Privacy Policy

Last updated: March 6, 2026

1. Data Controller

MB Rebi, company code 307574545 ("we", "us", or "the Company"), is the data controller responsible for your personal data. Our service is available at content.rebi.lt. If you have any questions about this Privacy Policy or our data practices, you can contact us at renatas@rebi.lt.

2. What Data We Collect

2.1 Account Data

When you create an account or are invited to an organization, we collect:

  • Name and email address
  • Password (stored in hashed form)
  • Organization membership and role

2.2 Usage Data

When you use the Service, we automatically collect:

  • IP address and browser type
  • Pages visited, features used, and timestamps
  • Content generation history and job logs
  • Brand and creative assets you create within the platform

2.3 Cookies and Similar Technologies

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the Service is used. For more details, please see our Cookie Policy.

2.4 Third-Party Data

If you connect third-party accounts (such as Facebook, WordPress, or Google Search Console), we receive and store access tokens and related data necessary to provide the integration features you requested. We do not access more data than required for the functionality you use.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To provide, maintain, and improve the Service
  • To authenticate your identity and manage your account
  • To process content generation requests using AI services
  • To publish content to connected platforms on your behalf
  • To send service-related communications (e.g., job completion notifications)
  • To monitor and prevent abuse or unauthorized use
  • To comply with legal obligations

4. Legal Basis for Processing

We process your data based on the following legal grounds under the GDPR:

  • Contract performance — processing necessary to provide the Service you signed up for
  • Legitimate interests — analytics, security, and service improvement
  • Consent — where required, such as for optional analytics cookies
  • Legal obligation — compliance with applicable laws

5. Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following categories of recipients:

  • AI service providers (e.g., OpenAI) — content you submit for generation is sent to AI providers for processing
  • Hosting and infrastructure providers — to store and serve the application
  • Connected platforms (WordPress, Facebook, Google) — only when you explicitly connect and use these integrations
  • Legal authorities — if required by law or to protect our rights

6. Data Retention

We retain your account data for as long as your account is active. Usage logs and generation history are retained for up to 24 months. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Backups containing your data may persist for up to 90 days before being overwritten.

7. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your personal data
  • Restriction — request that we limit how we process your data
  • Data portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at renatas@rebi.lt. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit (TLS), hashed password storage, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed outside the European Economic Area (EEA) when using third-party AI services. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact and Complaints

If you have concerns about our data practices, please contact us at renatas@rebi.lt. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).