Terms & Conditions

Moojito SAS (operating as Favikon)

Last Updated: November 5, 2025

INTRODUCTION

Moojito SAS, operating under the brand name "Favikon" ("we", "us", "our", or "Favikon"), is committed to protecting your privacy and complying with all applicable data protection laws and regulations, including the EU General Data Protection Regulation (GDPR).

This Privacy Policy describes how we collect, use, process, and share your personal information when you:

  • Visit our website at www.favikon.com and related domains (the "Sites");
  • Use our AI-powered influencer marketing platform (the "Platform");
  • Interact with our services as a Client, User, or Creator.

Company Details:

  • Legal Entity: Moojito SAS
  • Operating Name: Favikon
  • Registration Number: 840592448
  • Registered Address: 14 Avenue du Général de Gaulle, 94160 Saint-Mandé, France
  • Contact Email: privacy@favikon.com

TABLE OF CONTENTS

  1. Definitions
  2. Scope and Application
  3. Types of Personal Data We Collect
  4. How We Collect Your Personal Data
  5. How We Use Your Personal Data
  6. Legal Basis for Processing
  7. Special Category Data Processing (Political Information)
  8. AI-Powered Features and Automated Processing
  9. Cookies and Tracking Technologies
  10. Sharing Your Personal Data
  11. International Data Transfers
  12. Data Retention
  13. Your Rights Under GDPR
  14. Data Security
  15. Third-Party Services
  16. Children's Privacy
  17. Changes to This Privacy Policy
  18. Contact Us

1. DEFINITIONS

"Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection laws including GDPR.

"Special Category Data" means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation (as defined in GDPR Article 9).

"Client" means any company, agency, or brand that has subscribed to use the Platform for business purposes.

"User" means individuals authorized by Clients to access and use the Platform.

"Creator" means influencers, content creators, Key Opinion Leaders (KOLs), or other professionals active on social media platforms who are indexed in our Platform for potential brand collaborations.

"Public Political Figure" means an individual who has entered the public arena through political activity and holds or has held an official political position, represents a political party, or professionally identifies as a political commentator or analyst, and who has explicitly and publicly stated their political affiliations, positions, or roles.

"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.

"Data Controller" means the entity that determines the purposes and means of processing Personal Data.

"Data Processor" means an entity that processes Personal Data on behalf of a Data Controller.

2. SCOPE AND APPLICATION

This Privacy Policy applies to:

2.1 Website Visitors

Individuals who visit our public-facing websites.

2.2 Clients and Users

Companies and their authorized personnel who have subscribed to use our Platform.

2.3 Creators

Professional influencers and content creators whose publicly available information is indexed on our Platform.

2.4 Business Contacts

Individuals we interact with for business development, partnerships, or vendor relationships.

3. TYPES OF PERSONAL DATA WE COLLECT

We collect different types of Personal Data depending on your relationship with Favikon:

3.1 Website Visitors

Automatically Collected Information:

  • Device information (device type, operating system, browser type)
  • IP address and approximate geolocation
  • Pages visited, time spent on pages, click data
  • Referring website or search terms
  • Date and time of visit
  • Cookie identifiers (see Section 9)

Information You Provide:

  • Name, email address, company name
  • Phone number (if provided)
  • Content of communications with us
  • Information submitted through contact forms or demo requests

3.2 Clients and Users

Account and Registration Information:

  • Full name, job title, business email
  • Company name, company size, industry
  • Business address and phone number
  • Login credentials (username, encrypted password)
  • Billing information (handled by third-party payment processors)
  • VAT number and business registration details

Platform Usage Data:

  • Searches performed, filters applied
  • Creators added to lists or campaigns
  • Campaign data and performance metrics
  • Features used, time spent on Platform
  • Integration preferences (e.g., Unipile, Gigapay)

Messaging Data (via Unipile Integration):

When you use our messaging integration features to communicate with Creators via LinkedIn or Instagram:

  • Messages sent and received: Complete content of direct messages (DMs) exchanged through our Platform
  • Message metadata: Timestamps, sender/recipient information, conversation threads
  • Message status: Read/unread status, delivery confirmations
  • Conversation context: Message history and threading information

Important: When you connect your LinkedIn or Instagram account through Unipile to send messages via our Platform, we store the complete content of messages you send and receive in our database for a maximum of three (3) years. This is necessary to:

  • Display conversation threads in your inbox
  • Maintain message history
  • Enable our AI Inbox features (see Section 8)
  • Provide seamless messaging experience
  • Support customer service requests

3.3 Creators

Publicly Available Social Media Data:

  • Profile name, username/handle, profile picture
  • Bio/description, location (if public)
  • Public posts, captions, hashtags, mentions
  • Engagement metrics (likes, comments, shares, views)
  • Follower counts and growth trends
  • Posting frequency and timing
  • Content categories and topics
  • Brand partnerships and sponsored content (when publicly disclosed)
  • Public contact information (email, website links)

Political Information (Public Political Figures Only):

For individuals who qualify as Public Political Figures and have explicitly and publicly stated their political information:

  • Official political positions or elected roles
  • Political party affiliation or membership
  • Self-declared political orientation or perspective (as explicitly stated in public profiles)
  • Professional political role (e.g., "Political Commentator", "Party Spokesperson")

Important Clarification:

  • We do NOT use AI to infer or classify political opinions from content analysis
  • We do NOT assign political orientations based on algorithmic analysis
  • We ONLY display political information that has been explicitly and publicly stated by the individual themselves
  • Political classification is limited to genuine Public Political Figures only
  • Regular influencers who occasionally discuss politics are NOT classified politically

Data From Creator Registration (Optional):

  • Email address (for account creation)
  • Consent to synchronize social media accounts
  • Enhanced analytics data (with explicit consent)
  • Preferences regarding political information display (if applicable)

Important Note on Creator Data:

We collect ONLY publicly available information from professional content creators who present themselves as influencers or KOLs engaged in commercial activities. We do NOT collect data from:

  • Personal, non-commercial social media accounts
  • Private individuals not engaged in professional content creation
  • Accounts without demonstrated commercial intent
  • Minors under 13 years of age

3.4 Payment Information (via Third-Party Processors)

When Clients use payment services through our partner Gigapay, the following information may be processed by Gigapay (not by Favikon directly):

  • Creator name, address, tax identification
  • Bank account or payment details
  • Transaction history
  • Tax compliance documentation

Note: Favikon does not directly collect, store, or process payment card information or banking details. All payment processing is handled by certified third-party payment service providers.

