Operator and scope
DDS Marketing HQ is operated by Georgi Draganov, Sofia, Bulgaria, under the name Draganov Digital Solutions. Contact and privacy requests: hello@draganovdigital.com.
This notice covers Marketing HQ and connected business accounts. The public website and inquiry form are described in the website legal notice. Where DDS processes client data on instructions, the specific roles and obligations are also governed by the client relationship.
Data we use
User email and name, workspace membership and role; identifiers and names of selected Facebook Pages and professional Instagram accounts; permissions and connection tokens.
Brand settings, business facts, instructions, campaigns, copy, images, approvals, schedules, action history and available post measurements. Public information from the supplied business website supports content preparation.
Operation identifiers, AI responses and technical records support operation and diagnostics. Do not include passwords, payment details, health information or other sensitive data in agent instructions.
Purposes and legal bases
We use data to provide requested features, manage access, prepare and approve content, schedule and publish it, measure results and resolve issues. Contract or requested pre-contractual steps apply where they concern the individual; legitimate interests support authorized business representation and security, and legal obligations apply where required.
OAuth permission controls which Meta functions the app may access; it does not replace the applicable legal basis for each personal-data processing purpose. Publishing requires human approval. The agent does not independently make decisions with legal or similarly significant effects on individuals.
Meta, AI and providers
Meta provides account connection, publishing and available measurements. Cloudflare provides execution, the database, file storage and access protection. Social connection tokens are stored encrypted.
AI features may send relevant business context, instructions, copy, selected images and summarized observations to OpenAI. Meta tokens are not included as content in those requests. Responses support drafts, checks and the application's working memory.
Services may involve processing outside the EEA. Applicable contractual safeguards and provider terms relate to the relevant service; we do not promise EU-only storage. We do not sell personal or Meta data for third-party direct marketing.
Retention and deletion
Working data is retained while needed for the active workspace and requested functions. The publication archive is part of that history: archiving after 48 hours does not mean deletion.
On termination or an erasure request, we establish scope, verify the requester's authority and remove the relevant active data. Some records may remain where needed for a legal obligation, legal claims or a limited record of handling the request.
Provider backups and technical records have a separate lifecycle. When handling a request, we identify copies requiring deletion or expiry and the applicable period. Restoring a backup requires completed erasures to be reapplied before service resumes.
Your rights and contact
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Contact hello@draganovdigital.com. We respond without undue delay, generally within one month of receiving the request; where an extension applies we explain why.
Identity verification is requested only to the extent necessary. You may complain to the Bulgarian Commission for Personal Data Protection. Where DDS processes data on instructions from your employer or another business, we assist together with that business.