This policy explains how As. Institutul de Cercetare al Tehnologiilor Avansate ABQ (a non-profit association registered in Romania, CUI RO51587423; registered office Spl. Peneș Curcanu, Nr. 4-5, 300124 Timișoara, Romania) ("we") handles personal data when you use FACE Studio. We act as data controller for account data, and as data processor for the content you manage through the Service.
What we collect
- Account data: name, email, and identity details from your sign-in provider (e.g. GitHub).
- Organization data: memberships, roles, and access scopes.
- Connection credentials: OAuth tokens for your Git provider, stored encrypted at rest.
- Usage and log data: technical logs needed to operate and secure the Service.
- Billing data: handled by Stripe. We do not store your card details.
Your knowledge-base content
Your content stays in your Git repositories. We do not store a copy. It is processed only transiently to render, search, or write the changes you initiate.
AI features
When you use the AI assistant, your prompts and the knowledge-base context you select are sent to the AI provider you configure, using your own API key. That provider's terms and privacy policy apply to that processing. We do not use your content to train AI models.
Sub-processors
We rely on: your Git provider (e.g. GitHub), Supabase (database and auth), Stripe (payments), Vercel (hosting), and the AI provider(s) you configure. A current list is available on request.
How we use data
To provide and secure the Service, process payments, communicate with you, and meet legal obligations. We do not sell personal data.
Security
Access is isolated per tenant (row-level security), credentials are encrypted at rest, and access is restricted to what is needed to operate the Service.
Retention
We retain account and organization data for as long as your account is active, then delete or anonymize it within 90 days, except where law requires longer.
Your rights
Subject to applicable law (including the GDPR), you may request access, correction, deletion, or export of your personal data, and may object to or restrict certain processing. Contact us to exercise these rights.
International transfers
Where data is processed outside your region, we use appropriate safeguards (e.g. Standard Contractual Clauses).
Changes and contact
We may update this policy; material changes will be notified. Questions or requests: info@abq.institute · abq.institute/contact.