Privacy Policy

Efata operates an AI-assisted design and content creation service. This notice covers the Efata website, accounts, editors, and related features. For privacy questions or requests, contact support@efata.design.

Efata is based in Lagos, Nigeria.

Depending on the features you use, we may handle:

• Account and sign-in information: your email address, a salted password hash, and session information used to keep you signed in.
• Your creative materials: prompts, chat and edit instructions, briefs, reference files, images, video, and documents you choose to upload or submit.
• Saved work: generated designs and versions, carousel pages, presentations, newsletters, content plans and posts, moodboards, Brand Kit details, product images, and related editor settings.
• Technical information: information needed to operate and protect the service, such as browser or device details, IP address, request times, and error or security logs.
• Product analytics: information about pages visited and interactions with Efata. When you are signed in, we associate this activity with your account ID and email address to understand how the service is used.
• Preferences: browser-stored choices such as your theme or editor preferences.

Uploaded materials may contain personal information. Please submit only information that you have a right to use and that is appropriate for the feature you are requesting.

We use information to:

• create and secure accounts, authenticate sign-ins, and provide requested features;
• generate, edit, save, organize, and return your creative work;
• respond to support requests, troubleshoot errors, and protect the service;
• maintain, improve, and understand the reliability of our product; and
• meet legal obligations and handle disputes or misuse.

Depending on the purpose, processing may be necessary to provide the service you requested, based on our legitimate interests in operating and securing Efata, based on your consent, or required by law. You may withdraw consent where processing relies on consent, subject to legal requirements and the effect on the feature involved.

Efata relies on outside services to run the product and provide features you request. Depending on how you use Efata, the following categories may process information:

• Hosting and storage services: may process account records, session information, uploaded materials, and saved work to operate Efata.
• AI processing services: when you request an AI feature, may receive your prompt, relevant uploaded images or documents, and settings needed to produce the requested result. Sign-in credentials are not included with generation requests.
• Search and media services: may receive a search phrase when you look for stock imagery and return related media and information.
• Product analytics services: may process page views, product interactions, browser or device identifiers, and, for signed-in users, account ID and email address to help us understand and improve the service.
• Web resource services: may receive ordinary connection information when your browser requests fonts, icons, or other interface resources.

Outside services have their own privacy and retention practices, and may process information outside Nigeria. This policy describes recipient categories and purposes; contact support@efata.design with questions about a specific privacy request.

We share information with the service categories described above as needed to operate features, store your work, and protect the service. We may also disclose information when required by law or when reasonably necessary to address security, fraud, or misuse. We do not sell personal information for money.

Saved work is associated with your account and is not intended to be publicly visible to other Efata users by default. If you choose to share or publish content outside Efata, the receiving platform’s terms and privacy practices apply.

Efata uses account access controls and private, user-scoped storage for saved work. Passwords are stored as salted hashes, and sign-in sessions use an HTTP-only cookie. These measures reduce risk but cannot guarantee that any online service or transmission is completely secure.

We keep account information and saved work for as long as needed to provide the service, maintain your account, protect Efata, resolve requests, and meet legal obligations. You can delete supported items using available product controls. To request account closure or deletion of personal information, email support@efata.design.

Some information may remain for a limited period in backups, security records, or where retention is required or permitted by law. We do not promise an immediate deletion time for those records.

Under the Nigeria Data Protection Act 2023 and other applicable law, you may have the right to request access to or correction of your personal information, request deletion or restriction, object to certain processing, request portability, or withdraw consent where consent is the basis for processing. To make a request, email support@efata.design. We may ask for information needed to verify your identity and will respond subject to applicable law.

You may also contact the Nigeria Data Protection Commission if you have a concern about how your information is handled.

Efata uses an essential first-party HTTP-only session cookie to keep you signed in. Browser storage may also remember interface preferences such as your selected theme. Product analytics may use browser storage or similar identifiers to understand service usage; we do not use these analytics to build an advertising profile. Requests to outside font, icon, AI, media, or analytics services may expose ordinary connection information to those providers.

Efata is not for children under 13. People aged 13 through 17 may use the service only with prior permission and supervision from a parent or legal guardian. The parent or guardian must review these terms and this policy and agree to the young person’s use. If you believe a child is using Efata without the required permission, contact us at support@efata.design.

Efata is based in Nigeria, while some providers may process information in other countries. Where cross-border processing applies, Efata will handle transfers in accordance with applicable data-protection requirements. Contact us if you need information about a specific request or provider.

We may update this policy as the service or legal requirements change. The updated version will be posted here with a new “Last updated” date. For material changes, we will provide notice through the service or another appropriate channel where required.