4. HOW WE COLLECT YOUR PERSONAL DATA

4.1 Information You Provide Directly

  • When you create an account
  • When you subscribe to our services
  • When you contact us for support or inquiries
  • When you attend our events or webinars
  • When you participate in surveys or feedback requests
  • When Creators register and synchronize social media accounts
  • When you send or receive messages through our Platform

4.2 Information Collected Automatically

On Our Websites:

  • Through cookies, web beacons, and similar tracking technologies
  • Through log files that record Site activity
  • Through analytics tools (e.g., Google Analytics, Hotjar)

On Our Platform:

  • Through your interactions with Platform features
  • Through integrations with third-party services (Unipile, Gigapay)
  • Through AI analysis of your Platform usage and message content (see Section 8)

4.3 Information From Third-Party Sources

For Creator Data:

Important Clarification: Favikon does not directly collect publicly available data from social media platforms. Instead, we use specialized third-party data aggregation services that collect and compile publicly accessible information from social media platforms on our behalf.

How it works:

  • Third-party data providers use automated tools to collect public information from social media platforms (Instagram, TikTok, YouTube, LinkedIn, Twitter/X)
  • These providers aggregate, structure, and deliver this data to us
  • We then process and display this data through our Platform
  • This data consists solely of information that Creators have made publicly accessible on their social media profiles

Data sources include:

  • Third-party data aggregation and intelligence providers
  • Public social media platforms (accessed through third-party services)
  • Public websites, blogs, and online profiles maintained by Creators
  • Data enrichment services that provide additional context or analytics
  • Publicly available government records and official sources (for political positions of Public Political Figures)

Important: We use third-party data sources and NOT official social media APIs (except where Creators explicitly authorize API access through account synchronization with their registered Favikon accounts).

Our Role: For publicly available Creator data obtained through third-party providers, Favikon acts as a Data Controller, determining the purposes and means of processing this data for our influencer marketing platform.

For Business Data:

  • Publicly available business directories
  • Professional networking platforms (LinkedIn)
  • Trade shows and industry events
  • Business partners and referrals

4.4 Information From Our Clients

Clients may add Creator profiles or information to the Platform based on their own research or relationships. For such data, we act as a Data Processor on behalf of our Client.

5. HOW WE USE YOUR PERSONAL DATA

5.1 To Provide and Improve Our Services

For All Users:

  • Operating and maintaining the Platform and Sites
  • Processing registrations and managing accounts
  • Authenticating logins and ensuring security
  • Providing customer support and responding to inquiries
  • Analyzing Platform usage to improve functionality
  • Developing new features and services

For Clients:

  • Enabling Creator discovery and search functionality
  • Providing analytics and performance metrics (including AI-generated scores such as Authenticity Scores)
  • Facilitating campaign management and reporting
  • Enabling messaging integrations (Unipile) and storing message history
  • Providing AI-powered features (see Section 8)
  • Facilitating payment processing (Gigapay)
  • Generating insights and competitive intelligence

For Creators:

  • Making professional profiles discoverable to potential brand partners
  • Providing performance analytics (when registered)
  • Facilitating business opportunities and collaborations
  • For Public Political Figures: Displaying explicitly stated political information to help Clients identify relevant creators for public affairs and political communication campaigns

For Public Political Figures Specifically:

  • Displaying official political positions, party affiliations, and professional political roles that have been explicitly stated publicly
  • Enabling Clients to search for and identify creators relevant for public affairs, political communications, and related campaigns
  • Providing context about professional political activities and roles

5.2 For Communication

  • Sending transactional emails (account confirmations, password resets)
  • Providing service updates and important notices
  • Responding to support requests
  • Sending marketing communications (with consent)
  • Facilitating business introductions between Clients and Creators

5.3 For Business Operations

  • Managing billing and payments
  • Conducting fraud prevention and security monitoring
  • Enforcing our Terms of Service
  • Complying with legal obligations
  • Resolving disputes and enforcing agreements

5.4 For Analytics and Research

  • Understanding how users interact with our Platform
  • Identifying trends and usage patterns
  • Conducting market research (in aggregated, anonymized form)
  • Improving our algorithms and scoring methodologies (including Authenticity Scores)
  • Benchmarking and competitive analysis
  • Training and improving AI models (with appropriate safeguards - see Section 8.5)

5.5 For Legal Compliance

  • Responding to legal requests from authorities
  • Protecting our rights and property
  • Enforcing our agreements
  • Complying with tax and regulatory requirements (e.g., DAC7 directive)

6. LEGAL BASIS FOR PROCESSING

Under GDPR, we process your Personal Data based on the following legal grounds:

6.1 Consent (Article 6(1)(a))

When we rely on consent:

  • Marketing communications
  • Non-essential cookies and tracking
  • Creator account synchronization with social media APIs
  • Optional AI features that are not essential to service provision
  • Optional features requiring explicit permission

Your rights: You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6.2 Contract Performance (Article 6(1)(b))

When processing is necessary to fulfill a contract:

  • Providing Platform access to Clients and Users
  • Processing subscriptions and billing
  • Delivering services you've requested
  • Managing your account
  • Storing and displaying messages sent through our Platform (necessary to provide the messaging service you've requested)
  • Enabling conversation history and thread management
  • Providing core Platform features

6.3 Legal Obligation (Article 6(1)(c))

When we must comply with legal requirements:

  • Tax reporting and compliance
  • Responding to lawful requests from authorities
  • Meeting regulatory requirements (e.g., DAC7 for payment platforms)
  • Retaining records as required by law

6.4 Legitimate Interests (Article 6(1)(f))

When we have legitimate business interests:

For Creator Data Processing:

Our primary legal basis for processing publicly available Creator data is legitimate interest. Specifically:

  • Our Legitimate Interest: Operating a B2B platform that connects brands with professional content creators for influencer marketing collaborations
  • Necessity: Processing public professional information is essential for this business purpose
  • Creators' Reasonable Expectations: Professional influencers who maintain public profiles and engage in commercial activities reasonably expect their publicly available professional information to be used for business networking, discovery platforms, and commercial opportunities
  • Balance of Interests: The benefits to Creators (business opportunities, brand discovery, professional networking) and to the influencer marketing industry outweigh privacy concerns, given that:
    • We only process publicly available information
    • We exclude personal, non-commercial accounts
    • We provide easy opt-out mechanisms
    • We implement strong security measures
    • Creators can claim and enhance their profiles

