Privacy Policy

Papegaai is operated by inKvest SRL ("we", "us", "our"). This policy explains what personal data we collect, why we collect it, and how we handle it.

For questions, contact us at: info@papegaai.co

01Who We Are

inKvest SRL operates Papegaai, a mobile-enhanced reading experience platform, and the website www.papegaai.co. As a company serving users in the European Union, we process personal data in accordance with the General Data Protection Regulation (GDPR).

02Data We Collect

2.1 Authentication via Third-Party Providers

When you choose to sign in using Google, Facebook/Instagram, or TikTok, we receive the following data from those providers:

• Google — Name, email address, profile picture
• Facebook / Instagram — Name, email address (when available), profile picture
• TikTok — Name, email address (when available), profile picture

We only request the minimum data necessary to create and identify your account. We do not request access to your contacts, posts, messages, or any other data beyond basic profile information.

2.2 Data You Provide

• Content you create or interact with on the platform (reading progress, preferences)

2.3 Newsletter

When you subscribe to our newsletter on www.papegaai.co, we collect your email address, your browser language (for example es-ES) and the website that referred you to us (for example google.com), together with any campaign parameters in the link you followed. We use this data only to send you our newsletter and to understand which channels bring new readers.

2.4 Creator Applications

When you apply as a creator on www.papegaai.co/creators, we collect your name and email address, then what you tell us about your work: its title, links to it, the visuals you upload (images or PDF), your answers to our questions and any message you add. We also keep the campaign parameters of the link you followed and the steps of the form you reached, including answers saved before you send the application.

To help our team review applications, the application and its visuals are sent to Anthropic's Claude, which produces an assessment and may look up your publicly available work online. This assessment only assists the team: a person reads every application, and no decision is made automatically. Your work is not used to train AI models.

2.5 Technical Data

• IP address and browser/device information (collected automatically by our servers for security and performance purposes)
• Session cookies required for authentication

2.6 Analytics, Advertising Measurement and Session Recording

We use Google Analytics (through Google Tag Manager) and TikTok Pixel to understand how users interact with the platform. These tools may collect:

• Pages visited and time spent
• Device type, browser, and operating system
• Approximate location (country/region level, derived from IP)
• Referral source (how you arrived at the platform)

On www.papegaai.co/creators we also use:

• Meta Pixel — to measure whether our advertising campaigns on Facebook and Instagram bring creators to apply. It records page views and the steps of the application you reach (entering, starting the form, uploading a visual, sending it), never what you type. Meta may combine this with your Meta account and use it under its own policy, including for ad targeting.
• Microsoft Clarity — session recordings and heatmaps that show how visitors move through the page and the form, so we can fix what gets in the way. The fields where you enter personal information (name, email, the title of your work, links, messages) are masked: their content is never recorded.

This data is processed by Google, TikTok, Meta and Microsoft under their respective privacy policies.

03How We Use Your Data

We process your data for the following purposes, each grounded in a specific legal basis under the GDPR:

• Creating and managing your account — Contract (Art. 6(1)(b))
• Displaying your name and avatar within the platform — Contract (Art. 6(1)(b))
• Sending you our newsletter — Consent (Art. 6(1)(a)), which you can withdraw at any time
• Handling your creator application, answering you and preparing a contract — Steps taken at your request before entering into a contract (Art. 6(1)(b))
• Reviewing creator applications with the help of an AI assessment — Legitimate interest (Art. 6(1)(f))
• Securing your account and preventing fraud — Legitimate interest (Art. 6(1)(f))
• Analytics and session recording to understand and improve the platform — Legitimate interest (Art. 6(1)(f))
• Measuring the performance of our advertising campaigns — Legitimate interest (Art. 6(1)(f))
• Complying with legal obligations — Legal obligation (Art. 6(1)(c))

We do not build advertising profiles ourselves, and we make no automated decisions about you: every creator application is read by a person.

04Google User Data — Specific Disclosures

This section addresses requirements under the Google API Services User Data Policy.

Data accessed: When you sign in with Google, we access your Google account name, email address, and profile picture via Google OAuth 2.0 (scope: openid, profile, email).

Data usage: This data is used solely to create and authenticate your Papegaai account, and to display your name and avatar within the platform. We do not use Google user data for any other purpose.

Data sharing: We do not sell, rent, or share your Google user data with any third parties, except as required by law or to operate our core infrastructure (see Section 5).

Data storage & protection: Your data is stored on Google Cloud Platform (region: europe-west1) and protected using industry-standard encryption in transit (TLS) and at rest. Access is restricted to authorised personnel only.

Data retention & deletion: We retain your account data for as long as your account is active. You may request deletion of your account and all associated data at any time (see Section 7). Upon deletion, your data is removed from our systems within 30 days.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

05Data Sharing

We do not sell your personal data. We share it only with:

• Google Cloud Platform — cloud infrastructure hosting our servers and database (EU region)
• Authentication providers — Google, Meta (Facebook/Instagram), TikTok, solely to perform the login flow you initiate
• Brevo — our email provider, which stores newsletter subscribers and sends our emails, including those about your creator application (Brevo Privacy Policy)
• Anthropic — the Claude model that assists our team in reviewing creator applications; Anthropic does not use this data to train its models (Anthropic Privacy Policy)
• Google Analytics — anonymised usage data to measure platform performance (Google Privacy Policy)
• TikTok Pixel — anonymised usage data for audience analytics (TikTok Privacy Policy)
• Meta Pixel — advertising measurement on the creators page (Meta Privacy Policy)
• Microsoft Clarity — session recordings and heatmaps on the creators page (Microsoft Privacy Statement)
• Discord — our internal team messaging, where a daily summary lists new creator applications by name, title and assessment (Discord Privacy Policy)

No other third parties receive your personal data. Some of these providers are based in the United States; transfers there rely on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.

06Data Storage & Security

Your data is stored on Google Cloud Platform in the europe-west1 (Belgium) region. We apply the following protections:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest
• Access controls limited to authorised personnel
• Regular security reviews

07Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — unsubscribe from the newsletter at any time, using the link in every email
• Lodge a complaint — with your national data protection authority

To exercise any of these rights, contact us at info@papegaai.co. We will respond within 30 days.

08Data Retention

• Active accounts: data is retained for the duration of your account
• Deleted accounts: data is permanently removed within 30 days of a deletion request
• Newsletter: your email address is kept until you unsubscribe
• Creator applications: kept while we review your application and follow up with you; if a contract follows, for as long as the contract requires. You can ask us to delete your application at any time.
• Security logs: retained for up to 90 days

09Cookies

We use the following cookies:

• Session cookie: strictly necessary for authentication (keeps you logged in)
• Google Analytics (_ga, _gid): anonymised usage analytics
• TikTok Pixel (_ttp, tt_*): anonymised audience analytics
• Meta Pixel (_fbp): advertising measurement, on the creators page
• Microsoft Clarity (_clck, _clsk): session recordings and heatmaps, on the creators page

You can block or delete these cookies at any time in your browser settings. You can also opt out of Google Analytics via Google's opt-out tool, and control how Meta uses this data for ads in your Meta ad preferences.

10Children's Privacy

Papegaai is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

11Changes to This Policy

We may update this policy. When we do, we will update the "Last updated" date at the top. Continued use of the platform after changes constitutes acceptance of the updated policy.

12Contact

For GDPR-related requests: info@papegaai.co

See also our Terms and Conditions.