This policy explains what personal data we collect through the platform mlmpsychology.com, why we collect it, how we use it, and what rights you have. We comply with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) for users in the European Union.
The controller who decides why and how your data is processed is:
For any question about your data or to exercise your rights, you can write to us at the address indicated above.
Your email address and password (stored in encrypted form, not in plain text). We do not have access to your password.
Payments are processed by Stripe. We do not store your card details. We keep only the technical identifiers necessary to manage the subscription (for example, the Stripe customer and subscription identifiers) and possibly the billing data managed by Stripe.
Your plan, the number of remaining scripts, the date of the last allocation, a log of generations (when and how they were generated), and the scripts generated for you.
The information you fill in the form: about you (gender, approximate age, approach style, experience), about the product, and about the person you intend to contact (see section 4).
If you write to us through the help form, we keep the message, your email address, and your plan, so that we can reply to you.
As with most websites, our servers and providers may process technical data such as IP address, browser and device type, necessary for operation and security (including the loading of web fonts).
We process your data for the following purposes, on the following legal bases (Article 6 GDPR):
| Purpose | Legal basis |
|---|---|
| Creation and management of the account, authentication | Performance of the contract (Art. 6(1)(b)) |
| Provision of the service — generating scripts from the data entered | Performance of the contract (Art. 6(1)(b)) |
| Payment processing and issuing of documents | Performance of the contract + legal obligation (Art. 6(1)(b) and (c)) |
| Support and responding to requests | Performance of the contract / legitimate interest (Art. 6(1)(b)/(f)) |
| Security, prevention of fraud and abuse | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations (accounting, tax) | Legal obligation (Art. 6(1)(c)) |
We do not use your data for email marketing without your consent. We use your email for the account, plan activation, and payment documents.
The available fields are limited to general context elements (for example, an optional name, an approximate age, the type of relationship, a general professional or family context) — used solely to generate your script. We do not attempt, nor are we able, to identify that person on the basis of this information.
Your responsibility as a user. You are the one who enters this information, based on your direct relationship with the person. You agree:
Further details on your responsibility are in the Terms and Conditions.
We do not sell your data. We share it only with service providers ("processors") who help us operate the platform, exclusively for the purposes indicated above:
| Provider | Role |
|---|---|
| Supabase | Authentication and database hosting |
| Railway | Application hosting (server) |
| Stripe | Payment processing and billing |
| MindStudio | Generation of scripts through artificial intelligence |
| Anthropic | Artificial intelligence model used for generation |
| Resend | Sending of support emails (if active) |
| Google Fonts | Display of web fonts (may process the IP address) |
To generate a script, the content you enter into the form is transmitted to the artificial intelligence provider (MindStudio and/or Anthropic) solely to produce the requested response. We may also disclose data where required by law or to protect our rights.
The controller and some of our providers are established in the United States of America or process data outside the European Economic Area. This means that your data may be transferred and processed outside the EU/EEA.
For such transfers we rely, as applicable, on the mechanisms recognized by the GDPR — for example the European Commission's Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework, where the provider is certified. You may request further information from us about the applicable safeguards.
We adopt reasonable technical and organizational measures: encrypted connections (HTTPS), passwords stored in encrypted form, database access controls (including row-level security rules), and limiting access to the processors. No system is 100% secure, but we are continuously committed to protecting your data.
As a data subject, you have the following rights under the GDPR:
You can exercise your rights by writing to us at contact@octavianalupoaie.biz. We respond within the time limits provided by law. You can delete your account by contacting us.
We do not use advertising or tracking cookies for marketing purposes. We use local storage in your browser (localStorage / sessionStorage) solely for the operation of the application — for example to maintain your session after login and to remember the fields you have filled in, so that you do not have to re-enter them each time.
This data stays in your browser and you can delete it at any time from your browser settings. Details in the Cookie Policy.
The Service is intended exclusively for people over 18 years of age. We do not knowingly collect data of minors. If you become aware that a minor has provided us with data, contact us for its deletion.
The scripts are generated automatically, with the help of artificial intelligence models, based on the information you enter. This process produces indicative text and does not make decisions with legal effects on any person. We do not use your data to train our own models.
We may update this policy. We will indicate the date of the last update at the top and, for significant changes, we will make reasonable efforts to inform you. By continuing to use the service after an update, you acknowledge the new version.
For any question regarding your data: contact@octavianalupoaie.biz.
If you are in the European Union and believe that your rights have been violated, you have the right to lodge a complaint with your competent local data protection authority.