For AI Message Analysis:

  • Our Legitimate Interest: Enhancing user experience through AI-powered messaging features, improving workflow efficiency, and providing intelligent automation
  • Necessity: AI analysis of message content is necessary to provide advanced features that users value
  • User Control: Users can opt out of AI features at any time while maintaining basic messaging functionality
  • Balance of Interests: The benefits (time savings, workflow automation, intelligent insights) outweigh privacy concerns given appropriate safeguards and opt-out options

Other Legitimate Interests:

  • Fraud prevention and security
  • Network and information security
  • Business development and marketing
  • Improving our services
  • Internal analytics and research
  • Calculating Authenticity Scores and other performance metrics

Balancing Test: We have conducted a balancing test and determined that our processing does not override your rights and freedoms. We process only public information (except where explicitly provided by users), implement appropriate safeguards, and provide clear opt-out mechanisms.

7. SPECIAL CATEGORY DATA PROCESSING (POLITICAL INFORMATION)

7.1 What is Special Category Data?

Under GDPR Article 9, political opinions are classified as "special category data" which requires heightened protection and specific legal justification for processing.

7.2 Our Approach to Political Data

Strict Limitations:

We process political information ONLY for individuals who meet ALL of the following criteria:

  1. Public Political Figure Status: The individual is a politician, elected official, political party representative, or professional political commentator
  2. Explicit Public Declaration: The individual has explicitly and publicly stated their political position, affiliation, or role
  3. Manifestly Made Public: The political information has been manifestly made public by the individual themselves through deliberate, affirmative action

What We Do NOT Do:

  • We do NOT use AI to infer or classify political opinions from content analysis
  • We do NOT assign political orientations based on algorithmic analysis of posts or content
  • We do NOT classify regular influencers as having political opinions
  • We do NOT process political data for individuals who have not explicitly made such information public

7.3 Legal Basis for Political Data Processing

Article 9(2)(e) GDPR - Manifestly Made Public:

Processing is permitted when it "relates to personal data which are manifestly made public by the data subject."

Our Application:

For Public Political Figures, we process political information that they have:

  • Deliberately and affirmatively made public
  • Stated explicitly in their public profiles, bios, or official statements
  • Made accessible to the general public through their own actions

Examples of Qualifying Information:

  • Official political position: "Member of Parliament for [Party]"
  • Party leadership role: "President of [Political Party]"
  • Self-identification: "Conservative political commentator" (as stated in bio)
  • Public party membership explicitly stated

Examples of NON-Qualifying Information:

  • AI inference that someone is "conservative" based on content analysis
  • Categorization based on topics discussed
  • Political spectrum positioning based on algorithmic analysis

7.4 Combined Legal Basis

Article 6(1)(f) GDPR - Legitimate Interest:

In addition to Article 9(2)(e), we rely on legitimate interest for displaying political information:

  • Our Legitimate Interest: Providing comprehensive platform for political communications and public affairs campaigns
  • Public Figures' Reasonable Expectations: Public Political Figures expect their explicitly stated political roles to be used for professional networking and business opportunities

7.5 Purpose of Political Data Processing

We process political information for Public Political Figures to:

  • Help Clients identify relevant creators for public affairs campaigns
  • Enable search and discovery for political communication needs
  • Provide context about professional political activities
  • Facilitate legitimate business collaborations in political marketing

7.6 Your Rights Regarding Political Data

If you are classified as a Public Political Figure:

  • You can dispute the classification at any time
  • You can request removal of political information
  • You can request review of the source and accuracy of information
  • You can object to processing under Article 21 GDPR

To exercise these rights: Contact privacy@favikon.com

7.7 Data Protection Impact Assessment (DPIA)

We have conducted a Data Protection Impact Assessment for our processing of political information, identifying risks and implementing appropriate safeguards including:

  • Strict criteria for classification
  • Manual review of political classifications
  • Source documentation requirements
  • Easy dispute and removal mechanisms
  • Regular audits of political data

8. AI-POWERED FEATURES AND AUTOMATED PROCESSING

8.1 Overview of AI Features

Favikon uses artificial intelligence and machine learning to enhance Platform functionality and provide advanced features. This section describes how we use AI and your rights regarding automated processing.

8.2 AI Inbox and Message Analysis

What It Does:

When you use our messaging features with connected LinkedIn or Instagram accounts, we use artificial intelligence to analyze and process your messages in real-time.

AI-Powered Features:

  • Automated status updates: Analyzing message content to automatically update conversation status (e.g., "Awaiting Response", "Negotiating", "Confirmed")
  • Smart suggestions: Generating suggested responses based on conversation context
  • Conversation intelligence: Identifying key information, action items, and important dates from message content
  • Automated actions: Triggering workflow automations based on message content and context
  • Thread organization: Categorizing and organizing conversations automatically
  • Performance insights: Analyzing messaging patterns and response rates
  • Sentiment analysis: Understanding tone and urgency of messages

How AI Analysis Works:

  • Messages sent and received through our Platform are processed by our AI systems
  • AI agents analyze message content, sentiment, context, and patterns
  • Analysis happens in real-time as messages are sent/received
  • AI-generated insights and actions are used to enhance your workflow
  • Processing occurs on our secure servers with appropriate safeguards

Data Used for AI Processing:

  • Complete message content (text)
  • Message metadata (sender, recipient, timestamp)
  • Conversation history and context
  • Your previous interactions with the Creator
  • Campaign information associated with the conversation
  • Your usage patterns and preferences

Legal Basis:

  • Primary: Legitimate Interest (Article 6(1)(f)) - enhancing user experience and providing valuable features
  • Alternative: Contract Performance (Article 6(1)(b)) - where AI features are essential to service delivery

Your Control and Rights:

  • Opt-Out: AI features can be disabled in your account settings at any time
  • Selective Control: You can opt out of specific AI functionalities while keeping others active
  • No Impact on Basic Service: Disabling AI features does not affect basic messaging functionality
  • Message Retention: Messages are still stored even if AI features are disabled (necessary for inbox display and history)

8.3 Content Analysis and Authenticity Scoring

What It Does:

We use AI to analyze publicly available Creator content to generate:

