Privacy policy

1. Controller

The controller responsible for processing personal data on this website and within the ClientQueue service is:

Lev Furmanov
Gemeindeaugasse 18, 1220 Wien, Austria
Email: furmanovlev1@gmail.com

2. Data we process

• Account data: email address, name, hashed authentication credentials, plan and billing status.
• Content data: posts, captions, comments, and media files (images/videos) you upload for scheduling, plus metadata of connected social media accounts (account name, avatar, platform identifiers) and access tokens required to publish on your behalf.
• Client approval data: names you assign to approval links and comments/decisions entered by your clients via those links.
• Usage data: log data such as IP address, browser type, timestamps, and in-app usage events needed to operate, secure, and bill the service.
• Waitlist data: email address and the campaign source tag when you join the waitlist on this website.
• Support correspondence: emails you send us and our replies.

3. Purposes and legal bases

• Providing the ClientQueue service (account management, scheduling and publishing posts, client approvals, billing) — Art 6(1)(b) GDPR (performance of a contract).
• Securing and improving the service, preventing abuse, aggregate usage analysis — Art 6(1)(f) GDPR (legitimate interest in operating a secure, reliable service).
• Compliance with statutory obligations (e.g. tax and accounting records) — Art 6(1)(c) GDPR.
• Sending the one-time waitlist invitation you requested — Art 6(1)(b) GDPR (steps prior to entering into a contract, at your request). We send no further emails without your separate consent, and you can ask us to delete your waitlist entry at any time.

4. Processors and recipients

We use the following processors (Auftragsverarbeiter) under Art 28 GDPR data processing agreements:

• Supabase, Inc. (USA) — database, authentication, and file storage; our project and its data are hosted in the EU. Data processing agreement including EU Standard Contractual Clauses (supabase.com/legal/dpa).
• Vercel Inc. (USA) — application hosting and content delivery. Data processing agreement including EU Standard Contractual Clauses (vercel.com/legal/dpa).
• Anthropic PBC(USA) — AI caption adaptation; caption text you submit for adaptation is processed via Anthropic's commercial API and is not used to train models. Data processing agreement at anthropic.com/legal/data-processing-addendum.
• Zernio (EU) — social publishing infrastructure: when you connect a social account, the OAuth tokens and account metadata are held by Zernio, and the content and media of posts you publish are transmitted through it to the platforms. Data processing agreement at trust.zernio.com.
• Social media platforms — when you connect an account and publish, post content is transmitted on your instruction to the respective platform (e.g. Meta, TikTok, LinkedIn, X) as an independent controller.

Where processors process data outside the EU/EEA, transfers are safeguarded by EU Standard Contractual Clauses (Art 46(2)(c) GDPR) and, where the processor is certified, the EU-US Data Privacy Framework. A payment processor will be added to this list before paid plans launch.

5. Storage duration

We store personal data for as long as your account exists. You can request deletion of your account at any time by emailing furmanovlev1@gmail.com; after account deletion, your data is deleted within 30 days, except where statutory retention obligations (e.g. § 132 BAO — 7 years for accounting records) require longer storage. Media files you upload remain in our storage until your account is deleted or you request their deletion. Waitlist entries are deleted once no longer needed for the launch invitation, or immediately on request.

6. Your rights

Under Art 15–21 GDPR you have the right to:

• access the personal data we hold about you (Art 15),
• rectification of inaccurate data (Art 16),
• erasure ("right to be forgotten", Art 17),
• restriction of processing (Art 18),
• data portability (Art 20), and
• object to processing based on legitimate interests (Art 21).

Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, contact us at furmanovlev1@gmail.com.

7. Right to lodge a complaint

If you believe the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria — www.dsb.gv.at — or with the supervisory authority of your habitual residence.

8. Cookies

ClientQueue uses only strictly necessary cookies: session cookies required for authentication and security. These are technically essential to provide the service and therefore do not require consent (§ 165 Abs 3 TKG 2021). We do not use tracking, advertising, or third-party analytics cookies.