Last updated: October 9, 2026
The data controller is CODEGON SRL, a company incorporated in Romania.
This website has no forms and sets no tracking or advertising cookies of its own. We use a self-hosted, cookieless analytics instance (Umami) that records only aggregate, anonymous visit statistics. The only browser storage we use is a single local-storage preference for your light/dark theme choice.
The gallery section shows sample posts hosted on Instagram. These previews load only when you click "Load post from Instagram". When you do, your browser connects to Meta's servers and Meta may set its own cookies and record that visit under Meta's privacy policy. If you do not click, nothing is loaded from Meta on this site.
When you sign up in the application we store your email address, a hashed password (never the password itself), your name if you provide one, your workspace name and website address, your timezone, and the date you accepted the terms. If you sign in with Facebook instead, we receive your name, email address and Facebook user ID from Facebook Login and store the ID to recognise you next time; we do not receive your Facebook password.
We send transactional email through Amazon Web Services (Simple Email Service): a verification link when you sign up, a password-reset link when you ask for one, and a short notice when a post is ready for review. We do not send marketing email and we do not share your address with advertisers.
The application also stores what it produces for you: your brand profile, generated posts and their review scores, publishing history and the settings you choose. Security logs (sign-in attempts, IP address, browser type) are kept for a limited time to protect accounts.
When you connect a Facebook Page or Instagram Business/Creator account to Atonomuse, we request access via Facebook Login and the Meta Graph API. We only request permissions strictly necessary to operate the product. Depending on what you enable, we may obtain and store the following on your behalf:
pages_show_list, instagram_basic)pages_manage_posts, instagram_content_publish)pages_read_engagement, instagram_manage_insights)instagram_manage_comments)We use this data solely to generate, publish, analyze, and moderate content for your account. We do not sell it, rent it, share it with third parties for advertising, or use it for any purpose outside the product features you have enabled. We do not use Meta data to build profiles of end users or for retargeting.
Lawful basis: performance of the contract you agree to when you sign up, our legitimate interest in operating and securing the service, and — where you connect a social account — your consent.
This site stores a single preference in your browser's local storage: your light/dark theme choice. The application stores your sign-in session in your browser so you stay signed in. We do not use tracking or advertising cookies. Instagram previews on the gallery are loaded only on your click, as described above.
We rely on the following third parties to operate the website and the product. Each is bound by a data-processing agreement and the linked privacy policies:
Payments. We store the Stripe customer and subscription identifiers, the subscription status and the renewal date of your workspace, so the application knows what your plan includes. Invoices and receipts are issued by Stripe and are kept for ten years as Romanian tax law requires, including after you delete your account.
Transfers outside the EU. Some providers above process data in the United States. Each transfer rests on the European Commission's standard contractual clauses or on an adequacy decision (EU-US Data Privacy Framework) as stated in that provider's agreement.
Model training. Your website content, brand profile, posts and comments are sent to the AI providers only to produce and review your content. We do not use them to train models, and our agreements with the AI providers exclude training on API data.
Retention periods by category:
Under the GDPR you have the right to access, correct, delete, restrict, or port any personal data we hold about you, and to object to its processing. From your profile in the application you can download a copy of your data and delete your account yourself. For connected Facebook/Instagram data, or if you no longer have access to your account, follow the data deletion instructions. For any other request, email vali@codegon.com. You also have the right to lodge a complaint with a supervisory authority — in Romania, the ANSPDCP (dataprotection.ro).
For any privacy-related questions or to exercise your rights, reach us at vali@codegon.com.