1. Introduction
Welcome to Echofy.
Echofy ("Echofy", "we", "our", or "us") is a social listening and brand intelligence platform operated by an independent business registered in Poland.
We respect your privacy and are committed to handling personal information transparently and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
This Privacy Policy explains how we collect, use, retain, share, and protect information when you access our website and services.
Data Controller: [LEGAL OPERATOR NAME]
Registered Correspondence Address: [ADDRESS]
Privacy Contact: hello@echofy.live
2. Information We Collect
Depending on how you interact with Echofy, we may collect the following categories of information:
2.1 Account Information
- Name and email address.
- Authentication information associated with email registration or Google Sign-In.
- Company or brand name.
- Website URL.
- Country.
- Account and subscription status.
Where Google Sign-In is used, authentication information may also be processed by Google and our authentication infrastructure.
2.2 Brand and Service Information
When using Echofy, you may provide:
- Brand descriptions and related business information.
- Keywords and search preferences.
- Brand website information.
- Search requests and monitoring configurations.
2.3 Service Usage Information
We may retain information generated through your use of the platform, including:
- Search and scan history.
- Generated reports.
- Brand analysis results.
- Recommendations and suggested responses.
- Subscription and service usage records.
2.4 Payment Information
Payments are processed through Stripe.
Echofy may receive payment-related information such as subscription status, transaction identifiers, billing status, payment dates, and limited payment method details.
Full payment card details are handled by the payment processor rather than collected directly through Echofy's own payment forms.
2.5 Technical Information
Our website and service infrastructure may process technical information required to provide, secure, and maintain the service, including IP addresses, browser information, device information, authentication records, and operational logs.
The exact categories processed by our infrastructure providers are subject to verification.
3. How We Use Information
We process information for the following purposes:
- Creating and managing user accounts.
- Providing brand monitoring and social listening services.
- Generating analysis, reports, and recommendations.
- Processing subscriptions and payments.
- Providing customer support.
- Maintaining platform functionality and security.
- Preventing fraud and unauthorized use.
- Communicating important service updates.
- Sending marketing communications where permitted.
- Complying with applicable legal obligations.
4. Legal Bases for Processing
Where the GDPR applies, we rely on one or more of the following legal bases:
Contractual necessity: Processing required to provide the services requested by users.
Legitimate interests: Processing reasonably necessary for platform security, fraud prevention, support, and service administration, subject to applicable balancing requirements.
Consent: Where required for marketing communications, non-essential cookies, or other processing activities requiring consent.
Legal obligations: Processing required for tax, accounting, regulatory compliance, and lawful requests.
5. Artificial Intelligence and Automated Analysis
Echofy uses automated systems and AI-supported functionality to analyze brand-related information and generate recommendations.
Certain AI functionality is provided through the Base44 platform and its underlying service infrastructure.
Echofy does not intentionally submit users' unrelated private information to AI systems for analysis.
However, information necessary to generate a requested report or recommendation may be processed through the technical infrastructure supporting that functionality.
Echofy does not authorize the use of customer data for independent AI model training. The specific contractual protections and data-handling practices of underlying providers must be verified before any broader guarantee is made.
AI-generated recommendations are informational and should be reviewed before use.
6. Third-Party Service Providers
Echofy currently uses or integrates with the following services:
| Provider | Purpose |
|---|---|
| Base44 | Application infrastructure, authentication, data storage, and integrated functionality |
| Tavily | Search functionality used in applicable service plans |
| Xpoz | Social data discovery and monitoring functionality used in applicable service plans |
| Stripe | Subscription and payment processing |
| Account authentication | |
| Google Analytics | Website analytics, subject to confirmation of its current configuration |
These providers may process information according to their respective roles, contractual arrangements, and privacy policies.
We do not sell personal information to third parties.
7. Social Media and Publicly Available Information
Echofy analyzes brand-related information obtained through supported external sources.
Search results may contain publicly available information from social platforms or other online services.
Echofy does not intentionally maintain an independent archive of complete social media posts, comments, or user profiles.
However, scan history, reports, search results, and generated insights may contain excerpts, references, links, or information derived from those sources.
The information available through external services may change, become unavailable, or be subject to third-party restrictions.
8. Cookies and Analytics
Echofy and its infrastructure providers may use cookies or similar technologies required for authentication, session management, security, and website functionality.
Google Analytics may also be used to understand website usage.
Where legally required, non-essential analytics technologies will be activated only after the user has provided valid consent.
Users may manage applicable consent preferences through the controls provided on the website.
Implementation note: The live cookie configuration and consent mechanism must be verified before publication.
9. Marketing Communications
We may send users service announcements, product updates, and marketing communications where permitted by applicable law.
Users can unsubscribe from marketing communications through the unsubscribe mechanism included in applicable messages or by contacting hello@echofy.live.
Essential transactional and account-related communications may continue while an account remains active.
10. Data Retention
We retain personal information for as long as reasonably necessary to provide our services and fulfill the purposes described in this Policy.
Account-related scan history and reports may be retained while the account remains active. A fixed retention period for these records has not yet been established.
Users may request account deletion by contacting:
Following verification of a valid deletion request, Echofy aims to remove the user's active account information within approximately seven business days.
Certain information may be retained where required by law, including accounting records, payment records, fraud prevention information, or records necessary for establishing, exercising, or defending legal claims.
Information retained in infrastructure backups may be subject to separate deletion cycles.
11. International Data Transfers
Echofy operates from Poland and uses external technology providers.
Depending on the configuration of these providers, information may be processed outside Poland or the European Economic Area.
Where international transfers are subject to the GDPR, Echofy will use an applicable lawful transfer mechanism and any required supplementary safeguards.
The locations of processing and applicable contractual safeguards must be verified with the relevant infrastructure providers.
12. Your Privacy Rights
Where applicable under data protection law, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of your information.
- Request restriction of processing.
- Object to certain processing activities.
- Request data portability.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a competent supervisory authority.
Requests can be submitted to hello@echofy.live.
We may request reasonable verification of identity before processing a request.
Where the GDPR applies, requests will be handled within the applicable statutory deadlines.
13. Security
Echofy takes the protection of personal information seriously and relies on its application infrastructure and service providers to support the operation of the platform.
No online service can guarantee absolute security.
Specific technical and organizational safeguards, including encryption, access controls, backup arrangements, and incident response procedures, are subject to verification and must not be represented as implemented unless confirmed.
14. Children's Privacy
Echofy is not designed specifically for children.
We do not knowingly seek to collect personal information from children in violation of applicable law.
Where we become aware of unlawful processing involving a child, we will take appropriate steps to address it.
Age eligibility and parental consent requirements will be applied in accordance with applicable law and the final Terms of Service.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology, or legal obligations.
Material changes will be communicated through the website or other appropriate channels where required.
16. Contact
For privacy inquiries, requests, or concerns:
Echofy
Email: hello@echofy.live
Website: https://echofy.live
Legal operator details: [LINK TO LEGAL NOTICE]