Privacy Policy

1. Introduction

This Privacy Policy explains how Baba SEO ("we", "us", or "our") collects, uses, and protects your personal information when you use our Notion to Slides conversion service.

We are committed to protecting your privacy and ensuring the security of your data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

3. Information We Collect

3.1 Account Information

• Email address
• Account creation date
• Credit balance and usage history
• Authentication tokens

3.2 Notion Integration Data

• Notion OAuth access tokens (encrypted)
• Notion workspace information
• Content from Notion pages you choose to convert
• Page titles and structure

3.3 Technical Information

• IP address
• Browser type and version
• Device information
• Usage patterns and timestamps

4. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our service
• To authenticate your account and process your requests
• To access and convert your Notion pages (only when you explicitly request it)
• To manage your credit balance and transactions
• To improve our service and develop new features
• To communicate with you about service updates and support
• To comply with legal obligations

5. Data Storage and Security

Your data is stored securely using industry-standard practices:

• All data is stored on secure servers provided by Supabase (hosted in the EU)
• Notion access tokens are encrypted at rest
• All connections use HTTPS/TLS encryption
• We implement row-level security (RLS) policies to protect your data
• Regular security audits and updates

6. Third-Party Services

6.1 Notion

We use Notion's API to access pages you explicitly share with our integration. We only read page content for conversion purposes and never modify or delete your Notion data. Please review Notion's Privacy Policy at https://www.notion.so/privacy

6.2 Supabase

We use Supabase for authentication and database services. Your data is stored on Supabase's secure infrastructure. Please review Supabase's Privacy Policy at https://supabase.com/privacy

6.3 Google Slides

When you export to Google Slides, we use Google's API to create presentations in your Google Drive. We only have access to files we create and cannot access your other Google Drive files.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal information is permanently deleted within 30 days
• Notion access tokens are immediately revoked and deleted
• Converted content is not stored after export
• Some data may be retained for legal compliance (e.g., transaction records for tax purposes)

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at letsgrow@baba-seo.com

9. Cookies

We use essential cookies to:

• Maintain your session and authentication state
• Remember your preferences
• Ensure security of your account

We do not use tracking cookies or third-party advertising cookies.

10. International Data Transfers

Your data is primarily stored and processed within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our website. The "Last updated" date at the top of this policy indicates when it was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):