Legal
Privacy statement
Last updated 2 November 2026
This statement covers this website and the Engagaloo app. The controller is AVS Media, Federico Fellinistraat 102, 6515 LV Nijmegen, the Netherlands (KvK 98648225), hello@avs-media.com.
This website#
What this website collects#
Nothing you do not hand over deliberately. There is no analytics, no tracking pixel, no advertising script and no social media plug-in. Fonts, images and videos are served from this website itself. The videos are recordings of the app with made-up people and posts.
Request access and contact forms#
What you type is used to answer you or to decide what to build. Your email address is used only to answer your request. Where the website is not connected to a message service, the form opens your email program with the text ready, and nothing is sent until you send it.
Search#
Searching this website runs in your browser against an index built together with the website. Nothing you type is sent anywhere.
Hosting and server logs#
This website is delivered by Cloudflare, Inc. as our processor. To deliver a page Cloudflare necessarily processes your IP address and technical request data and may keep them briefly in security logs. Legal basis: our legitimate interest in delivering a secure website (Art. 6(1)(f) GDPR).
The Engagaloo app#
What we process and why#
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, sign-in records | Create and secure your account | Art. 6(1)(b) GDPR |
| Your X handles (never a password), the sessions and moves your agents send, your ratings, notes and rewrites | Show your rounds, and send the outcomes back to your agents | Art. 6(1)(b) GDPR |
| Plan and payment status | Provide your plan | Art. 6(1)(b), (c) GDPR |
| Technical logs (IP address, browser, errors) | Security, abuse prevention, fixing errors | Art. 6(1)(f) GDPR |
Engagaloo never asks for your X password and never posts for you. We sell no data and run no advertising trackers.
Who else handles data for us#
| Processor | What for | Where |
|---|---|---|
| Convex, Inc. | database and application back end | US (EU-US Data Privacy Framework) |
| Cloudflare, Inc. | hosting and delivery | EU / US (EU-US Data Privacy Framework) |
Further processors for sign-in email and payments are named in the app before you use those functions. Transfers outside the EEA rely on the EU-US Data Privacy Framework or on standard contractual clauses.
Your agents#
Your agents connect over MCP with a key you create. What they send and read is limited to your own account. You can remove a key at any time.
Your rights#
You can ask us for access to, correction of, deletion of and a copy of your data, and you can object to processing based on legitimate interest, at hello@avs-media.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).