Privacy policy

This explains which personal data giglih handles, why, for how long and what rights you have.

Controller

NOMVAD, SL, Tax ID B05840111, C/ Terque, 44, esc. C, 2n 1a, 08225 Terrassa (Barcelona), Spain. Contact: we@giglih.com.

What data we handle and why

• Your account: email address, password stored only as a hash, language and theme. Legal basis: performance of the contract (art. 6.1.b GDPR).
• Accounts you connect: account identifier and name, permissions granted, expiry and encrypted access tokens. We never know your password for those networks. Legal basis: performance of the contract.
• Posts: text of drafts and posts, previous texts if you edit, public image URL, post identifier and link, dates and errors. Legal basis: performance of the contract.
• Access by your applications: API keys stored only as a hash and OAuth authorizations of your assistants. Legal basis: performance of the contract.
• Security: sessions, failed sign-in attempts and verification resends (with IP address and email) and technical server logs (IP address, date, requested page and browser). Legal basis: legitimate interest in protecting the service (art. 6.1.f GDPR).
• Email: service messages (verification, password) and anything you write to us. Legal basis: performance of the contract or your request.

giglih does not read what you publish outside giglih. It does not sell your data or use it for advertising or to train AI models, makes no automated decisions with legal effects on you and uses no third-party analytics.

How long we keep it

• Posts: the text and its previous versions are emptied 90 days after publishing; a record with the account, date and link remains.
• Cancelled or failed drafts: deleted after 30 days. Pending drafts stay until you publish or cancel them.
• History: you can delete it at any time from Account.
• Connected accounts: tokens are deleted when you disconnect the account.
• Sign-in attempts and resends: 30 days. Server logs: 14 days.
• Your account: until you ask us to delete it by writing to we@giglih.com.
• Backups: daily for 30 days and monthly for 12 months. Deleted data disappears from them when the backup expires.

Who receives the data

• Hetzner Online GmbH: servers, backups and email, in the European Union (Finland and Germany).
• The networks you connect (for example, LinkedIn): they receive what you decide to publish, under their own privacy policy.
• The AI assistant you connect (for example, Claude or ChatGPT): it receives the data it requests from giglih on your behalf and handles it under its own responsibility. These companies may process data outside the EU under their terms. You decide whether to connect them.

We share data with nobody else unless the law requires it.

Third-party data

If you connect someone else's account, or publish data about other people, you must have their authorization. If you use giglih on behalf of a company and need a data processing agreement, write to us before entering its data.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to we@giglih.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es). The service is for people aged 18 or over.

Cookies

giglih only uses its own technical cookies, which the service needs to work, so it does not ask for consent. It uses no advertising, analytics or third-party cookies.

• giglih_session: keeps you signed in. Up to 30 days.
• __Host-giglih_csrf: protects forms. Until you close the browser.
• giglih_lang and giglih_theme: remember your language and theme. 1 year.

Last updated: 2 November 2026.