Beelia Privacy Policy

This Privacy Policy explains how Beelia, operated by Cesno Innovation S.L. ("Beelia," "we," "us," or "our"), collects, uses, stores, shares, and protects personal data when you access or use the Beelia website, platform, applications, and related services (collectively, the "Platform").

This Policy applies to all users of Beelia, including visitors, users, creators, and waitlist subscribers. By using Beelia, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Beelia is currently operated as an internal product of Cesno Innovation S.L., a company incorporated and registered in Spain. For the purposes of data protection laws, Cesno Innovation S.L. acts as the data controller for personal data processed through the Platform.

If Beelia is later incorporated as a separate legal entity, data processing responsibilities may be transferred to that entity, subject to applicable law and appropriate notice.

2. Scope of This Policy

This Privacy Policy covers:

• Personal data collected directly from you;
• Data collected automatically when you use the Platform;
• Data processed in connection with creator onboarding, verification, and monetization;
• Data related to communications, support, and security.

It does not cover how third-party AI tools listed on Beelia process your data. Such processing is governed by the respective creator's privacy policies.

3. Personal Data We Collect

3.1 Data You Provide Directly

Depending on how you use Beelia, we may collect:

• Name, username, or display name;
• Email address;
• Account credentials;
• Waitlist information;
• Creator onboarding information;
• Identity verification information (for creators);
• Payment-related details (processed via third-party providers);
• Communications you send to us;
• Feedback, reports, or support requests.

3.2 Data Collected Automatically

When you access the Platform, we may automatically collect:

• IP address;
• Device type, browser type, and operating system;
• Usage data and interaction logs;
• Referral URLs;
• Cookies and similar tracking technologies.

3.3 Data from Third Parties

We may receive data from:

• Payment processors;
• Identity verification providers;
• Analytics services;
• Security and fraud-prevention partners.

4. How We Use Your Data

Beelia processes personal data in a structured and purpose-limited manner. We only use personal data where it is necessary, relevant, and proportionate to the operation of the Platform.

Specifically, we use personal data to:

• Operate, maintain, and technically administer the Platform;
• Enable account creation, login, and authentication;
• Provide access to Platform features, tools, and services;
• Manage waitlists, onboarding flows, and early access programs;
• Verify creator identity, eligibility, and compliance with Platform requirements;
• Facilitate payments, subscriptions, refunds (where applicable), and payouts through third-party payment providers;
• Communicate with you regarding updates, security notices, product changes, or support requests;
• Monitor Platform activity to ensure safety, integrity, and compliance with our Terms of Service;
• Detect, prevent, and investigate fraud, abuse, misuse, or security incidents;
• Analyze usage trends to improve functionality, performance, and user experience;
• Enforce legal rights and comply with applicable laws, regulations, or lawful requests.

We do not use personal data for purposes that are incompatible with the reasons it was collected.

5. Legal Bases for Processing (GDPR)

For users located in the European Union or European Economic Area, Beelia processes personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

• Consent: Where you have explicitly consented to the processing of your personal data, such as when joining a waitlist or subscribing to communications.
• Contractual necessity: Where processing is required to perform a contract with you or to take steps at your request prior to entering into a contract (e.g., account creation, access to services).
• Legal obligation: Where processing is necessary to comply with legal or regulatory obligations, including financial, tax, or record-keeping requirements.
• Legitimate interests: Where processing is necessary for our legitimate interests, such as securing the Platform, preventing fraud, improving services, and ensuring operational continuity, provided those interests are not overridden by your rights.

You may contact us for additional information regarding the specific legal basis applicable to particular processing activities.

6. Cookies and Tracking Technologies

Beelia uses cookies and similar tracking technologies to support the functionality, security, and performance of the Platform.

6.1 Types of Cookies

We may use:

• Strictly necessary cookies to enable core Platform functionality and security;
• Preference cookies to remember user settings;
• Analytics cookies to understand how users interact with the Platform;
• Security cookies to detect suspicious or abusive activity.

6.2 Cookie Management

You may manage or disable cookies through your browser or device settings. Please note that disabling certain cookies may limit functionality or availability of parts of the Platform.

7. Data Sharing and Disclosure

Beelia does not sell personal data.

