Privacy Policy

Charlie is an AI marketing copilot available at v2.charliesystem.com (the “Service”). It helps create marketing content, ad copy, campaign plans, and analytics dashboards.

The Service is operated by, and the data controller is, CAP-NET s.r.o., Company ID (IČO) 25466640, registered at Budějovická 234, 381 01 Český Krumlov, Czech Republic, represented by its managing director Milan Litvan (“we” or “the operator”).

Privacy contact: privacy@charliesystem.com.

Account data

• Email address, name, and profile details you provide at sign-up.
• Team/organization membership and assigned roles.
• Authentication and session data (strictly necessary cookies, see section 9).

Payment data

Payments and subscriptions are processed by our payment provider (Stripe). We do not store card numbers - we only have access to subscription status and billing metadata.

Content you create

Briefs, inputs, generated content, client information, and knowledge base data that you enter into or create within the Service.

Data from connected Google services

If you connect your Google account, we process the data described in section 3.

Connecting a Google account is optional and always happens through Google's official OAuth consent screen. We request only the following scopes, and only for the services you choose to connect:

• Google Analytics (analytics.readonly) - read GA4 reporting data for dashboards and AI analysis.
• Google Search Console (webmasters.readonly) - read search performance data for SEO reports.
• Google Tag Manager (tagmanager.readonly) - read container configuration.
• Google Business Profile (business.manage) - manage business profiles at your request.
• Google Sheets (spreadsheets.readonly) - read spreadsheets you connect.
• Google Ads (adwords) - read and manage advertising campaign data.
• Basic account identity (userinfo.email) - to show which account is connected.

We securely store a refresh token so we can renew access without you signing in repeatedly. We never see your Google account password.

We use data obtained from Google APIs solely to provide the features you request within the Service - primarily to display reports and dashboards and to generate AI analysis and recommendations over your data.

We do not use Google API data for advertising, we do not sell it, and we do not use it to train generalized artificial intelligence models.

Charlie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell personal data. To operate the Service we rely on vetted processors, sharing only the minimum data required:

• Hosting and database providers (running the app and storing data).
• AI model providers (e.g. Anthropic) - for content generation and AI analysis; data is shared only to deliver the feature you requested.
• Stripe - payment processing.
• Email provider - sending transactional emails (e.g. notifications, account verification).

Google API data is shared with processors only to the extent necessary to deliver the feature you requested, and in accordance with the Limited Use requirements stated above.

We retain data for the duration of your account and as long as necessary to meet legal obligations.

You can disconnect Google at any time in the Integrations section of the relevant client (“Disconnect”). This deletes the stored token and stops our access to your Google data. You can also revoke access at any time directly in your Google account at myaccount.google.com/permissions.

To request deletion of your account and related data, contact privacy@charliesystem.com.

You have the right to access, rectify, erase, restrict, and port your data, and the right to object. To exercise these rights, contact privacy@charliesystem.com. You also have the right to lodge a complaint with the Czech Data Protection Authority (uoou.gov.cz).

Data is transmitted encrypted (HTTPS), database access is governed at the row level (Row Level Security) and restricted to authorized users. Tokens for connected services are stored securely.

We use only strictly necessary cookies - authentication/session cookies and a cookie to remember your language. We do not use advertising cookies.

We may update this policy. We will notify you of material changes, and the current version is always available on this page with its effective date.