Privacy Policy

Black Cow AI is the controller of the personal data you provide when you use our website, waitlist, and application. Our registered business details are:

• Trading name: Black Cow AI
• Legal entity: [Company legal name and registered address to be inserted by the app owner]
• Privacy contact: privacy@blackcowai.com

We collect only the data we need to provide and improve Black Cow AI:

• Waitlist data: name, business name, email, phone, industry, and the marketing problem you describe.
• Account data: name, email address, and authentication credentials managed by our auth provider.
• Business information: website, location, industry, social links, logo, brand colours, and work photos you upload.
• Generated content: AI-generated campaigns, competitor reports, creative concepts, optimization rewrites, and chat history.
• Usage data: error reports and app activity required to keep the service reliable.

We do not collect sensitive personal data such as health information, political opinions, or biometric data.

We use your data to:

• Provide Black Cow AI features, including campaign generation, competitor analysis, creative studio, Optimizer, and the AI Director.
• Authenticate you and keep your account secure.
• Store, retrieve, and let you edit the work you create in the app.
• Communicate with you about waitlist access, product updates, and support.
• Improve the service and fix errors.

We never sell your personal data. We do not use your data to train third-party AI models without your explicit consent.

Under the UK/GDPR framework, we process your data on the following legal bases:

• Contract: to provide the services you signed up for.
• Consent: where you explicitly opt in, for example when joining the waitlist or connecting a Meta account.
• Legitimate interests: to keep the app secure, prevent fraud, and improve the service.
• Legal obligation: where required by law or regulation.

We share data only with trusted service providers who process it on our behalf under appropriate contractual safeguards. These are the current subprocessors:

• Lovable Cloud — hosting, backend infrastructure, and the AI Gateway used for generation features.
• Supabase — authentication, database, and file storage.
• Meta Platforms — only when you choose to connect a Facebook or Meta account for advertising integration.

We may also disclose data if required by law, court order, or to protect our rights and users' safety.

We use cookies and similar technologies for the following purposes:

• Essential: to keep you signed in and maintain your session. These cannot be disabled without breaking sign-in.
• Analytics: where enabled, to understand how the app is used and to improve it. You can manage these through your browser settings.

We do not use advertising cookies or third-party trackers by default.

We keep your data for as long as necessary for the purposes described:

• Waitlist entries: until you withdraw your consent or the waitlist is no longer active.
• Account data: until you delete your account or ask us to remove it.
• Generated campaigns, reports, and concepts: 12 months after your last activity, or until you delete them.
• Uploaded images: until you delete them or delete your account.
• Backups and logs: kept for up to 90 days for security and reliability.

Under GDPR and similar laws, you have rights over your personal data. You can:

• Access the data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@blackcowai.com. We will respond within one month.

Your data is processed by Lovable Cloud and Supabase, which may use infrastructure in the UK, EU, US, and other regions. Where data is transferred outside the UK/EEA, we rely on approved safeguards such as Standard Contractual Clauses and adequacy decisions to ensure your data remains protected.

We protect your data using industry-standard measures, including encryption in transit (TLS), encryption at rest, row-level security in the database, and strict access controls. OAuth tokens for connected services (such as Meta) are encrypted before storage.

No service is completely secure. If we discover a breach that affects your personal data, we will notify you and the relevant authorities as required by law.

If you choose to connect a Meta account, you authorise Black Cow AI to access the information you grant through Meta's authorisation dialog. This may include your public profile (name, email, profile ID) and, where permitted, your advertising account details.

You can revoke this connection at any time in your Black Cow AI Settings or through Meta's app settings. We only use Meta data to deliver the advertising features you request; we do not use it to profile you for unrelated advertising.

Black Cow AI is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy as our service evolves. We will post the new version on this page with a revised "Last updated" date. Significant changes will be communicated by email or in-app notice.

For privacy questions, data requests, or to exercise your rights, please email us at: