Version v3 · Publicerad 26 september 2026
Last updated: 26 September 2026
This Privacy Policy explains how we collect, use, share, and protect personal data when you use Adable (the "Service"). It is written to comply with the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act.
The data controller is:
Encyon AB, org.nr 559188-6824 Dockan Skogsgläntan 6, 614 92 Söderköping, Sweden Email: robin@encyon.com
We have not appointed a Data Protection Officer. Questions about privacy go to the email address above.
We collect the following categories of personal data:
Account data: name, email, password hash (or OAuth identifier), profile picture, role, language preference, and the workspace / company you belong to.
Authentication data: login timestamps, IP address, user agent, and OAuth tokens for connected platforms (Google, Microsoft, LinkedIn), stored encrypted and used only to keep you signed in or to act on your behalf.
Billing data: billing address, VAT ID, plan, subscription status, invoices, and the last four digits / brand of your card. Full card numbers are processed and stored by Stripe, not by us.
Content data: anything you upload or generate: brand profiles, scripts, prompts, reference images, voice samples, face references, generated videos, and metadata (titles, captions, schedules).
Usage data: pages visited, features used, video generations triggered, errors and crash reports, performance metrics, approximate location derived from IP.
Connected-platform data: content, post IDs, analytics, and audience metrics returned by TikTok, Instagram, Meta, YouTube, and similar services that you connect. How we handle data from Google and YouTube is described in section 6.
Communications: emails, support tickets, and survey responses you send us.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide and operate the Service (account, authentication, content generation, publishing) | Contract (Art. 6(1)(b)) |
| Process payments and prevent fraud | Contract + legal obligation (Art. 6(1)(b), (c)) |
| Send service-related notices (security, billing, changes to the terms) | Contract + legitimate interest |
| Improve the Service, debug issues, build aggregated analytics | Legitimate interest (Art. 6(1)(f)) |
| Send marketing emails (only where applicable) | Consent (Art. 6(1)(a)), withdrawable at any time |
| Comply with tax, accounting, anti-money-laundering, or court orders | Legal obligation (Art. 6(1)(c)) |
| Defend or establish legal claims | Legitimate interest |
We do not use your Customer Content (prompts, scripts, brand material, generated videos) to train our own AI models, and we do not sell your personal data.
To generate videos and assets, we send the prompts and reference material you submit to third-party AI model providers (e.g. Google VEO, OpenAI Sora, Runway, Kling, Seedance). Each provider acts as our processor or sub-processor and is contractually required to use your data only to fulfil your request.
Provider behaviour with respect to retention and training-on-input differs. Where a provider gives us an option, we configure the integration to opt out of using your inputs to train their models. Data we receive from Google and YouTube (section 6) is never sent to AI providers for training.
We share personal data only with:
A current list of sub-processors is available on request at robin@encyon.com. We will give notice before adding a new sub-processor in a way that materially changes our processing.
When you sign in with Google or connect a YouTube channel, Adable asks Google for the following permissions:
openid, email, profile): to sign you in and to show which Google account is connected.youtube.readonly): to read your channel's ID and name, so you can see which channel is connected, and the statistics (views, likes, comments) of the videos you published through Adable, so you can follow how they perform.youtube.upload): to upload the videos you create in Adable to your channel, with the title, description, tags and privacy setting you choose. We upload only when you choose to publish or schedule a video.How we handle this data:
Adable's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Adable uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service. Google's own handling of your data is described in the Google Privacy Policy.
Some sub-processors are located outside the European Economic Area (EEA), e.g. in the United States. When we transfer personal data outside the EEA, we rely on:
You can request a copy of the relevant safeguards at robin@encyon.com.
| Data | Retention |
|---|---|
| Account data | While your account is active, then up to 24 months after closure |
| Generated videos and Customer Content | While your account is active, then up to 90 days after closure (you can delete earlier) |
| Billing and invoice data | 7 years (Swedish bookkeeping law) |
| OAuth tokens for connected platforms | Until you disconnect the platform or delete the account |
| Server logs and security events | Up to 12 months |
| Backups | Up to 35 days after deletion from production |
We may keep limited data longer where required by law or to defend a legal claim.
Under GDPR you have the right to:
To exercise these rights, email us at robin@encyon.com. We will respond within one month.
We use:
You can manage cookies in your browser, but disabling strictly necessary cookies will break sign-in.
We use industry-standard measures to protect personal data, including encryption in transit (TLS) and at rest, role-based access controls, audit logs, and AES-256 encryption for sensitive credentials such as OAuth tokens. No system is 100% secure; we will notify you and the relevant supervisory authority of a personal-data breach in line with Art. 33 and 34 GDPR.
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.
We may update this Policy from time to time. If a change is material, we will notify you by email or in-app banner before it takes effect. The "Last updated" date at the top of this document indicates when it was last revised.
Encyon AB Dockan Skogsgläntan 6 614 92 Söderköping, Sweden Email: robin@encyon.com