  • Authenticity Scores: Assessing engagement patterns, content originality, follower growth patterns, and indicators of artificial engagement
  • Topic Classification: Identifying themes and subjects discussed in content
  • Performance Metrics: Calculating engagement rates, reach trends, and content effectiveness
  • Audience Insights: Analyzing publicly available audience demographics and interests

Important Disclaimers:

  • All AI-generated scores and classifications are provided "as is" and may contain errors
  • Scores should be independently verified before making business decisions
  • Authenticity Scores do not constitute judgments of a Creator's professional value or character
  • Scores may change as algorithms are updated and improved

Legal Basis:

  • Legitimate Interest (Article 6(1)(f)) - providing analytical tools for business decision-making
  • For registered Creators: Contract Performance (Article 6(1)(b))

Creator Rights:

  • Any Creator can dispute their Authenticity Score
  • Creators can request review of AI-generated classifications
  • Creators can request information about how scores are calculated (within limits of protecting proprietary algorithms)

8.4 Human Review and Oversight

For AI Message Processing:

  • Our AI systems process messages automatically
  • Favikon employees do not routinely read your messages
  • Messages may be accessed by authorized personnel only for:
    • Technical support and troubleshooting
    • Investigating reported abuse or violations
    • Responding to legal requirements
    • Quality assurance (limited sampling with appropriate safeguards)

For AI Content Analysis:

  • AI models are trained and validated using appropriate datasets
  • Human oversight ensures accuracy and fairness
  • Regular audits assess AI performance and identify potential biases

8.5 Third-Party AI Providers

AI Service Providers:

We may use third-party AI service providers to power these features, including but not limited to:

  • OpenAI (ChatGPT, GPT models)
  • Anthropic (Claude)
  • Google (Vertex AI, various AI services)
  • Other specialized AI and machine learning providers

Data Processing Agreements:

  • All AI providers operate under strict data processing agreements
  • AI providers are contractually prohibited from using your data to train their general models (where applicable and available)
  • AI providers must implement appropriate security and privacy safeguards
  • Data retention by AI providers is limited to what is necessary for service provision

Data Shared with AI Providers:

When using AI features, the following data may be sent to third-party AI providers:

  • Message content (for AI Inbox features)
  • Conversation context
  • User instructions and preferences
  • Metadata necessary for processing

Your Control:

  • Disabling AI features prevents data sharing with AI providers for those features
  • You can contact us to request information about which AI providers process your data

8.6 Right to Object to Automated Decision-Making

GDPR Article 22 Rights:

You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects.

Our Position:

  • Our AI features provide insights and suggestions but do NOT make automated decisions with legal or similarly significant effects
  • All business decisions (e.g., selecting Creators for campaigns, negotiating contracts) are made by human users
  • AI serves as a tool to assist decision-making, not replace human judgment

Scores and Rankings:

  • Favikon Scores, Authenticity Scores, and rankings are generated by algorithms
  • These scores are presented as informational tools only
  • Clients make their own independent decisions about Creator collaborations
  • Scores do not automatically determine outcomes or access to opportunities

If You Disagree:

If you believe you have been subject to automated decision-making with significant effects, you have the right to:

  • Obtain human intervention
  • Express your point of view
  • Contest the decision
  • Request manual review

Contact privacy@favikon.com to exercise these rights.

8.7 AI Model Training

Use of Platform Data:

  • We may use aggregated, anonymized Platform usage data to improve our own proprietary AI models
  • We do NOT use individual messages or personal data to train AI models without explicit consent
  • Any use of data for AI training is subject to strict anonymization and aggregation

Third-Party Model Training:

  • Where possible, we contractually prohibit third-party AI providers from using your data for their model training
  • Some AI providers may not offer this option; in such cases, we assess the privacy implications before using their services

8.8 Transparency and Explainability

How AI Decisions Are Made:

While we protect our proprietary algorithms, we provide general information about:

  • What factors influence AI-generated scores
  • How AI analyzes content and messages
  • What data is used for AI processing
  • How to dispute or challenge AI outputs

Request More Information:

You can request additional information about AI processing of your data by contacting privacy@favikon.com. We will provide information to the extent possible without disclosing proprietary algorithms.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our Sites. They help us recognize you, remember your preferences, and improve your browsing experience.

9.2 Types of Cookies We Use

Strictly Necessary Cookies:

  • Essential for Site and Platform functionality
  • Enable login authentication and security
  • Remember items in your cart or form inputs
  • Cannot be disabled without affecting functionality

Analytics and Performance Cookies:

  • Help us understand how visitors use our Sites
  • Collect aggregated, anonymized usage statistics
  • Enable heat-mapping and user behavior analysis
  • Examples: Google Analytics, Hotjar

Functional Cookies:

  • Remember your preferences and settings
  • Enable enhanced features
  • Improve your user experience
  • Store AI feature preferences

Targeting/Advertising Cookies:

  • Used for targeted advertising
  • Track your browsing across websites
  • Measure ad campaign effectiveness
  • Examples: Facebook Pixel, Google Ads, LinkedIn Insight Tag

9.3 Third-Party Cookies

Some cookies are placed by third-party services that appear on our Sites. We do not control these cookies. Third parties include:

  • Google Analytics
  • Facebook
  • LinkedIn
  • Hotjar
  • Other analytics and advertising partners

9.4 Managing Cookies

Browser Settings:

You can control cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies
  • Block third-party cookies
  • Block all cookies
  • Clear cookies when you close your browser

Note: Blocking or deleting cookies may impact Site functionality and your user experience, including AI features that rely on preference storage.

Opt-Out Tools:

9.5 Do Not Track (DNT)

Currently, our Sites do not respond to "Do Not Track" browser signals. However, you can use the opt-out mechanisms described above.

10. SHARING YOUR PERSONAL DATA

We do not sell your Personal Data. We share your Personal Data only in the following circumstances:

10.1 With Our Clients (Creator Data Only)

Creator profiles and analytics are made available to our Clients through the Platform as part of our core service. This is essential for our B2B influencer marketing platform to function.

