Privacy Policy

1. Data Controller

The data controller is JBTF, headquartered at Via Lama 19, 31033 Castelfranco Veneto (TV), Italy, sole shareholder Judith Borsetto.

For any request regarding your data, you can write to hello@germaincollective.com or call +39 3520830041.

2. Personal data collected

We process: (a) registration and account data (name, email, phone, encrypted password, profile image); (b) voluntarily provided professional profile data (job title, company/institution, interests); (c) generated and saved content (searches, prompts, images/videos, saved items, community messages); (d) payment data managed by Stripe (we do not store card numbers); (e) technical and usage data (logs, IP address, device type, cookies).

3. Purpose and legal basis

Data is processed to: provide services and manage the account (performance of the contract, Art. 6.1.b); manage payments and subscriptions (contract and legal obligations, Art. 6.1.b/c); ensure security and prevent abuse (legitimate interest, Art. 6.1.f); send service communications (contract) and, with prior consent, promotional communications and non-essential cookies (Art. 6.1.a); comply with tax and accounting obligations (legal obligation).

4. What we do with your data

We use data solely to run the Platform, personalize and improve services, process AI requests, and manage subscriptions and support. We do not sell your personal data to third parties.

5. Recipients and providers (data processors)

To provide the service, we use third-party providers acting as data processors, including: hosting and cloud infrastructure providers; Stripe for payments; AI model providers for processing requests (prompts may be sent to these providers); storage services for generated files. Data may be disclosed to authorities when required by law.

6. Transfers outside the EU

Some providers may process data outside the European Economic Area. In such cases, the transfer is based on adequacy decisions or Standard Contractual Clauses approved by the European Commission.

7. Retention period

We retain account data for the duration of the relationship and, after deletion, for as long as necessary to comply with legal obligations (e.g. invoicing: 10 years). Generated content is retained while you keep the account or until it is deleted.

8. Ownership of data and content

Personal data remains the property of the data subject, who may exercise the rights listed below at any time. Content you upload or generate remains available to you; you grant the Data Controller a limited license solely to provide and improve the service.

9. Your rights

You may exercise the rights of access, rectification, erasure, restriction, portability and objection (Arts. 15-22 GDPR), as well as withdraw consent at any time. Requests should be sent to hello@germaincollective.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

10. Security

We adopt appropriate technical and organizational measures (password encryption, restricted access, session protection) to protect data from unauthorized access, loss or disclosure.

11. Minors

The services are not intended for minors under 16 years of age. We do not knowingly collect data from minors without the consent of a person with parental responsibility.