This policy explains what personal data SWEETCLOUD D.O.O. collects on sweetcloud.me, why, how long we keep it, who helps us process it and what rights you have. We process personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
SWEETCLOUD D.O.O., ul. Aleksandra Popovića 1, 11283 Beograd (Zemun), Serbia. Company registration number (MB): 22049950. Tax ID (PIB): 114637244.
For any question about your data, write to id@sweetcloud.me.
2. Partner Kit requests (retail chains, distributors, importers)
- What we collect: your email address; the language of the page; whether you asked for the full market research; whether you agreed to receive our news; if the form asks for them — company, country, your role, sales channels, number of outlets, preferred start, city for samples, phone or messenger; the date and time of the request.
- Why: to send you the Partner Kit, to answer you and discuss cooperation and — only if you ticked the box — to send you occasional news.
- Legal basis: steps taken at your request before a possible contract and our legitimate interest in business communication; for news — your consent, which you can withdraw at any time (reply to any of our emails or write to id@sweetcloud.me).
- How long: 24 months after our last contact with you; if we start working together — as long as the law requires business records to be kept.
3. Creator programme applications
- What we collect: name, Instagram and/or TikTok profile, city, delivery address, phone number, your confirmations (age 18+, publishing commitment, permission to use your videos in advertising), the version of the programme terms you accepted, the language of the page and the IP address from which the application was sent.
- Why: to review the application, deliver the box, coordinate publications and, with your permission, promote your videos as partnership ads.
- Legal basis: performance of the programme terms you accept when applying; protection against abuse (IP address) — our legitimate interest.
- How long: 90 days after the box is delivered; rejected applications — 6 months. If your video is used in advertising, we keep your name, profile and permission for as long as the video is used and for the period in which claims can be made.
4. Emails and messages to us
When you write to us (for example to support@sweetcloud.me or id@sweetcloud.me) or reply to one of our emails, we process your address, the content of the message and attachments in order to answer. To reply faster, an AI service prepares a draft answer to messages in our support mailbox; a member of our team reads every draft and decides what is sent. We also keep a log of the emails we send (recipient, subject, time). Legal basis: our legitimate interest in answering you, or steps at your request. We keep correspondence for up to 24 months after the last message.
5. Website visits and advertising labels
- Hosting: as with any website, our hosting provider processes your IP address, browser type, the requested page and the time of the visit to deliver the site and protect it from attacks. These technical logs are kept for a short period.
- Advertising labels: if you arrive through a link with labels (utm_ parameters, for example from our ad), we keep them in the memory of the browser tab and save them with your request, so that we know which campaign brought it. These labels describe the ad, not you.
- Meta identifiers: the click identifier from Meta ads (fbclid) and the cookies _fbc and _fbp are saved with your request and used only if you allowed advertising cookies (section 7).
6. Who receives the data
We do not sell personal data. Data is available to authorised staff of SWEETCLOUD D.O.O. and to service providers who process it on our behalf:
- Vercel Inc. (USA) — website hosting and server functions;
- Supabase — the database in which requests and applications are stored;
- Beget — hosting of our mailbox, sending and receiving email;
- Telegram — internal notifications to our sales and creator team about new requests;
- Google (Google Sheets) — the working table of the creator programme coordinator;
- OpenRouter Inc. (USA) and the AI model provider selected through it — draft replies to emails in our support mailbox (section 4);
- Meta Platforms Ireland Ltd. — Meta Pixel and Conversions API, only with your consent (section 7);
- courier services — name, address and phone number for delivering the creator box.
We may also disclose data when the law requires it or to protect our legal rights.
7. Cookies, Meta Pixel and Conversions API
Necessary cookies make the site work and remember your choice. Analytics and advertising cookies are used only with your consent, which you give or refuse in the banner. You can change your choice at any time with “Cookie settings” at the bottom of every page; withdrawing consent does not affect processing carried out before.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| sc_consent | Necessary | Remembers your cookie choice | 12 months |
| sc_attr (tab memory, not a cookie) | Necessary | Advertising labels of the current visit, to attach them to your request | Until you close the tab |
| sc_utm_first, sc_utm_last | Advertising | The ad that brought you to the site (first and last visit with labels) | 90 days |
| _fbp, _fbc (Meta) | Advertising | Meta Pixel: recognising the browser and the ad click to measure Facebook and Instagram ads | 90 days |
Analytics: at the moment we use no analytics cookies. If we add an analytics tool, it will run only with your consent in this category, and we will update this policy.
Meta Pixel and Conversions API: with your consent to advertising cookies, the Meta Pixel reports to Meta page views, form views, clicks on contacts and successful requests. When you submit a form, our server sends Meta the same event (Conversions API), so that Meta counts it once even if the browser blocked the Pixel. The server event contains your email (for creators — phone and city) only in hashed form (SHA-256), the country, the event identifier, your IP address and browser, and the Meta identifiers. Meta uses this to measure and improve our ads; for this collection Meta is a joint controller and processes the data under its own policy (facebook.com/privacy/policy). Without consent, neither the Pixel nor the server events are sent.
8. Transfers outside Serbia
Some of these providers process data outside Serbia — in the European Union, the United States and other countries. We use them only on terms permitted by law: in countries with an adequate level of protection, under standard contractual clauses or on another legal ground provided by law.
9. Your rights
- access to your data and a copy of it;
- rectification of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- objection to processing based on our legitimate interest, and to direct marketing at any time;
- withdrawal of consent at any time, without affecting earlier processing.
Write to id@sweetcloud.me. We answer within 30 days; we may ask you to confirm your identity so that we do not give your data to someone else.
You can also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11000 Beograd, www.poverenik.rs) or with the supervisory authority of your country.
10. Security
Data travels over encrypted connections (HTTPS). Access to the database and service keys is limited to authorised staff and is available only on the server side.
11. Children
The website is intended for businesses and adults. The creator programme accepts only people aged 18 or over. We do not knowingly collect data about children.
12. Automated decisions
We do not make decisions about you based solely on automated processing that would have legal or similarly significant effects.
13. Changes to this policy
We update this page when our processing changes; the version date is shown at the top. The Sweet Cloud MCP application has its own documents: /legal/sweet-cloud-mcp/privacy.html.