What Clients can see:

  • Publicly available Creator profile information
  • Performance metrics and analytics (including AI-generated Authenticity Scores)
  • Content examples and engagement data
  • Historical data on past campaigns (if publicly available)
  • For Public Political Figures: Explicitly stated political information

What Clients cannot see (unless Creator explicitly authorizes):

  • Private account information
  • Authenticated API data (unless Creator has synchronized accounts)
  • Non-public personal information
  • Message content between you and other users

10.2 With Service Providers

We engage trusted third-party service providers to help us operate our business:

Data Collection and Aggregation:

  • Third-party data aggregation and intelligence providers
  • Social media data collection services
  • Data enrichment and analytics providers

Infrastructure and Hosting:

  • Cloud hosting providers (e.g., AWS, Google Cloud)
  • Content Delivery Networks (CDNs)
  • Database services

Communications:

  • Email service providers (transactional and marketing emails)
  • Messaging integration providers (Unipile)

AI and Machine Learning:

  • AI service providers (OpenAI, Anthropic, Google Vertex AI, etc.)
  • Natural language processing services
  • Machine learning infrastructure providers

Analytics and Performance:

  • Website analytics (Google Analytics, Hotjar)
  • Performance monitoring tools
  • A/B testing platforms

Payment Processing:

  • Payment service providers (Gigapay)
  • Billing and invoicing systems

Business Operations:

  • Customer support platforms
  • CRM systems
  • Data backup and security services
  • Email marketing platforms

Professional Advisors:

  • Legal counsel, accountants, auditors
  • Insurance providers

Important: All service providers are bound by strict data processing agreements and are prohibited from using your Personal Data for their own purposes. For AI service providers specifically, we ensure they implement appropriate security measures and, where available, prohibit use of your data for their own model training.

10.3 Within Our Corporate Group

We may share data with affiliated companies within the Moojito SAS corporate group for:

  • Internal administration
  • Business development
  • Consolidated analytics
  • Shared services and infrastructure

10.4 For Legal Reasons

We may disclose your Personal Data when required to:

  • Comply with legal obligations
  • Respond to valid legal requests (subpoenas, court orders)
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Protect the rights, property, or safety of others
  • Prevent fraud or illegal activities
  • Investigate violations of our terms or policies

10.5 Business Transfers

In the event of a merger, acquisition, financing, sale of assets, bankruptcy, or similar corporate transaction, your Personal Data may be transferred to the acquiring entity. You will be notified of any such change via email and/or prominent notice on our Sites.

10.6 With Your Consent

We may share your Personal Data for other purposes with your explicit consent.

10.7 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally for:

  • Industry research and reports
  • Marketing and promotional purposes
  • Public presentations and case studies
  • Improving AI models and algorithms

11. INTERNATIONAL DATA TRANSFERS

11.1 Transfer Mechanisms

Favikon is based in France. Some of our service providers and partners are located outside the European Economic Area (EEA), Switzerland, and the United Kingdom.

When we transfer Personal Data internationally, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs):

  • Approved by the European Commission
  • Legally binding data protection obligations
  • Supplementary measures where necessary

Adequacy Decisions:

  • Countries deemed to have adequate data protection laws by the European Commission

Other Appropriate Safeguards:

  • Binding Corporate Rules
  • Approved certification mechanisms
  • Derogations for specific situations (with appropriate documentation)

11.2 Third Countries

Personal Data may be transferred to:

  • United States: Our hosting providers (AWS, Google Cloud), AI service providers (OpenAI, Anthropic), and some service providers
  • Other Countries: As necessary for service delivery

For US Transfers:We rely on Standard Contractual Clauses and additional safeguards including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Contractual restrictions on government access
  • Regular security assessments

11.3 AI Service Providers and International Transfers

Special Note on AI Providers:

When you use AI-powered features, your data (including message content) may be transferred to AI service providers located outside the EEA, primarily in the United States.

Safeguards for AI Data Transfers:

  • Standard Contractual Clauses with all AI providers
  • Encryption of data during transmission
  • Contractual prohibitions on unauthorized data use
  • Limited data retention by AI providers
  • Regular security and compliance audits

Your Control:

  • You can opt out of AI features to prevent these transfers
  • Disabling AI features does not affect core Platform functionality

11.4 Your Rights

You have the right to:

  • Obtain information about safeguards for international transfers
  • Receive a copy of the appropriate safeguards (upon request)
  • Object to specific transfers under certain circumstances

To request this information, contact us at privacy@favikon.com.

12. DATA RETENTION

12.1 General Retention Principle

We retain Personal Data only as long as necessary for the purposes described in this Privacy Policy or as required by law.

12.2 Specific Retention Periods

Client and User Account Data:

  • During the active subscription period
  • Plus 6 months after subscription termination (for customer service and legal compliance)
  • Financial records: 7-10 years (as required by tax and accounting laws)

Messages (DMs via Unipile Integration):

  • Active messages: Stored while your account is active and messages are relevant to ongoing conversations
  • Maximum retention: 3 years from date of message (automatically deleted after 3 years)
  • User-initiated deletion: You can delete individual messages or entire conversation threads at any time through your account settings
  • After account deletion: Messages are deleted within 30 days of account closure
  • Legal holds: Messages may be retained longer if required for legal proceedings or regulatory investigations

AI Processing Logs:

  • Message analysis logs: Retained for 90 days for troubleshooting and service improvement
  • AI model training data: Only aggregated, anonymized data retained indefinitely
  • Error logs: Retained for 1 year for debugging purposes

Creator Data:

  • Publicly available data: Retained while publicly available and relevant for our services
  • Registered Creator data: Until Creator requests deletion or deactivates account
  • After account deletion: 30 days (then permanently deleted, except where legal retention required)
  • Political information: Retained while individual maintains Public Political Figure status and information remains publicly stated; deleted immediately upon request

Website Visitor Data:

  • Analytics data: Aggregated and anonymized, retained indefinitely
  • Cookie data: As specified in cookie settings (typically 1-2 years)
  • Contact form submissions: 3 years

Marketing Communications:

  • Retained until you unsubscribe or request deletion
  • Suppression lists (to honor opt-outs): Retained indefinitely

AI Training Data:

  • Individual data: NOT used for AI training without explicit consent
  • Aggregated, anonymized data: May be retained indefinitely for model improvement

12.3 Deletion and Anonymization

When Personal Data is no longer needed:

  • We permanently delete it from our systems, or
  • We anonymize it so it can no longer identify you

Secure Deletion:

  • Data is deleted from production systems within 30 days
  • Backups containing deleted data are retained for up to 90 days for disaster recovery
  • After 90 days, deleted data is irrecoverably purged from all systems

12.4 Legal Holds

We may retain Personal Data longer when required for:

  • Legal proceedings
  • Regulatory investigations
  • Compliance with legal obligations
  • Establishment, exercise, or defense of legal claims

13. YOUR RIGHTS UNDER GDPR

If you are located in the EEA, Switzerland, or the UK, you have the following rights:

13.1 Right of Access (Article 15)

You have the right to:

  • Know if we process your Personal Data
  • Obtain a copy of your Personal Data
  • Receive information about how we process it
  • Understand what AI processing has been applied to your data

For Messages: You can export your message history at any time through your account settings.

