Legal
Website and app privacy
Updated on 27 October 2026
Who handles your data
Pezzounico is operated by Alessio Bussolari, reachable at hello@bussolarialessio.me, Via del Prete 121, 47841 Cattolica (RN), Italy. This notice covers www.pezzouni.co and the Pezzounico app, including the Meta connection displayed as “Pezzouni.co Publisher”.
Data we process
For demo requests we process your name, email, company, number of brands and message. In the app we process account names and emails, protected credentials, organisation memberships and roles, invitations, brands, descriptions, uploaded documents and photographs. We also store brand analyses, styles, research suggestions, generated content, approval choices, schedules and publishing results. Sessions record IP addresses and browser information; technical data and errors support security and operation.
Errors, statistics and session replay on the website
On the website we always collect technical errors: error type, page and browser, with no cookies and no personal data. Only with your consent we also collect statistics, meaning page views and loading speed without cookies, and session replay, with all text and fields masked. These are two separate consents: you give or withdraw them at any time from the Cookies page. We always strip parameters from page addresses. Statistics use your IP address only to count visits anonymously and do not store it.
Facebook and Instagram connections
When an owner connects a professional Instagram profile, we receive its identifier, the associated Facebook Page identifier, username, permissions and an access token with its expiry date, stored encrypted. We use these to identify the authorised profile, maintain the connection and publish approved, scheduled content. We do not ask for your Facebook or Instagram password. Disconnecting removes the connection and token stored in the app; it does not remove posts already published on Meta.
Purposes and legal bases
Data needed to respond to a demo request and provide requested features is processed to perform our relationship with you or take pre-contractual steps. Access protection, abuse prevention and error diagnosis serve our legitimate interest in keeping the service secure. We also process data required by law. Information essential to an account or a feature is necessary to use it; connecting a social profile is optional. We do not sell data or use it for behavioural advertising. Website errors fall under the same legitimate interest. Statistics and session replay rely only on your consent, which you can withdraw at any time.
AI, search and other recipients
Brand materials and information needed for analysis or generation go through OpenRouter, Inc. (United States), which forwards them to the provider of the model that runs the function: OpenAI (United States) for text and images, with Microsoft Azure and Amazon Bedrock (United States) as alternative hosts of the same text model; BytePlus, part of the ByteDance group (Singapore), for Seedance videos; HeyGen (United States) for avatars; Hanabi AI Inc. (Fish Audio, United States) for voices. Firecrawl (United States) receives queries and context needed to search for ideas on the web. Meta Platforms Ireland Limited (Ireland) receives information and content needed for connection and publishing and may transfer them to Meta Platforms, Inc. (United States). Service emails are sent through Resend (United States). The website, the app and the database run on servers of Hetzner Online GmbH in Germany; uploaded files are stored on Amazon Web Services in Frankfurt (Germany) and database backups on Amazon Web Services in Ireland. CloseYourIt, the monitoring service run by the same controller, runs on Hetzner servers in Germany and receives website and app errors, website statistics and replays. Safeguards for transfers outside the European Economic Area: for Amazon Web Services and Meta, the EU-US Data Privacy Framework, under which both companies are certified, together with the European Commission's Standard Contractual Clauses; for OpenRouter, Firecrawl and Resend, the European Commission's Standard Contractual Clauses. OpenRouter uses the model providers as its own sub-processors, mostly in the United States: these onward transfers are also covered by the European Commission's Standard Contractual Clauses, in the processor-to-sub-processor module. You can request a copy of these safeguards by writing to hello@bussolarialessio.me. Avoid uploading sensitive data or third-party information unnecessary for the brand’s work.
Data uploaded for an organisation
Organisation users access brands and content according to their permissions. If you upload personal data for an organisation, you must be authorised and have informed the people concerned. The organisation decides the purposes of its materials; requests concerning that data are coordinated with its representative. AI generation supports editorial work and does not constitute automated decisions about people.
Retention and erasure
Demo requests: up to 12 months after the last contact if no relationship follows; if one does, we keep them for as long as it lasts. App data (accounts, organisations, brands, materials, content and connections): for as long as the relationship lasts; when it ends or you ask for erasure, we delete it within 30 days. You can also remove materials and content with the app's features. Archiving a brand does not erase it. Deleted files remain as a previous version for at most 30 days. Website and app technical errors: 30 days. Session replays: 30 days. Statistics: 12 months. Database backups: daily and rotating, deleted within 70 days of their creation; we do not edit them for single requests, but erased data disappears when they expire. The exceptions are the tax and accounting records of the relationship, which we keep for 10 years as Article 2220 of the Italian Civil Code requires, and data needed to defend a right in a dispute already under way, which we keep until it is finally closed. Our response explains the outcome and any applicable exceptions.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability or object to processing. You may complain to the Italian data protection authority. Contact hello@bussolarialessio.me to exercise your rights; the Data deletion page explains what information to send.