Privacy Policy

99CODESHOP LLC (doing business as "iademy"), 4030 Wake Forest Road, STE 349, Raleigh, NC 27609, USA, is responsible for your personal information (the "data controller"). For any privacy question or request, write to privacy@iademy.com.

Sellers who share their creatives decide who they share them with and how they talk to their buyers on WhatsApp; for the conversations and sales that happen outside iademy, the seller is responsible for the information they handle.

Account information

Your name, email address and/or phone number, and your Google account details if you sign in with Google (handled by our authentication provider). Your answers during onboarding: what you sell, how you heard about us and your language. The country you sign up from, derived from your connection when you finish onboarding (we keep only the country code).

Brand Kit

Your business name, logos, WhatsApp numbers, website, brand colors, reusable images you choose to add (for example, a photo of the founder), and your public handle.

Your content and creatives

The product photos you upload, product names, prices and captions, and the images and videos we generate for you. We also keep an automatic analysis of each product photo (such as the product category and a short description) used to prepare your creative.

Payments

Payments are processed by Stripe. We don't receive or store your full card number. We keep records of your purchases and subscription (plan, amount, currency, dates, status and Stripe reference numbers) and your credit history.

Connected networks and publishing

When you connect a social network, the connection is made through our publishing partner, which holds the access tokens; we don't store them. We keep which networks are connected, what you published or advertised, your captions and budgets, and the statistics the platforms report (such as reach, views, clicks, messages and ad spend). We also keep the sales you mark.

Technical and usage information

Your IP address and browser information are processed when you use the Service, to keep it secure, apply usage limits and choose your language; we don't keep a log of your IP address in our database. We keep counts of your daily usage and technical logs made of IDs and error codes. Our error monitoring is configured not to collect personal information.

Visitors to shared pages

When someone opens a creative through a share link, we record anonymous visit statistics for the seller: that the page was viewed, whether the video was played and how much of it was watched, taps on the WhatsApp or store button, the country, device type and operating system, and where the visit came from (such as Instagram, Facebook, TikTok or a direct visit). To count unique visitors we use a one-way code made from the connection and browser that changes every day; it cannot be traced back to a person, and we don't store the IP address or set cookies on these pages. The WhatsApp button opens WhatsApp with a prefilled message; that conversation happens in WhatsApp, not with us.

Messages you send us

If you contact us, we keep your message and our reply.

• To create and run your account and provide the Service, including generating your images and videos.
• To process payments, grant and track credits, and manage your plan.
• To publish and advertise on your connected networks when you ask us to, and show you their results.
• To show you how your share links perform (Intelligence and My creatives).
• To keep the Service safe and fair: prevent fraud and abuse (for example, of free credits), enforce limits, and fix errors.
• To understand how the Service is used and improve it (for example, sign-up and activation figures).
• To measure and improve our own ads on Facebook and Instagram (see section 6).
• To communicate with you about your account, your plan and important changes, and, only with your consent, about news and offers.
• To meet legal obligations and enforce our Terms.

To create your creatives, we send your product photos and the related instructions to AI service providers: one that generates the images and videos, and one that analyzes your product photo. They process this information only to produce your result for us.

The models shown in your creatives are AI-generated people, not real individuals. If a photo you upload shows a person, we use it only to extract the product.

We do not use your photos, content or creatives to train AI models.

Where the law requires a legal basis (for example, in the European Economic Area, the United Kingdom, Brazil or Colombia), we rely on: performing our contract with you (to provide the Service); our legitimate interests (to keep the Service secure, prevent abuse, measure and improve it, and give sellers anonymous statistics about their share links), balanced against your rights; your consent (for marketing, which you can withdraw at any time); and compliance with legal obligations (for example, tax and accounting records).

We share personal information only as needed to provide the Service, with providers bound by contracts to protect it and use it only on our instructions:

• Clerk: sign-in and account management.
• Supabase: database.
• Vercel: website hosting.
• Cloudflare (R2): storage of your photos, images and videos.
• fal.ai: generation of images and videos.
• Anthropic: analysis of your product photos.
• Stripe: payments.
• Zernio: connection to social networks, publishing and ads.
• Inngest: processing of background tasks.
• Sentry: error monitoring (configured without personal information).
• PostHog: product usage analytics, to see how the Service is used and improve it (no cookies; you are identified only by your account id, never by name, email or phone).
• Meta: measuring our own ads (the Meta Pixel and Conversions API).

When you publish or advertise, your content goes to the platform you chose (such as Instagram, Facebook, TikTok or YouTube) and is handled under that platform's own policies. When you share a link, anyone with it can see that creative's page.

We may also disclose information when required by law or a valid legal request, to protect the rights, safety or property of iademy, our users or others, or as part of a merger, acquisition or sale of assets (you'll be notified). Otherwise, we share it only with your consent.

We do not sell personal information. To measure and improve our own ads on Facebook and Instagram, we use the Meta Pixel on iademy's pages and tell Meta when someone creates an account, finishes their first video, or pays for a plan or a credit pack. With each of these events we send your email and account ID encoded with a one-way code (a hash), your IP address, your browser, and the IDs in Meta's cookies. Meta uses them under its own privacy policy, including to show ads. Some laws (such as California's) treat this as sharing personal information for advertising: you can ask us to stop sending your events to Meta by writing to privacy@iademy.com. The pixel is not used on sellers' catalogs or share links.

Our servers and most of our providers are in the United States, so your information will be processed there and possibly in other countries where our providers operate. Where the law requires it, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or the contractual protections required by your country's data protection law.

We use what the Service needs to work, one anonymous id for product analytics, and advertising cookies on iademy's pages:

• Essential cookies: your sign-in session (set by our authentication provider), your language choice, and security cookies.
• Local storage in your browser: your unfinished creative (so you don't lose it), which guided tours you've seen, and display preferences.
• Product analytics (PostHog): an anonymous id kept in local storage, not a cookie, so we can count how the app and our website are used. It's never set on shared pages or catalogs.
• Advertising cookies on iademy's pages: the Meta Pixel's (_fbp, _fbc), to measure our ads, and our own cookie that remembers for 90 days which ad you came from (the link's utm and fbclid parameters).

Sellers' catalogs and share links set no cookies. You can block Meta's cookies in your browser or with an ad blocker and the Service keeps working. You can clear cookies and local storage in your browser; if you block essential cookies, you won't be able to sign in.

• Account and Brand Kit information: while your account is active, and deleted when you delete your account (except what we must keep, below).
• Creatives: until you delete them or your account. Deleting a creative removes its images and videos from our storage.
• Uploaded product photos: while your account is active, since they can be reused for new creatives.
• Share-link statistics: while your account is active (Intelligence shows the last 30 days).
• Payment and transaction records: up to 7 years, for tax and accounting obligations.
• Technical logs: up to 90 days.
• Marketing preferences: until you unsubscribe.

Deleted information may remain in encrypted backups for a limited time before it is overwritten.

You can ask to access, correct or delete your personal information, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent. To delete your account, go to Account → Delete account in the app, or write to privacy@iademy.com from the email linked to your account (steps at iademy.com/en/eliminar-cuenta). We answer within the time the law sets (generally within 30 days) and may need to verify your identity. We won't treat you differently for exercising your rights.

Latin America

• Mexico (LFPDPPP): your ARCO rights of access, rectification, cancellation and opposition, and to revoke consent or limit use.
• Brazil (LGPD): confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and revoking consent. You can also contact the ANPD.
• Colombia (Ley 1581 de 2012): to know, update, rectify and delete your data, request proof of authorization, and file complaints with the Superintendencia de Industria y Comercio.
• Argentina (Ley 25.326): access, rectification, updating and deletion; the Agencia de Acceso a la Información Pública is the supervisory authority.
• Chile, Peru and other countries: the rights their data protection laws give you.

Other regions

• European Economic Area and United Kingdom (GDPR): the rights above, and to complain to your local data protection authority.
• California (CCPA/CPRA): to know, delete and correct, not to be discriminated against, and to ask us not to share your information for advertising (see section 6). We don't sell personal information.

We protect your information with measures such as encryption in transit, private file storage accessible only through short-lived signed links, access controls limited to what each part of the Service needs, and providers with strong security practices. No system is completely secure, so we can't guarantee absolute security; if a breach affects you, we'll notify you as the law requires.

The Service is for people 18 and older. We don't knowingly collect information from minors. If you believe a minor has given us personal information, write to privacy@iademy.com and we'll delete it.

This policy doesn't cover the platforms you connect or publish to, or other sites linked from iademy (such as WhatsApp or a seller's store). Their own privacy policies apply.

We may update this policy. We'll post the new version with its date and, for material changes, give notice through the Service or by email before they take effect.

This policy is available in English and Spanish. If there is any conflict, the English version controls, to the extent permitted by applicable law.

Privacy questions and requests: privacy@iademy.com. Legal matters: legal@iademy.com.

99CODESHOP LLC (doing business as "iademy"), 4030 Wake Forest Road, STE 349, Raleigh, NC 27609, USA.