Privacy Policy
Effective from November 12, 2026
1. Who processes your data
The controller of your personal data is POČÍTAČOVÁ POHOTOVOST s.r.o., company ID (IČO) 64942490, VAT ID CZ64942490, registered office Lublaňská 1731/19, Nové Město, 120 00 Praha 2, Czech Republic, registered in the Commercial Register of the Municipal Court in Prague, file no. C 42397 (the “operator”).
For anything concerning your data, write to us at mandat@mandat.cz.
2. What data we process
Account: name, e-mail, company name, password (stored only in irreversibly encrypted form), chosen language.
Facebook and Instagram connection: your Meta account identifier, the names and identifiers of the Pages and Instagram accounts you connect, and access keys issued by Meta. Access keys are stored encrypted and used only for publishing that you request.
Content: the texts and photos of posts you add to the service and the results of publishing them (link, status, any error).
Technical records: the time and type of important actions (sign-in, account connection, publishing), IP address and browser type. They are used for security and troubleshooting.
We never see or store your Facebook or Instagram password – you sign in directly with Meta.
3. Why and on what legal basis
Providing the service (account, connection, publishing) – performance of a contract, Art. 6(1)(b) GDPR.
Security and abuse prevention – the operator’s legitimate interest, Art. 6(1)(f) GDPR.
Accounting and tax for paid services – legal obligation, Art. 6(1)(c) GDPR.
We do not sell your data, use it for advertising or share it with anyone who does not need it to provide the service.
4. Who we share data with
Meta Platforms (Facebook, Instagram) – only what you publish and the data needed for the connection. Meta then handles that data under its own policies.
Our web hosting provider in the Czech Republic, whose servers run the service (processor).
AI providers – Anthropic (post texts and photo descriptions) and OpenAI or Google (image creation). We only pass on what is needed to prepare a post (information from your website, the post brief, photos to describe), never your login details. These processors may process data outside the EU under the EU standard contractual clauses.
Comgate, a.s. (payment gateway) – when you pay for the subscription. You enter your card details directly at the payment gateway; we never see or store them.
Public authorities only where required by law.
5. How long we keep data
For as long as you have an account. After the account is closed, we delete the data within 30 days at the latest.
If you disconnect a Page or remove the service’s access in your Facebook settings, we immediately stop using the access keys and delete them.
Technical records are kept for no more than 12 months; accounting documents for the period required by law (usually 10 years).
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Just write to mandat@mandat.cz; we reply within 30 days at the latest.
How to request deletion of data obtained through Facebook is described on the Data deletion page.
If you are not satisfied, you can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).
7. Cookies
We use only essential cookies, without which you cannot stay signed in or submit forms securely. We use no advertising or tracking cookies, so we do not ask for consent.
If you arrive through a referral link, we store the ft_ref cookie with the referral code for 60 days. It is used only to credit the person who referred you, and you with the referral bonus, when you sign up.
8. Security
The connection is encrypted (HTTPS), access keys and sensitive settings are stored encrypted, and each company can access only its own data.