We may share personal data in limited circumstances, including:

• With service providers who perform services on our behalf (such as hosting, analytics, payment processing, identity verification, and security monitoring);
• With identity verification and fraud-prevention partners for creator onboarding and risk mitigation;
• With legal or regulatory authorities where disclosure is required by law, court order, or governmental request;
• In connection with corporate transactions, such as mergers, acquisitions, restructurings, or asset transfers, subject to appropriate safeguards.

All third parties are contractually required to process personal data only for authorized purposes and in accordance with applicable data protection laws.

8. International Data Transfers

Beelia operates as a global platform. As a result, personal data may be transferred to, stored in, or processed in countries other than your country of residence, including countries outside the European Economic Area (EEA).

Such transfers may occur, for example, when:

• We use cloud hosting, infrastructure, or analytics providers with servers located outside your jurisdiction;
• We engage identity verification, payment processing, or security partners that operate internationally;
• Users or creators access the Platform from different regions.

Where personal data is transferred outside the EEA, Beelia ensures that appropriate safeguards are in place to protect your data, which may include:

• Standard Contractual Clauses approved by the European Commission;
• Transfers to countries deemed to provide an adequate level of data protection;
• Other lawful transfer mechanisms permitted under applicable data protection laws.

We take reasonable steps to ensure that international data transfers do not undermine the level of protection afforded to personal data under this Privacy Policy.

9. Data Retention

Beelia retains personal data only for as long as it is reasonably necessary to fulfill the purposes described in this Privacy Policy, to operate the Platform effectively, and to comply with legal, regulatory, and contractual obligations.

Retention periods are determined based on multiple factors, including:

• The type and sensitivity of the data;
• The purpose for which the data was collected;
• Whether the data is required to maintain an active account;
• Legal, accounting, or reporting obligations;
• Security, fraud prevention, and audit requirements.

By way of example:

• Account and profile data is retained for as long as an account remains active and for a reasonable period thereafter;
• Transaction, payout, and financial records may be retained for longer periods as required by tax and accounting laws;
• Security logs and risk signals may be retained to protect the Platform and its users;
• Support communications may be retained to resolve disputes or improve services.

When personal data is no longer required, Beelia takes steps to securely delete, anonymize, or aggregate such data in accordance with industry standards.

10. Data Security

Beelia takes the security of personal data seriously and implements a combination of technical, organizational, and administrative safeguards designed to protect data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• Access controls and authentication mechanisms;
• Encryption of data in transit and, where appropriate, at rest;
• Monitoring and logging of Platform activity;
• Internal policies governing data access and handling;
• Regular review and improvement of security practices.

Despite these efforts, no method of transmission or storage is completely secure. You acknowledge that the transmission of personal data over the internet involves inherent risks, and Beelia cannot guarantee absolute security.

11. Your Rights

Depending on your jurisdiction and applicable data protection laws, you may have certain rights regarding your personal data.

These rights may include:

• Right of access: to obtain confirmation as to whether personal data concerning you is being processed and to access that data;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of personal data, subject to legal and contractual limitations;
• Right to restriction: to request limitation of processing in certain circumstances;
• Right to object: to object to processing based on legitimate interests;
• Right to data portability: to receive certain personal data in a structured, commonly used format;
• Right to withdraw consent: at any time, where processing is based on consent;
• Right to lodge a complaint: with a competent data protection authority.

To exercise your rights, you may contact Beelia using the details provided below. We may request additional information to verify your identity before responding. Requests will be handled within the timeframes required by law.

12. Children's Privacy

Beelia is designed to be accessible to a broad audience, including minors. We take additional care when processing personal data relating to children.

Where required by applicable law, Beelia relies on parental or legal guardian consent for the processing of personal data of minors. We do not knowingly collect or process personal data from children beyond what is necessary to provide access to the Platform.

If you believe that personal data relating to a child has been collected or processed without appropriate consent or in violation of applicable laws, please contact us so that we can take appropriate action.

13. Changes to This Policy

Beelia may update this Privacy Policy from time to time to reflect changes in legal requirements, technological developments, Platform features, or data processing practices.

When changes are material, we will provide notice through the Platform or by other means where required by law. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the Platform after an updated Privacy Policy becomes effective constitutes acknowledgment and acceptance of the revised Policy.

14. Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Email: support@beelia.ai

By using Beelia, you acknowledge that you have read and understood this Privacy Policy.