Privacy Policy
This policy explains what personal data Encore collects, why, and what your rights are. The data controller is Live Let Live, CVR DK38400169, Munksøgård 68, 4000 Roskilde, Denmark, support@encoreposts.com.
1. Data we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account data: name, email, password (hashed), role, language | You, when an account is created | To run your account and secure it |
| Brand data: company name, website, colours, logo, public facts and text read from the website | Public websites you add | To generate posts for that brand |
| Generated content: images, captions, decisions (approved, changes, rejected) and reasons | Created in the service | To deliver the service and improve later drafts for the same brand |
| Approval page visits: time of first view and of each decision | Clients using an approval link | To show you what your client has seen and decided |
| Publishing data: which accounts a post is scheduled to, dates and status | The publishing service | To publish approved posts |
| Contact requests: name, email, company, website, message | The form on this website | To answer you |
| Technical logs: IP address, browser, time of requests | Automatically | Security and troubleshooting |
| Billing data: invoices, payment status | Our payment partner | To bill you. Card details never reach our servers |
2. Legal basis
We process account, brand, content and billing data to perform our contract with you (GDPR art. 6(1)(b)). We process technical logs and security data in our legitimate interest in keeping the service safe (art. 6(1)(f)). We answer contact requests in our legitimate interest in responding to you. Where you add data about your clients, you are the controller for that data and we act as your processor under a data processing agreement.
3. Sub-processors
We use a small number of providers to run Encore. Each is bound by a data processing agreement, and transfers outside the EU are covered by the EU Standard Contractual Clauses.
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the application and stored data | Germany (EU) |
| Paddle.com Market Ltd | Payments, invoicing, tax (Merchant of Record) | United Kingdom |
| Anthropic PBC | Text generation and automated quality checks | United States |
| Kie.ai | Image generation | United States |
| OneUp (OneUp Technologies) | Scheduling and publishing to connected social accounts | United States |
| Namecheap, Inc. | Domain and email forwarding | United States |
Brand data sent to generation providers is the public information read from a website and the drafts themselves; we do not send account passwords, billing data or social account credentials to these providers. Social accounts are connected directly with the publishing service by the account owner; Encore never sees or stores social network passwords.
4. Retention
- Account data: while your account is active, then deleted within 90 days of closure.
- Brand data and generated content: while the brand exists in your account; deleted when you delete the brand or close the account, and at the latest 90 days after closure.
- Approval page data: as long as the brand exists.
- Technical logs: 90 days.
- Billing records: 5 years, as required by the Danish Bookkeeping Act.
- Contact requests: 12 months.
5. Your rights
You can ask for access to the personal data we hold about you, have it corrected or deleted, restrict or object to processing, and receive it in a portable format. Write to support@encoreposts.com; we answer within one month. You can also complain to the Danish Data Protection Agency (Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk).
6. Cookies
This website sets no tracking or advertising cookies. The application uses strictly necessary cookies only: a session cookie to keep you logged in and a cookie remembering your language. Approval pages set a language cookie only. We do not use analytics that identify you.
7. Security
All traffic is encrypted (HTTPS). Passwords are stored hashed with a per-user salt. Approval links are long random tokens that give access only to one brand's drafts. Data is stored in the EU with daily backups. Access to production systems is limited to the people who operate the service.
8. Changes
If we change this policy in a way that matters to you, we tell you by email or in the app before the change takes effect.
9. Contact
Live Let Live · CVR DK38400169 · Munksøgård 68, 4000 Roskilde, Denmark · support@encoreposts.com