Privacy Policy

1. Who we are

Clagus Group OÜ, registered in Estonia, is the controller for personal data described in this policy. Clagus Media is its operating brand.

2. Scope

This policy applies to the public website at www.clagusmedia.com, its contact form, and the authenticated Clagus Media platform.

3. Information we collect

Depending on how you use the service, we may process:

• Contact-form details, including name, email address, message, IP address, and browser user-agent
• Account and session information used for authentication and security
• Access tokens and identifiers for social, advertising, analytics, and other connected services
• Content, media, campaigns, schedules, and publishing instructions you provide
• Operational logs, usage information, and performance analytics

4. How and why we use information

We process information to:

• Provide, secure, maintain, and improve the website and platform
• Respond to inquiries and keep a record of correspondence
• Create, schedule, publish, and measure content at your direction
• Connect to third-party services you authorize
• Detect abuse, investigate failures, and comply with legal obligations

5. Service providers and connected platforms

We share data only as needed with infrastructure providers and with the social, advertising, analytics, communications, or AI services you choose to connect. Those providers process data under their own privacy policies. We do not sell personal data.

6. Storage and security

Data is stored in a private PostgreSQL database and object storage. Access is restricted to authorized operators. Credentials and API tokens stored by the platform are encrypted, and network connections use encryption in transit.

7. Retention

Contact-form submissions are retained for up to 24 months unless earlier deletion is requested. Platform data is retained while needed to provide the service or meet legal obligations. Connected-service credentials are retained until replaced, disconnected, or deleted.

8. Your rights

Where applicable under the GDPR, you may:

• Request access to or correction of your personal data
• Request deletion or restriction of processing
• Object to processing or withdraw consent where consent is the legal basis
• Request data portability
• Lodge a complaint with the Estonian Data Protection Inspectorate

9. Cookies

The public website does not use advertising cookies. The authenticated platform uses a first-party session cookie for login and security.

10. Changes and contact

We may update this policy from time to time. The effective date appears above. For privacy questions or rights requests, use the contact form on the home page.