Privacy Policy
Last updated: April 2025
Who is responsible
GO' SMAKEN AS (trading as Flairpilot) is the data controller for personal data processed through this service. Org. no. 920 715 044. Contact: hello@flairpilot.com
What we collect
We collect your email address (for authentication), the ad content you create (headline, text, description), images you upload, and payment information processed through Stripe. We do not store your payment card details — these are handled entirely by Stripe.
Why we collect it and legal basis (GDPR Art. 6)
We process your personal data for the following purposes and on the following legal bases: • Account creation and authentication — necessary to perform the contract with you (Art. 6(1)(b)). • Storage and display of your ads — necessary to perform the contract (Art. 6(1)(b)). • AI ad copy generation — necessary to perform the contract (Art. 6(1)(b)). • Payment processing via Stripe — necessary to perform the contract (Art. 6(1)(b)). • Aggregated site usage statistics via Vercel Analytics — legitimate interest in improving the service (Art. 6(1)(f)). No personal data is stored; you may opt out at any time by contacting us.
Contractual requirement
Providing your email address and creating a password is required to use Flairpilot. Without this information we cannot create an account for you or deliver the service. Ad content (brief text, images) is required to generate ads — you decide what to enter and may keep it as general or specific as you wish. There is no legal obligation to provide any data; the obligation is solely contractual.
Automated decisions (GDPR Art. 22)
We use OpenAI's language model to generate ad copy suggestions based on the brief you write. This is a creative assistance tool — it does not make any automated decision that produces legal or similarly significant effects on you. No profiling for targeting, creditworthiness, or any other purpose takes place. GDPR Art. 22 does not apply to our processing.
Data processors
We use the following sub-processors: Supabase (EU — database and authentication), OpenAI (USA — AI ad generation), Stripe (USA — payments), Vercel (USA — hosting and privacy-first analytics). All US-based processors comply with the EU–US Data Privacy Framework or equivalent safeguards.
How long we keep your data
We keep your data for as long as your account is active. When you delete your account, all your data — including ads and uploaded images — is permanently deleted within 30 days.
Your rights
Under GDPR you have the right to: access your data (Art. 15), correct inaccurate data (Art. 16), delete your data (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing based on legitimate interest (Art. 21). To exercise any of these rights, contact hello@flairpilot.com or use the delete account option in your dashboard.
Right to lodge a complaint
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no — tel. +47 74 07 70 00 — postkasse@datatilsynet.no. You may also lodge a complaint with the supervisory authority in your country of residence within the EU/EEA.
Cookies
We use one functional cookie to remember your language preference. This cookie does not track you and does not require consent under GDPR. Vercel Analytics is used for site usage statistics — it is privacy-first, uses no cookies, and does not process personal data.
Contact
Questions about this policy? Email hello@flairpilot.com