Hero Content s.r.o., Company ID: 21318255, registered office at Korunní 2569/108, Vinohrady, 101 00 Prague (hereinafter "Provider", "we", "us" or "our"), operates the website herocontent.ai, the client area r.herocontent.ai and the HeroContent apps for Facebook and Instagram (hereinafter the "Service").
This Privacy Policy informs you about how we collect, use, and protect personal data when using our services.
By using the Service, you agree to the collection and use of data in accordance with this policy. If you do not agree with this policy, please do not use our Service.
1. Collection and Use of Information
When using our Service, we may require you to provide certain personal information that can be used to contact or identify you. This information may include, but is not limited to:
- first and last name,
- email address,
- IP address and device identifiers,
- data about service usage (e.g., activity, pages viewed, time of visit).
We collect this information for the purposes of:
- providing and improving our services,
- identifying and communicating with clients,
- processing orders and payments,
- sending important information about the service,
- analyzing and improving the quality of user experience.
2. Log Data
When you visit our website, your browser automatically sends technical information ("Log Data"), which may include:
- your device's IP address,
- browser type and version,
- pages visited, date and time of visit, time spent on pages, and other statistics.
We use this information to analyze website traffic and improve the functionality of the Service.
3. Cookies
Our Service uses cookies – small text files stored on your device. Cookies help us analyze traffic, personalize content, and improve user experience.
You can set your browser to refuse all cookies or to alert you when a cookie is being sent. If you choose to refuse cookies, some parts of our Service may not function properly.
Our website uses the Meta Pixel and similar analytics tools to measure visits and the results of our advertising. You can block these cookies in your browser settings and manage how Meta uses such data for ads in your Facebook ad preferences.
4. Data We Receive from Facebook and Instagram (Meta)
When you connect your venue's Facebook Page and Instagram account to HeroContent – through Facebook Login for Business or by giving HeroContent partner access in Meta Business Suite – we receive the following data from Meta Platforms with your permission:
- your basic Facebook profile: your name and a user ID specific to our app,
- access tokens that allow the Service to act on the Pages and accounts you selected,
- the Facebook Pages and Instagram professional accounts you manage and choose to connect: their names, IDs and categories, your role on them and the business portfolio they belong to,
- content of the connected Page and Instagram account: the posts, stories and reels we publish for you and the posts published on the account, with their captions, links and publication times,
- statistics of the connected Page, Instagram account and their content: reach, views, interactions, number of followers and aggregated audience data (for example age range, gender or city),
- for advertising we run for your venue at your request: campaign settings and results.
We receive the number of comments and reactions, not their text, and we never access private messages.
We use this data only to provide the Service to your venue: to publish the content you have approved, to plan and improve your content, to show you how it performs, to run the advertising you have agreed to, to report the results of a brand's content to that brand if your venue takes part in a cooperation with it, and to support you.
We do not sell this data, we do not use it to build advertising profiles, and we share it only with service providers who process it on our behalf and according to our instructions (see section 5), with a brand whose cooperation your venue has joined (the results of that brand's content on your accounts), or where required by law. We never ask for your Facebook or Instagram password.
How long we keep this data: while we prepare or provide the Service for your venue. Within 30 days after the cooperation ends, or after an onboarding is closed without cooperation, we delete the access tokens and your personal data received from Meta (your name and user ID). Access tokens from a connection that was not completed are deleted within 90 days.
We keep the statistics of the results of our work for as long as we need them to report to brands your venue has cooperated with and to handle questions and claims about our work, and the results of advertising we paid for as accounting records for the period required by law.
5. Service Providers
We may use third parties (e.g., payment gateway providers, analytical or communication tools) to help us operate our Service. These entities have access only to the personal data they necessarily need to perform their tasks and are contractually bound by confidentiality and the obligation to protect the data.
These include providers of cloud hosting, AI services that help us prepare and review content, payment processing and communication tools.
6. Data Security
The security of your personal data is important to us. We take reasonable technical and organizational measures to protect your data from loss, misuse, or unauthorized access. Although we strive for maximum protection, no method of transmission or electronic data storage is 100% secure.
7. International Transfer
Your personal data may be transferred to and stored on servers outside the Czech Republic or the European Union, where different personal data protection laws may apply. By using our Service, you consent to such transfer if it is necessary for the operation of our services (e.g., hosting, email, analytical tools).
8. Links to Other Websites
Our Service may contain links to other websites that are not operated by us. We have no control over the content or privacy policies of these sites and are not responsible for them. We therefore recommend that you review their policies.
9. Children's Protection
Our Service is not intended for persons under the age of 13. We do not knowingly collect personal data from children. If we learn that we have mistakenly obtained data from a child under 13, we will promptly delete it.
10. Your Rights
In accordance with GDPR Regulation (EU) 2016/679, you have the following rights:
- right of access to personal data,
- right to rectification or deletion,
- right to object to processing,
- right to restriction of processing,
- right to data portability,
- right to lodge a complaint with a supervisory authority.
You can exercise your rights by emailing us at welcome@herocontent.ai.
11. How to Request Deletion of Your Data
You can ask us at any time to delete your personal data and the data we have received from Facebook and Instagram, in any of the following ways:
- Facebook: open Settings & privacy → Settings → Business integrations (facebook.com/settings/?tab=business_tools) or Apps and websites (facebook.com/settings/?tab=applications), select HeroContent, remove it and send the request to delete your data.
- Instagram: open Settings and activity → Website permissions → Apps and websites (instagram.com/accounts/manage_access) and remove HeroContent.
- Meta Business Suite: if you have given HeroContent partner access, open Business settings → Partners, select HeroContent and remove it.
- Email: write to welcome@herocontent.ai with the name of your venue and of the Facebook Page or Instagram account concerned.
We will confirm your request and complete the deletion within 30 days. If we are required or entitled by law to keep some data (for example invoices or records needed to establish or defend legal claims), we will tell you which data and why. When Meta forwards us a deletion request, we delete the data linked to it without you having to contact us. Please note that after deletion we can no longer publish content to your accounts or report on their results.
12. Changes to This Policy
This Policy may be updated from time to time. We will notify you of changes by posting the new version on this page. We recommend that you review the policy regularly. Changes take effect immediately upon publication.
13. Legal Compliance
We may disclose personal data if required by law or a public authority, or if it is necessary to protect the rights, property, or safety of the Provider or users.
14. Contact
If you have any questions regarding this Policy, you can contact us at:
Email: welcome@herocontent.ai
Address: Hero Content s.r.o., Korunní 2569/108, Vinohrady, 101 00 Prague, Czech Republic
Data protection contact: Elisey Sviridov (welcome@herocontent.ai)
Security issues: please report any vulnerability in our Service to welcome@herocontent.ai.