1. Introduction
Social Susy is a service operated by Capipal Lab AB ("Social Susy", "we", "us", or "our") and is part of My-AI-Crew.com. We respect your privacy and are committed to protecting personal data.
This Privacy Policy explains how we collect, use, process, store, and protect personal data when you use Social Susy and related services.
Social Susy creates social media posts for your business and publishes them to the accounts you connect, such as Instagram, Facebook and LinkedIn.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
Capipal Lab AB
Organization Number: 559570-0401
Stockholm, Sweden
Email: charlotte@my-ai-crew.com
For questions regarding this Privacy Policy or our processing of personal data, please contact us using the information above.
3. Personal Data We Collect
Information Provided by Users
- Name
- Email address
- Company information
- Account credentials
- Support requests and communications
Information You Submit to Social Susy
Customers may submit or connect:
- Social media accounts (Instagram, Facebook, LinkedIn) and the access needed to post
- Images, logos, brand materials and other files
- Information about their business, products and offers
- Instructions, schedules and feedback about their posts
Information From Connected Accounts
When you connect a social media account we receive the account details and permissions you approve, and may receive post engagement data such as likes and comments.
Such information may contain personal data.
Information Collected Automatically
- IP address
- Browser type
- Device information
- Login activity
- Usage analytics
- Audit logs
- System performance information
4. How We Use Personal Data
- Provide and maintain the service
- Authenticate users
- Manage customer accounts
- Create, plan and schedule your social media posts
- Publish posts to the accounts you connect
- Provide customer support
- Improve the service
- Detect fraud and security incidents
- Comply with legal obligations
5. AI Processing
Social Susy uses artificial intelligence technologies to write post texts, select and create images, and plan when posts are published.
AI functionality may process:
- Information about your business
- Images and brand materials you upload
- Instructions and feedback you give us
You decide which accounts Susy may post to and on what schedule, and you can review, change or stop posts at any time.
Customer data is not used to train public AI models.
6. Legal Basis for Processing
Contract Performance
To provide and operate Social Susy.
Legitimate Interests
To improve security, prevent fraud, maintain service reliability, and improve the service.
Legal Obligations
To comply with applicable laws and regulatory requirements.
Consent
Where consent is required by law.
7. Data Sharing
We may share information with trusted service providers that help us operate the service.
- Cloud hosting providers
- Authentication providers
- Email service providers
- Payment processors
- AI service providers
- Monitoring and security providers
- The social media platforms you connect, when we publish on your behalf
We do not sell personal data.
We do not permit third parties to use customer data for advertising purposes.
8. International Data Transfers
We primarily store and process customer data within the European Union.
Where personal data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
9. Data Retention
We retain personal data only for as long as necessary to provide services and comply with legal obligations, taking into account:
- Customer agreements
- Regulatory requirements
- Security requirements
- Legal obligations
Customers may request deletion of data subject to applicable laws and contractual obligations.
10. Data Security
We implement appropriate technical and organizational measures to protect personal data.
- Encryption in transit
- Encryption at rest
- Role-based access controls
- Security monitoring
- Backup and recovery procedures
- Vulnerability management
No method of transmission or storage can be guaranteed to be completely secure.
11. Your GDPR Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent where processing is based on consent
Requests may be submitted to charlotte@my-ai-crew.com.
12. Customer Responsibilities
Customers are responsible for making sure they have the right to use the images and content they give to Social Susy, and a lawful basis for any personal data it contains.
Where we process personal data on behalf of customers, we act as a Data Processor and customers act as Data Controllers under GDPR.
13. Cookies and Analytics
We use Google Analytics (Google Ireland Limited) to understand how visitors use our website — for example which pages are visited and how people find us. Analytics cookies are only set if you click “Accept” in the cookie banner. Without your consent, Google Analytics runs in a restricted mode without cookies and without identifying you. We don't use cookies for advertising.
The legal basis is your consent (GDPR Article 6(1)(a)). You can change your choice at any time: . Strictly necessary storage (for example to keep you signed in) is used without consent because the service can't work without it.
14. Children's Privacy
Social Susy is intended for business users and is not directed to individuals under 18 years of age.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Material changes will be communicated through the service or by email where appropriate.
16. Contact Information
Capipal Lab AB
Stockholm, Sweden
Email: charlotte@my-ai-crew.com
If you believe your personal data has been handled improperly, you may lodge a complaint with your local supervisory authority or with the Swedish Authority for Privacy Protection (IMY).