13.2 Right to Rectification (Article 16)

You have the right to:

  • Correct inaccurate Personal Data
  • Complete incomplete Personal Data
  • Update political information if you are a Public Political Figure
  • Correct AI-generated scores if they are based on inaccurate data

13.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your Personal Data when:

  • It's no longer necessary for the purposes it was collected
  • You withdraw consent (where processing was based on consent)
  • You object to processing (and there are no overriding legitimate grounds)
  • Processing is unlawful
  • Legal obligation requires erasure
  • You no longer wish to have political information displayed (for Public Political Figures)

Special Note on Messages:

  • You can delete individual messages or entire conversations at any time
  • Deleted messages are permanently removed within 30 days
  • Message deletion also removes them from AI training datasets

Special Note on Political Data:

  • Public Political Figures can request immediate removal of political classification
  • We will remove political information within 7 business days of verified request

Limitations: We may not be able to delete your data when we need it for:

  • Compliance with legal obligations
  • Establishment, exercise, or defense of legal claims
  • Archiving purposes in the public interest

13.4 Right to Restriction of Processing (Article 18)

You have the right to request that we limit how we use your Personal Data when:

  • You contest the accuracy of the data
  • Processing is unlawful but you don't want erasure
  • We no longer need the data but you need it for legal claims
  • You've objected to processing (pending verification of legitimate grounds)

For AI Features: You can restrict AI processing while maintaining basic service access.

13.5 Right to Data Portability (Article 20)

You have the right to:

  • Receive your Personal Data in a structured, commonly used, machine-readable format (JSON, CSV, XML)
  • Transmit your data to another controller (where technically feasible)

What You Can Export:

  • Account information and settings
  • Message history (complete conversation threads)
  • Campaign data and performance metrics
  • Search history and preferences
  • AI feature settings and preferences

Applies when:

  • Processing is based on consent or contract
  • Processing is carried out by automated means

13.6 Right to Object (Article 21)

You have the right to object to processing when:

  • Processing is based on legitimate interests (including profiling)
  • Processing is for direct marketing purposes
  • Processing involves AI analysis that you do not agree with

For Creator Data: If you are a Creator and object to your publicly available data being indexed on our Platform, we will cease processing your data unless we demonstrate compelling legitimate grounds that override your interests.

For AI Features: You can object to AI processing of your messages and content. We will stop AI processing while maintaining basic service functionality.

For Political Data: Public Political Figures can object to display of political information at any time.

For Direct Marketing: You can opt out of marketing communications at any time, free of charge, by:

  • Clicking "unsubscribe" in any marketing email
  • Contacting us at privacy@favikon.com
  • Adjusting preferences in your account settings

13.7 Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects.

Our AI Features:

  • Authenticity Scores, topic classifications, and message analysis are based on algorithms but do NOT constitute automated decision-making under Article 22
  • These features provide information and insights, not binding decisions
  • All significant business decisions (Creator selection, contract negotiations, campaign management) are made by human users
  • You can request human review of any AI-generated output

If You Disagree:

You have the right to:

  • Obtain human intervention and review
  • Express your point of view
  • Contest AI-generated outputs
  • Request manual assessment

13.8 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to Withdraw Consent:

  • AI Features: Disable in account settings
  • Marketing: Click "unsubscribe" or contact privacy@favikon.com
  • Account Sync: Disconnect social media accounts in settings
  • Cookies: Adjust cookie preferences

13.9 Right to Lodge a Complaint

You have the right to lodge a complaint with your national Data Protection Authority if you believe your rights have been violated.

France (CNIL):

  • Website: https://www.cnil.fr
  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
  • Phone: +33 1 53 73 22 22

Other EU Countries: Contact your local Data Protection Authority

13.10 How to Exercise Your Rights

To exercise any of these rights:

Email us: privacy@favikon.com

Write to us:Moojito SASAttn: Data Protection Officer14 Avenue du Général de Gaulle94160 Saint-MandéFrance

For Creators - Quick Opt-Out:If you are a Creator and wish to opt out of having your profile indexed on our Platform: privacy@favikon.com with subject line "Creator Opt-Out Request"

What we need from you:

  • Proof of identity (to verify the request relates to your data)
  • Specific details of your request
  • For Creator data: your username/handle and platform name
  • For message data: date range and conversation details
  • For AI disputes: specific output or score being challenged

Our response:

  • We will acknowledge your request within 3 business days
  • We will respond substantively within 30 days (extendable by 2 months for complex requests)
  • We will inform you if we cannot fulfill your request and explain why
  • For urgent matters (e.g., political data removal), we prioritize faster response times

14. DATA SECURITY

14.1 Security Measures

We implement appropriate technical and organizational measures to protect Personal Data against:

  • Unauthorized access
  • Accidental loss
  • Destruction or damage
  • Unauthorized disclosure or alteration
  • AI-related security risks

Our security measures include:

Technical Measures:

  • Encryption of data in transit (TLS/SSL 1.3+) and at rest (AES-256)
  • Access controls and multi-factor authentication
  • Firewalls and intrusion detection systems
  • Regular security assessments and penetration testing
  • Secure API integrations
  • AI model security and access restrictions
  • Secure deletion and data sanitization procedures

Organizational Measures:

  • Employee training on data protection and security
  • Background checks for personnel with data access
  • Confidentiality agreements
  • Incident response and breach notification procedures
  • Regular security audits and compliance reviews
  • Data minimization and privacy by design principles
  • Restricted access to AI systems and models

For AI Processing:

  • Secure transmission of data to AI providers
  • Encryption of data processed by AI systems
  • Access logs and audit trails for AI processing
  • Regular security assessments of AI infrastructure
  • Isolation of AI processing environments

14.2 Third-Party Security

We require all service providers to implement appropriate security measures through contractual obligations (Data Processing Agreements).

