Privacy Policy

This Privacy Policy explains how World2Me.ai ("we", "us" or "our") collects, uses, shares and protects personal information when you visit world2me.euai.cc or use our Service, and the choices and rights you have. It should be read together with our Terms of Service.

1. Who is responsible for your information

World2Me.ai is responsible for the personal information described in this policy (in some laws, the "controller"). If you have any question about this policy or how we handle your information, contact us at ed.naberhuis@global-arena.at.

2. Information we collect

Information you give us

• Account details: your name, email address and password when you register. Your password is stored in a scrambled (hashed) form that nobody, including us, can read.
• Business and brand details: information you save in brand profiles, such as your business name, website, description, audience, tone of voice, key messages, colours and logo.
• Workflow inputs: the facts, text, spreadsheets and photographs you submit when you run a workflow.
• Communications: what you send us when you contact support or answer a survey.

Information created when you use the Service

• Your results: the text, images, videos and voiceovers the Service produces for you.
• Account activity: when you sign in, which workflows you run, the options you choose, and the credits you use, buy and receive.
• Technical information: your IP address, browser type, device type, operating system, and the dates and times of your visits, which our systems record to keep the Service working and secure.

Information from payment providers

When you buy a plan or credits, our payment provider tells us what you bought, when, the amount, and the status of your subscription. Your full card or bank details are entered with the payment provider and never reach our servers. Where the payment provider acts as a Merchant of Record or reseller, it is responsible for the personal information it collects to complete the order, under its own privacy policy.

3. How we use your information

We use your information to:

• create and manage your account, and keep you signed in;
• run the workflows you ask for and deliver your results;
• apply your brand profiles to your results;
• process payments, manage subscriptions, credits, vouchers and refunds, and keep accounting records;
• send you service messages, such as receipts, renewal reminders, security alerts and changes to our terms;
• respond to your questions and support requests;
• keep the Service secure, prevent fraud and abuse, and enforce our terms;
• understand how the Service is used so we can fix problems and improve it;
• comply with our legal obligations.

If you have agreed to receive news and offers from us, we may also email you about them. You can unsubscribe at any time using the link in any such email or from your account.

We do not sell your personal information, and we do not use the content of your workflows to advertise to you.

4. Our legal bases

Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Contract: to provide the Service you signed up for, including running workflows and taking payment.
• Legitimate interests: to keep the Service secure, prevent abuse, and understand and improve the Service, where those interests are not overridden by your rights.
• Legal obligation: to keep financial records and respond to lawful requests.
• Consent: for marketing emails and any optional cookies. You can withdraw consent at any time.

5. AI processing

To produce your results, the inputs you submit, together with the brand profile you choose, are sent to third-party AI model providers, such as OpenAI for text, images and voiceovers and xAI for video. These providers process the data on our behalf to return your results.

We send only what is needed to run the workflow you asked for. We do not use your inputs or results to train our own AI models. Each provider handles the data under its own terms and privacy commitments for business customers.

6. Who we share information with

We share personal information only as needed to run the Service, with:

• AI model providers that produce your results, as described above;
• hosting, storage and email providers that run our infrastructure and send our emails;
• payment providers that process payments, manage subscriptions and, where they act as Merchant of Record, sell to you directly;
• professional advisers, such as accountants and lawyers, where needed;
• authorities, where the law requires it, or to protect the rights, property or safety of our users, the public or us;
• a buyer or successor, if our business is sold or reorganised, under the same protections.

These parties may only use your information to provide their services to us, and must protect it.

7. International transfers

Our providers may store or process information in countries other than the one you live in, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses.

8. How long we keep information

• Images, videos and voiceovers, and photographs you upload for them, are deleted automatically 48 hours after they are made.
• Spreadsheets uploaded for batch runs are deleted once they have been read, and no later than 24 hours after upload.
• Account information, brand profiles and text results are kept while your account is open. When you close your account, they are deleted.
• Payment and tax records are kept for as long as accounting and tax laws require, which is often six to ten years.
• Security and technical logs are kept for a limited period and then deleted.

9. How we protect information

Information travelling between your device and our servers is encrypted using TLS. Passwords are hashed, sensitive settings such as API keys are encrypted, and access to production systems is limited to the people who need it. No system is completely secure, but we take reasonable technical and organisational measures to protect your information, and we will tell you and the relevant authorities about a breach where the law requires it.

10. Cookies

We use cookies that are strictly necessary to keep you signed in, remember your choices and protect the Service against attacks. We do not use advertising cookies. If we ever use optional cookies, such as for analytics, we will ask for your consent first where the law requires it.

11. Your rights

Depending on where you live, including under the GDPR, the UK GDPR and the California Consumer Privacy Act (CCPA), you may have the right to:

• know what personal information we hold about you and receive a copy of it;
• have inaccurate information corrected;
• have your information deleted;
• receive your information in a portable format;
• object to, or ask us to restrict, certain processing;
• withdraw consent you have given, at any time;
• not be treated differently for exercising your rights.

You can update your details and delete your account yourself from your account settings. To exercise any other right, email ed.naberhuis@global-arena.at. We may need to confirm your identity before acting on a request, and we will respond within the time the law allows. You also have the right to complain to your local data protection authority.

12. Children

The Service is intended for businesses and adults. It is not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If a change materially affects how we use your personal information, we will tell you by email or through the Service before it takes effect.

14. Contact us

For any question or request about your privacy, contact us at ed.naberhuis@global-arena.at.