend (transactional email) — US.

International transfers outside the EEA/UK rely on the EU Standard Contractual Clauses (Commission Decision 2021/914) and applicable adequacy decisions.

6. AI processing

When you generate content, the prompt and relevant context are sent to third-party AI providers for inference. We do not authorize providers to train their public models on your business inputs; we use enterprise / no-training endpoints where available.

7. Data retention

  • Account data: while your account is active, plus 30 days after deletion.
  • Billing & invoice records: 10 years (Romanian Codul Fiscal / accounting law).
  • Generated content: until you delete it or close your account.
  • Backups: rolling 30-day window, then permanently deleted.

8. Your rights

Depending on your jurisdiction, you have the right to:

  • Access, correct, or delete your personal data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.
  • Lodge a complaint with your data protection authority.
  • (California) Opt out of "sharing" / "selling" — we do neither.

Email privacy@adangel.app to exercise any right. We respond within 30 days.

9. Security

We use encryption in transit (TLS 1.2+) and at rest, role-based access control, row-level security in our database, and regular backups. No system is 100% secure; you use the Service at your own risk.

10. Children

The Service is not directed to children under 16. We do not knowingly collect their data.

11. Changes to this policy

We will notify material changes by email or in-app notice at least 14 days before they take effect. The "Last updated" date above reflects the current version.

12. Contact

UTOPMED STUDIOS SRL
Strada Varariei Nr. 18, Bl. A1, Bârlad, Jud. Vaslui
Romania
Email: privacy@adangel.app