For AI Providers Specifically:

  • SOC 2 Type II or equivalent certification required
  • Annual security audits
  • Encryption of data at rest and in transit
  • Access controls and authentication
  • Incident response capabilities
  • Compliance with GDPR and applicable regulations

14.3 Your Responsibility

Please help us protect your data by:

  • Using strong, unique passwords (minimum 12 characters)
  • Enabling two-factor authentication where available
  • Not sharing your login credentials
  • Logging out when finished using the Platform
  • Reporting suspicious activity immediately to security@favikon.com
  • Being cautious about what information you include in messages
  • Reviewing your AI feature settings and adjusting as needed

14.4 No Guarantee

While we strive to protect your Personal Data using industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

14.5 Data Breach Notification

In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms:

Our Obligations:

  • Notify the relevant supervisory authority (CNIL) within 72 hours of becoming aware
  • Notify affected individuals without undue delay
  • Provide information about the nature of the breach, likely consequences, and measures taken

What We Will Tell You:

  • Nature of the breach (what data was affected)
  • Likely consequences
  • Measures taken or proposed to address the breach
  • Contact point for more information
  • Steps you can take to protect yourself

For AI-Related Breaches:

If a breach involves AI systems or message data, we will specifically inform you:

  • Whether AI providers were involved
  • What message data was affected
  • Additional safeguards being implemented

15. THIRD-PARTY SERVICES

15.1 Third-Party Integrations

No Affiliation with Social Media Platforms:

Favikon is NOT affiliated with, endorsed by, or officially connected to any social media platform including Instagram, LinkedIn, TikTok, YouTube, Twitter/X, or Facebook. We are an independent third-party service.

  • Social media platform names and logos are used for identification purposes only
  • We collect publicly available data through independent third-party data providers
  • We do not represent or act on behalf of any social media platform
  • All trademarks belong to their respective owners

Our Platform integrates with third-party services:

Unipile (Messaging Integration):

  • Enables messaging via LinkedIn and Instagram
  • Unipile acts as a data processor for message transmission
  • Subject to Unipile's terms and privacy policy
  • Data processing described in Section 14.2 of our Terms of Service
  • Messages stored on Favikon servers for up to 3 years

Gigapay (Payment Processing):

  • Facilitates payments between Clients and Creators
  • Gigapay acts as an independent data controller for payment data
  • Subject to Gigapay's terms and privacy policy
  • Data processing described in Section 14.3 of our Terms of Service
  • Favikon does not access or store payment card information

Social Media Platforms:

  • We collect publicly available data from social media platforms
  • Subject to each platform's terms and privacy policies
  • We are not affiliated with or endorsed by these platforms
  • Platforms include: Instagram, TikTok, YouTube, LinkedIn, Twitter/X

AI Service Providers:

  • OpenAI, Anthropic, Google, and other AI providers
  • Process message content and other data for AI features
  • Subject to their respective terms and privacy policies
  • Bound by data processing agreements with Favikon
  • See Section 8.5 for details on AI provider data handling

15.2 Third-Party Websites

Our Sites may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before providing any personal information.

15.3 Client Responsibility

When Clients use our Platform to contact Creators or manage campaigns, they act as independent data controllers for their communications and are responsible for their own compliance with data protection laws.

Client Obligations:

  • Obtain necessary consents for their communications
  • Comply with GDPR and applicable privacy laws
  • Have a lawful basis for contacting Creators
  • Respond to data subject requests from Creators
  • Implement their own data protection measures

Favikon's Role:

  • Acts as data processor for message storage
  • Provides tools for compliance (export, deletion, etc.)
  • Does not control or determine the purpose of Client communications

15.4 Third-Party Data Providers

Data Collection Services:

Favikon relies on third-party data aggregation and intelligence providers to collect publicly available information from social media platforms.

Our Agreements:

We maintain data processing agreements with all third-party data providers that:

  • Define their role as Data Processors or independent Data Controllers
  • Require compliance with GDPR and applicable data protection laws
  • Establish security and confidentiality obligations
  • Limit data use to specified purposes
  • Prohibit unauthorized data sharing

Data Quality and Accuracy:

  • We select reputable data providers with strong compliance records
  • We take reasonable steps to verify data quality
  • We rely on providers' compliance with platform terms and data protection laws
  • We provide mechanisms for Creators to claim profiles and correct information
  • We remove or update data upon request where appropriate

Legal Compliance Representations:

Our third-party data providers represent that they:

  • Collect only publicly available information
  • Comply with applicable platform terms of service
  • Do not use hacking, unauthorized scraping, or other illegal methods
  • Implement appropriate technical and security measures
  • Respect data protection laws in their operations
  • Have appropriate licenses and agreements where required

Your Rights:

If you have questions or concerns about data collected through third-party providers:

  • Contact us at privacy@favikon.com
  • Request information about our data sources
  • Exercise your rights as described in Section 13
  • Request removal from our Platform

16. CHILDREN'S PRIVACY

16.1 Age Restrictions

Our Platform is not intended for children under 13 years of age. We do not knowingly collect Personal Data from children under 13.

For Creators: We only index profiles of individuals who:

  • Are at least 13 years old
  • Present themselves as professional content creators
  • Engage in commercial activities
  • Have public social media profiles indicating professional intent

16.2 Parental Consent

For Creators between ages 13-18, parental or guardian consent is required for:

  • Creating a Favikon account
  • Synchronizing social media accounts
  • Receiving marketing communications
  • Using AI-powered features

Parental Rights:

Parents and guardians of minor Creators have the right to:

  • Review the personal data collected about their child
  • Request deletion of their child's account
  • Withdraw consent at any time
  • Access and download their child's data

16.3 If We Learn of Collection from Children

If we become aware that we have collected Personal Data from a child under 13 without appropriate consent, we will:

  • Take immediate steps to delete that information
  • Terminate the associated account
  • Remove the profile from our Platform
  • Notify the parent/guardian if contact information is available

Response Time: Deletion completed within 48 hours of discovery

16.4 Parents and Guardians

If you believe we have collected information from a child under 13, please contact us immediately:

Email: privacy@favikon.com (Subject: "Child Privacy Concern")

Required Information:

  • Child's username/handle and platform
  • Your relationship to the child
  • Proof of guardianship (for account deletion requests)

17. CHANGES TO THIS PRIVACY POLICY

17.1 Right to Modify

We may update this Privacy Policy from time to time to reflect:

  • Changes in our business or services
  • New features (including AI capabilities)
  • Changes in technology
  • Legal or regulatory changes
  • Changes in industry best practices
  • Feedback from data protection authorities

17.2 Notification of Changes

When we make material changes to this Privacy Policy, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you by email (if you have an account)
  • Display a prominent notice on our Sites and Platform
  • For significant changes (e.g., new AI features, new data processing purposes), request your renewed consent where required by law

Material Changes Include:

  • New types of personal data collected
  • New purposes for processing
  • Significant changes to AI features
  • Changes to data retention periods
  • New international data transfers
  • Changes to legal basis for processing

17.3 Your Continued Use

Your continued use of our Services after the effective date of changes constitutes your acceptance of the revised Privacy Policy, except where law requires explicit consent.

