Privacy Policy

Effective Date: 02 March 2026
Last Updated: 06 June 2026

1. Introduction

This Privacy Policy explains how LegionAI ("LegionAI", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you access or use our website, applications, and related services (collectively, the "Services").

LegionAI is operated by Beotela OOD, a company incorporated under the laws of Bulgaria.

By using our Services, you acknowledge that your personal data will be processed as described in this Privacy Policy.

2. Data Controller

For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR"), the data controller is:

Beotela OOD
VAT Number: BG130389067
Ul. Gurgulyat 33
Sofia, Bulgaria

Email: contact@legionai.pro

3. Scope of This Policy

This Privacy Policy applies to:

Visitors to our website.
Registered users of LegionAI.
Customers and subscribers.
Individuals who contact us.
Users of integrated services connected through LegionAI.

This Privacy Policy does not apply to third-party services that may be linked from our website or connected through our platform.

4. Personal Data We Collect

Information You Provide Directly

We may collect:

Name and contact details.
Email address.
Account credentials.
Business and organisation information.
Marketing preferences.
Support requests and communications.
Content, prompts, files, images, and materials submitted through the Services.

Information Collected Automatically

When you use the Services, we may automatically collect:

IP address.
Browser type and version.
Device information.
Operating system.
Usage activity and interaction data.
Log and diagnostic information.

Connected Platform Data

When you connect third-party platforms such as Facebook, Instagram, LinkedIn, X, TikTok, Pinterest, or YouTube, we may collect:

Account identifiers.
Authentication tokens.
Profile information made available through the relevant platform APIs.

We use this information solely to provide the functionality requested by you.

Payment Information

Payments are processed by third-party payment providers, including Stripe.

LegionAI does not store complete payment card details. We may receive limited billing information, transaction status information, and subscription details from our payment providers.

5. AI Processing

LegionAI uses artificial intelligence providers to generate content and deliver AI-powered functionality.

When you use AI features, prompts, instructions, uploaded materials, and related contextual information may be processed by third-party AI providers for the purpose of generating requested outputs.

Our current AI service providers may include:

Anthropic
FAL.ai
Other providers introduced from time to time

We require our providers to process data in accordance with applicable contractual and legal obligations.

6. How We Use Personal Data

We use personal data to:

Create and manage user accounts.
Provide the Services.
Process subscriptions and payments.
Generate AI-powered content.
Publish content to connected platforms when instructed.
Provide customer support.
Improve functionality and performance.
Monitor security and prevent abuse.
Comply with legal obligations.
Communicate with users regarding the Services.

7. Legal Bases for Processing (GDPR)

Where GDPR applies, we process personal data on one or more of the following legal grounds:

Purpose	Legal Basis
Providing the Services	Performance of a contract
Managing subscriptions and payments	Performance of a contract
Customer support	Performance of a contract
Security and fraud prevention	Legitimate interests
Product development and improvement	Legitimate interests
Legal and regulatory compliance	Legal obligation
Marketing communications	Consent or legitimate interests where permitted by law

Where processing is based on consent, you may withdraw consent at any time.

We do not sell personal data.

We may share personal data with:

Hosting and infrastructure providers.
Authentication providers.
Payment processors.
Artificial intelligence providers.
Customer support providers.
Analytics providers.
Connected social media platforms.
Professional advisers.
Government authorities where required by law.

All third-party service providers are required to process personal data in accordance with applicable legal requirements.

9. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA).

Where personal data is transferred internationally, we implement appropriate safeguards as required by applicable law, including:

European Commission adequacy decisions.
Standard Contractual Clauses.
Other lawful transfer mechanisms recognised under GDPR.

10. Data Retention

We retain personal data only for as long as necessary to:

Provide the Services.
Maintain user accounts.
Fulfil contractual obligations.
Comply with legal requirements.
Resolve disputes.
Enforce our agreements.

When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable law.

11. Your Rights

Subject to applicable law, you may have the right to:

Access your personal data.
Correct inaccurate information.
Request deletion of personal data.
Restrict processing.
Object to processing.
Request data portability.
Withdraw consent.
Lodge a complaint with a supervisory authority.

Requests may be submitted to: contact@legionai.pro

If you are located in the European Union, you may also lodge a complaint with your local data protection authority or with Bulgaria's Commission for Personal Data Protection.

12. Cookies and Similar Technologies

We use cookies and similar technologies to:

Operate the Services.
Remember preferences.
Improve functionality.
Analyse usage.
Support marketing activities where permitted.

Additional information is available in our Cookie Policy.

13. Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction.

While we take security seriously, no method of transmission or storage can be guaranteed to be completely secure.

14. Children's Privacy

The Services are not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

If we become aware that personal data has been collected from a child in violation of applicable law, we will take reasonable steps to delete that information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be published on our website together with a revised "Last Updated" date.

Where required by law, we will provide additional notice regarding material changes.

16. Contact Us

For privacy-related questions, requests, or concerns, please contact: