Privacy policy

1. The short version

• We use your data to make Airedes work: saving your work, generating content with AI, charging and running the automations you set up.
• We do not sell your data, we do not use it for advertising and we do not hand it to data brokers.
• The Path ranking is optional: you are out of it until you switch it on.
• You can delete your account and all its content yourself, from Settings → Delete account.

2. Data controller

Leadsy Group LLC (EIN 39-5161180), with registered address at 6308 Raleigh St APT 314, Orlando, FL 32835-5605, United States, is the controller of the data collected through Airedes (app.airedes.site and the iPhone app). Privacy contact: eduardo@leadsygroup.com.

3. What data we handle

Your account

• Identifier, email, name and profile picture of the account you sign in with: Google, Apple (in the iPhone app) or email and password. Sign-in is handled by Firebase Authentication; we never see your password.
• Sign-up and last access dates, your plan, your token balance and your preferences (language, theme, consent to use the AI).

Your brand identity and what you create

• What you tell us in Identity —your business, audience, voice, goal and story—, which we use so the AI writes like you.
• Your canvases, flows, hooks, scripts, audits, paths, Studio folders and the conversations with the AI inside them.
• Your answers to the Path to success questionnaire and your daily progress.
• Your gems: the notes you train them with and their cover. Of the files you attach —documents or images, including from your camera roll or camera— we keep only the name, type, size and the summary the AI writes; the file is sent to the model to answer you and is not kept.
• If you share a canvas, who is connected to it at each moment, to show live presence.

Public profiles you analyse

When you audit an account, search in Radar, open a profile on the canvas or use Prospecting or Leads, we fetch data that is already public on Instagram or TikTok:

• Username, bio, picture, follower count, posts, their captions and their public metrics.
• In Prospecting, the usernames of whoever commented a keyword on a public post.
• In Leads, the email or phone an account shows openly on its profile, among the followers or following of the account you choose. They are cached for at most 30 days so the lookup is not repeated.

If you use that contact data, you decide what for, and you must do so lawfully (for example, under anti-spam rules). If you own one of those profiles and want it removed from the cache, write to us.

Connected Instagram accounts

Only if you connect a professional Instagram account to use the automations, and only with the permissions you approve on Meta's screen:

• Identifier and username of the Instagram account.
• The access token issued by Meta, stored on our server and never exposed to the browser.
• The comments and direct messages that account receives while automations are active: text, identifier and username of the sender, and when it arrived.
• The delivery result of each automatic reply (sent, no rule, expired or error).

This data is used exclusively to decide whether a message triggers one of your rules and to send the reply you wrote. It is not sold, not used for advertising and not combined with other users' data.

What other people can see

• Path ranking (optional). You start outside it. If you switch it on in Settings —or from your profile with «Make public»—, everyone else with an Airedes account sees your name and picture, your points, completed days, streaks and consistency, the Instagram username you have claimed with its follower count and the names of your paths with their progress. Never your email or the content of your paths, answers, notes, audits, sales or payments. You turn it off with the same switch.
• Marketplace gems. If you list a gem on the marketplace, anyone with an account sees its listing, its price and who created it.
• Studio deliveries. Whoever has the link to a delivery can read, edit and approve it without an account; we keep their changes and their approval.
• Earnings certificates. If you export the image of what you have earned as an ambassador or referrer, its QR code opens a public page with your name, your Instagram, the total earned, your medal, how many people subscribed through you and your code.

Payments and sales

• Your Airedes plan: Stripe processes the charge. We keep the subscription status, the plan, the amounts and the Stripe identifiers. We do not store card numbers.
• If you sell Paths or gems: you get paid through a Stripe Connect account in your name. Identity and bank verification is done by Stripe directly; we keep your sales, fees and account status.
• If you buy a Path or a gem: we keep your email, what you bought, the amount and the payment status. Whoever sells you a Path sees your email, your progress and your questionnaire answers, so they can prepare your path.

Ambassador and referral programme

• What you fill in when joining: name, email, WhatsApp, Instagram, community, website and how you heard about us.
• Who subscribed with your code and the commissions you generate.
• How you want to be paid. If it is not through Stripe, the details you write to receive the payment (PayPal, bank account, wallet or other).

Support, moderation and technical data

• The emails you send us, the bugs you report and the reports and blocks you make inside the app.
• IP address, browser, device and technical error logs, which any web service generates.
• Usage statistics with Google Analytics for Firebase: which screens are opened and an installation identifier. They are not used for advertising or combined with third-party data.

4. Purposes and legal basis

5. Who it is shared with

We work with these providers, who process data on our behalf and only for what is stated:

The controller is established in the United States and some providers process data outside the European Economic Area. When data comes from the EEA or the United Kingdom, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision. We do not share data with anyone else unless required by law.

6. How long we keep it

• Account and content: while your account is open. Deleting it from Settings removes them on the spot.
• Instagram data: while the account is connected. Disconnecting it —from Automations or by removing the app from Instagram— immediately deletes the token, your rules and the message queue.
• Public data of analysed profiles: cached, Leads contact data for at most 30 days.
• Payments, sales and commissions: for the period required by tax and accounting law, even if you delete your account.
• Moderation reports: as long as needed to resolve them and prevent repeated abuse.

7. How to delete your data

• The whole account: Settings → Delete account. Your subscription is cancelled and your content deleted; it cannot be undone.
• Only Instagram: disconnect it in Automations or remove the app from Instagram.
• All three routes, with the detail of what is deleted, are in Delete my data.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to eduardo@leadsygroup.com. We will reply within 30 days at most. If you live in the European Economic Area or the United Kingdom, you can also complain to your country's supervisory authority; in Spain, the Agencia Española de Protección de Datos. If you live in California or another state with its own privacy law, you also have the right to know what data we hold and to ask for it to be deleted; since we do not sell or share data for advertising, there is nothing you need to opt out of.

9. Security

Everything travels encrypted over HTTPS. Instagram tokens and provider keys are only used on the server and are never sent to the browser. Meta and Stripe webhooks are verified by signature, so we reject any request not signed by them.

10. Minors

Airedes is not aimed at people under 18 and we do not knowingly collect data from minors. If you believe a minor has given us data, write to us and we will delete it.

11. Changes

If we change this policy we will publish the new version here with its date. If the change is significant, we will let you know by email or inside the app.