For Material Changes Requiring Consent:

  • We will seek your explicit consent before applying changes
  • You will have the option to accept or decline
  • Declining may affect your ability to use certain features

17.4 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Version History:

We maintain a version history of this Privacy Policy. Previous versions are available upon request at privacy@favikon.com.

18. CONTACT US

18.1 Data Controller

The Data Controller of your Personal Data is:

Moojito SAS (operating as Favikon)

14 Avenue du Général de Gaulle

94160 Saint-Mandé

France

Registration Number: 840592448

18.2 Contact Methods

For Privacy Inquiries and Rights Requests:

Email: privacy@favikon.com

For General Inquiries:

Email: contact@favikon.com

For Legal Matters:

Email: legal@favikon.com

For Security Concerns:

Email: security@favikon.com

For AI-Related Questions:

Email: privacy@favikon.com (Subject: "AI Processing Inquiry")

By Post:

Moojito SAS

Attn: Data Protection Officer

14 Avenue du Général de Gaulle

94160 Saint-Mandé

France

18.3 Data Protection Officer

We have designated a Data Protection Officer (DPO):

Email: dpo@favikon.com

The DPO is responsible for:

  • Overseeing data protection strategy
  • Monitoring compliance with GDPR
  • Serving as contact point for data subjects and authorities
  • Conducting Data Protection Impact Assessments
  • Training and advising staff

18.4 Response Time

We aim to respond to all privacy inquiries within:

  • Acknowledgment: 3 business days
  • Substantive response: 30 days (may be extended by 2 months for complex requests)
  • Urgent matters (e.g., security breaches, political data removal): 48-72 hours

18.5 Supervisory Authority

If you have concerns about our data processing that we have not adequately addressed, you may contact:

Commission Nationale de l'Informatique et des Libertés (CNIL)

3 Place de Fontenoy

TSA 80715

75334 Paris Cedex 07

France

Website: https://www.cnil.fr

Phone: +33 1 53 73 22 22

Email: Contact form available on CNIL website

APPENDIX A: DATA PROCESSING SUMMARY

Categories of Personal Data Processed

Data SubjectCategories of DataPurpose of ProcessingLegal BasisRetention PeriodWebsite VisitorsDevice info, IP address, browsing behavior, cookie dataSite improvement, analytics, marketingConsent (cookies), Legitimate interestAggregated: indefinite; Individual: 2 yearsClients & UsersName, email, company, login credentials, usage dataAccount management, service provision, billingContract, Legitimate interestActive period + 6 monthsClients & Users (Messages)Direct messages sent/received via Unipile, message metadata, conversation threadsMessaging service provision, inbox display, AI-powered featuresContract (storage), Legitimate interest (AI analysis)Active: duration of account; Max: 3 years; User can delete anytimeClients & Users (AI Analysis)Message content, conversation context, usage patternsAI Inbox features, smart suggestions, workflow automationLegitimate interest, Consent (for optional features)Processing: real-time; Logs: 90 daysCreators (Public Data)Name, handle, bio, posts, engagement metrics, follower countsPlatform functionality, Creator discoveryLegitimate interestWhile publicly available and relevantCreators (Political Data)Explicitly stated political positions, party affiliations, official rolesEnabling political communications campaignsArticle 9(2)(e) - Manifestly made public + Legitimate interestWhile publicly stated; Deleted immediately upon requestCreators (Registered)Email, enhanced analytics, AI feature preferencesAccount management, enhanced featuresContract, ConsentUntil deletion requestedBusiness ContactsName, email, company, job titleBusiness development, partnershipsLegitimate interest3 yearsPayment DataName, address, bank details (via Gigapay)Payment processingContract, Legal obligationPer payment processor retention

Data Recipients

Service Providers:

  • Third-party data providers: Social media data aggregation services (various locations)
  • Cloud hosting: AWS, Google Cloud (USA, EU regions)
  • Analytics: Google Analytics, Hotjar (USA)
  • Email: Email service provider (USA/EU)
  • Payment: Gigapay (Sweden)
  • Messaging: Unipile (EU)
  • AI providers: OpenAI (USA), Anthropic (USA), Google Vertex AI (USA/EU) - for AI Inbox and analysis features only
  • Support: CRM/support tools
  • Professional advisors: Legal, accounting (France/EU)

Clients:

  • Creator profile data (public information, analytics, political data for Public Political Figures)

International Transfers

All transfers outside the EEA are protected by:

  • Standard Contractual Clauses (SCCs) - approved by European Commission
  • Adequacy decisions (where applicable)
  • Additional security measures:
    • Encryption in transit and at rest
    • Access controls
    • Contractual restrictions on data use
    • Regular security assessments

Primary Destinations:

  • United States (cloud hosting, AI providers, analytics)
  • Other EU countries (various service providers)

AI Processing Details

Data Used for AI:

  • Message content and metadata
  • Conversation context and history
  • Creator public content
  • Platform usage patterns

AI Providers:

  • OpenAI, Anthropic, Google (subject to data processing agreements)
  • Bound by contractual prohibitions on unauthorized use
  • Security and encryption requirements
  • Limited data retention

User Rights:

  • Opt out of AI features at any time
  • Request human review of AI outputs
  • Export data processed by AI
  • Delete messages to remove from AI systems

Thank you for trusting Favikon with your personal information. We are committed to protecting your privacy, being transparent about our data practices, and giving you control over your personal data.

Copyright © 2025 Moojito SAS (operating as Favikon). All rights reserved.