This Privacy Policy explains what information Populica collects, why, and what choices you have. Populica is operated by Cantueso Corp / Cipion Marketing.
| Data | Why we collect it |
|---|---|
| Account email and password (hashed) | To create and secure your account |
| Company name, website, sector | To generate audience research and campaign content for that company |
| Campaigns, personas and creative you generate or edit | To save and let you return to your work |
| Billing information | Handled entirely by Stripe, our payment processor — we do not store your card number |
| Usage data (pages visited, features used, approximate location from IP) | Via Google Analytics, to understand how the Service is used |
Company and sector information you enter is sent to third-party AI providers (primarily Google's Gemini models, with Replicate and Atlas Cloud as fallback providers) to generate personas, strategy and creative. These providers process the request but Populica does not use your data to train its own models. We do not sell your personal information to third parties.
Populica runs on its own self-hosted infrastructure (not a third-party backend-as-a-service). Account, company and campaign data is stored in a MySQL database we operate directly. Generated images are stored on the same server. Billing records live in Stripe's systems, governed by Stripe's privacy policy.
We use a session cookie required for you to stay logged in, and Google Analytics to understand aggregate usage. Google Analytics may set its own cookies; see Google's privacy policy for details.
We send account-related email (welcome message, password reset) from no-reply@populica.com. We do not send marketing email you did not sign up for, and every account-related email includes a way to reach us if you did not expect it.
You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data by emailing hello@populica.com. We will respond within 30 days. If you are in the EU/EEA or UK, you have rights under the GDPR to access, correct, delete, or port your data, and to object to certain processing; if you are a California resident, you have rights under the CCPA to know what personal information we hold and to request its deletion.
We keep account and campaign data for as long as your account is active. If you delete your account, we delete your personal data within 30 days except where we are required to keep billing records for tax or legal purposes.
Populica is a business tool and is not directed to, or knowingly used by, anyone under 18.
We may update this policy from time to time; the "Last updated" date above will reflect the most recent change.
We share the minimum data necessary with these providers to run the Service:
Questions about this policy or a data request: hello@populica.com.
← Back to Populica