GDPR Compliance at Ultimate Carousel

1. Our Commitment to GDPR

At Ultimate Carousel, we take your privacy seriously. As a European-based company, we are fully committed to complying with the General Data Protection Regulation (GDPR). We ensure transparency in how your data is collected, used, and protected, and we give you full control over your personal information.

2. What Personal Data Do We Collect?

We collect only the data necessary to provide and improve our services:

  • Email address – to identify your account and communicate with you.
  • Prompts – the text you submit to generate carousels.
  • User preferences – such as tone, style, and display settings, to personalize your experience.

3. Why We Process Your Data

Your personal data is processed for the following purposes:

  • Personalization of your content creation experience.
  • Generation of LinkedIn carousels using AI.
  • Analytics and performance statistics to improve the product and understand usage patterns.

We do not use your data for advertising purposes or sell it to third parties.

4. Legal Basis for Processing

Our data processing activities are based on:

  • Your consent – for storing prompts and preferences.
  • Contractual necessity – to provide access to our app and core features.
  • Legitimate interest – to analyze and improve service performance.

You may withdraw your consent at any time.

5. Subprocessors and Data Transfers Outside the EU

Your data is primarily hosted in Europe:

  • Vercel (hosting infrastructure)
  • Supabase (database)

Some processing is performed via OpenAI, whose servers are located outside the European Economic Area. We ensure such transfers are compliant with GDPR through standard contractual clauses (SCCs).

6. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Access – receive a copy of your personal data.
  • Rectification – request corrections to inaccurate data.
  • Erasure (Right to be Forgotten) – ask us to delete your data.
  • Portability – request your data in a machine-readable format.
  • Objection – object to certain uses of your data.

7. How to Exercise Your Rights

You can send your request at any time to our Data Protection Officer (DPO). We will respond within 30 days.

Please include:

  • The email linked to your account
  • The nature of your request
  • Proof of identity (if needed for verification)

8. Contact Our DPO

If you have any questions or wish to exercise your rights, please contact:

DPO Contact:
contact@ultimate-carousel.com