Answer
Identity First Media processes your data in compliance with the GDPR. All your data is stored in the EU (Frankfurt, Germany). When you registered, you accepted our Data Processing Agreement (DPA), which describes how we protect your data.
What we store
- Account data: name, email address, company name
- Identity profile: Big Five, Schwartz values, motivation, tone of voice, ICP
- Content: blog posts, podcast episodes, emails, social media posts
- Customer data: contacts, assessment results, orders (if you use the webshop)
Where is your data stored?
| Service | Location | Purpose | |---------|----------|---------| | Supabase | Frankfurt, DE | Database, authentication, files | | Vercel | EU | Website hosting | | Cloudflare | EU | CDN, media processing, storage | | Stripe | EU (Ireland) | Payments |
All AI processing (content generation, chatbot) happens via API calls. Your content is not used to train AI models.
What happens when you cancel?
If you cancel your subscription, your data is not deleted immediately. Here is the process:
- Cancellation: your account status changes to "cancelled"
- Retention period: your data is kept for 90 days so you can download or export everything
- After 90 days: your data can be permanently deleted
During the retention period, you can reactivate your account and nothing will be lost. Your data cannot be accidentally deleted: multiple security layers prevent this.
View your DPA
- Go to Settings > General
- Scroll to "Legal documents"
- Click "View DPA" to read the full text
- Download as PDF or Markdown using the buttons at the bottom
Tips
- You can always download a copy of your DPA from Settings
- Want to know which sub-processors we use? See the article "Sub-processor overview"
- For privacy questions, email paul@identityfirstmedia.com