Last updated: 17 October 2026. This document is provided in English. It is a draft and does not constitute legal advice.
The short version
- Rendering, editing and exports run in your browser. Without an account, projects stay on your device. If you sign in with Google, your projects (including their screenshots) are stored in your account so you can open them on other devices.
- When you request AI copy, public text from the website you enter is processed by Groq when configured, otherwise Cloudflare Workers AI. Optional screenshot reading uses Cloudflare Workers AI only. We do not store this content.
- If you connect Instagram, we store an encrypted access token, your account name and the posts you approved for scheduling, plus their media until shortly after publishing.
- We do not use advertising or tracking cookies. One strictly necessary cookie identifies your publishing workspace.
- If you buy a plan, we store the minimum needed to deliver it: your account, purchase email, Stripe customer/subscription IDs and your plan status.
Who is responsible
The data controller is Karl MEHANNA, 56 D avenue Anatole France, 10000 Troyes, France. Contact: support@cigara.app.
What we process and why
Using the editor
Images, text and projects are processed and stored locally in your browser (IndexedDB and localStorage). If you are not signed in, they stay there and we cannot see them. You can delete them from the Projects panel, from your account page, or by clearing your browser’s site data.
Account and cloud sync (optional)
If you sign in with Google, we receive your Google account identifier, email address, name and profile picture, and keep a session record (a one-way hash of the session token, with its expiry). While you are signed in, your projects are stored in your account on Cloudflare D1 (EU/US data centres operated by Cloudflare) so you can open them on other devices: the analysed brand (website text, colours, fonts), your designs and edits, your picked designs and launch queue with captions, a small preview image, and the screenshots and logo used by the designs (large screenshots are stored as compressed copies). We do not read this content except to provide the service. “Delete all my projects” removes the cloud projects and their images; “Delete my account” removes the cloud projects, your Instagram connection and post history, every session and the account itself. Legal basis: performance of the service you request (art. 6(1)(b)).
AI marketing analysis (Launch Studio)
When you analyse a website, our server reads its public HTML and up to three relevant same-site product pages (only where the site’s robots.txt allows it), then returns extracted text and public asset addresses. Desktop and phone screenshots are taken by an open-source Chromium browser on Cloudflare Browser Run and cached for up to a day; if that is unavailable your browser may ask Microlink for one screenshot. Public website text may be sent to Groq if a Groq API key is configured, otherwise Cloudflare Workers AI, to generate or improve copy. If text AI is unavailable, Adumi Studio uses deterministic page wording. If you analyse an uploaded screenshot and tick “Let AI read my screenshot”, the image is sent to Cloudflare Workers AI. Groq is not used for screenshot images. We do not log or store submitted page content or images; rate-limit counters use a hash of your IP address. To fetch a website’s logo or preview image, our server downloads that public image on your behalf. Results are saved in your browser (IndexedDB) and, if you are signed in, in your account (see “Account and cloud sync”). Legal basis: performance of the service you request (art. 6(1)(b)).
Instagram publishing (optional)
If you connect an Instagram professional account, you sign in on Instagram’s own page (we never see your password). We receive and store your Instagram user ID, username, account type, the permissions you granted and a long-lived access token, encrypted with AES-256-GCM. When you approve and schedule a post, we store its caption, schedule, publishing status and history, and its final media files (JPEG/MP4) so Instagram can fetch them at publishing time. Media is deleted about 3 days after a post is published, cancelled or fails. For published posts we periodically fetch the metrics Instagram returns (such as reach, views, likes, comments, shares and saves) and keep them to show your results. This data is tied to a publishing workspace identified by a strictly necessary cookie and, if you are signed in, linked to your account so it follows you across devices. Disconnecting removes the token and cancels pending posts; “Delete my publishing data” removes everything. Legal basis: performance of the service you request (art. 6(1)(b)). Meta Platforms processes the data you publish under its own terms and privacy policy.
Capturing a website by URL (optional)
When you use “Capture a website”, your browser sends the address you entered to Microlink (microlink.io), a third-party screenshot service, which also receives your IP address as part of the request. We do not receive this data. Only use it for public pages. See Microlink’s own privacy policy for details.
Purchases
Payments are handled by Stripe (Stripe Payments Europe, Ltd. and its affiliates), which processes your payment details under its own privacy policy. We receive and store: your email address, Stripe customer and subscription identifiers, plan, status, renewal date, billing interval (monthly or yearly), the time you accepted the immediate-access notice, and the Adumi Studio account the plan belongs to. Legal basis: performance of a contract (GDPR art. 6(1)(b)) and legal obligations for accounting (art. 6(1)(c)).
Security and abuse prevention
Our hosting provider (Cloudflare) processes IP addresses and technical request data to deliver and protect the site. Our server keeps short-lived rate-limit counters derived from a hash of your IP address and error logs that may include your browser type. Legal basis: legitimate interest in keeping the service secure (art. 6(1)(f)).
Analytics
If enabled, we use Cloudflare Web Analytics, which does not use cookies and does not track you across sites, to count page views in aggregate.
Emails
Stripe sends receipts and payment notifications. If enabled, we send transactional emails through Resend. We do not send marketing emails without your consent.
How long we keep data
- License records: while your purchase is active, then up to 3 years for support and disputes, unless you delete them earlier.
- Unpaid checkout records: deleted automatically after 3 days.
- Rate-limit counters: hours. Export usage logs: about 40 days.
- Instagram connection: until you disconnect or delete it. Scheduled post media: about 3 days after publishing, cancellation or failure. Post history and metrics: until you delete your publishing data.
- Accounting records held by Stripe and by us: as required by law (10 years in France).
Processors and transfers
We rely on Cloudflare (hosting, database, Workers AI, Browser Run), Groq when configured for text AI (website content and prompts), Meta Platforms when you publish to Instagram, Stripe (payments), Microlink (fallback website capture) and optionally Resend (email). Some are located in or transfer data to the United States under appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
Your rights
You can access, correct, delete or export your data, object to or restrict processing. Use “Delete my account” or “Delete all my projects” on your account page, or email support@cigara.app. You can complain to your data protection authority, in France, the CNIL (www.cnil.fr).