ContentOS
 Home
Legal

Privacy Policy

Last updated: February 24, 2026

This Privacy Policy explains what personal data ContentOS collects, how we use it, who we share it with, and the rights you have. If you have any questions, email support@contentos.digital.

1. Who We Are

ContentOS is operated by ContentOS Digital LLC ("we", "us"). We are the data controller for the personal data described in this Policy.

2. What We Collect

Account data. Your name, email, hashed password, and login timestamps.

Business intake data. Information you enter during onboarding — details about your business, offer, customer, brand voice, and any transcripts, testimonials, or reviews you paste in.

Content data. Content plans, hooks, scripts, and performance metrics you generate, import, or manage in the Service.

Billing data. Subscription tier, subscription status, and billing period metadata. Your card and full billing address are collected and stored by our payment processor, Paddle — we never see or store your card number.

Technical data. IP address, browser, device, and usage logs necessary to secure and operate the Service.

Third-party account tokens. If you connect Instagram, LinkedIn, or YouTube via OAuth, we store the access and refresh tokens necessary to pull the analytics you authorize.

3. How We Use Your Data

  • To provide, personalize, and improve the Service (e.g., generate your Brand Intelligence Profile, weekly plans, and reviews).
  • To process payments and manage your subscription (via Paddle).
  • To communicate with you about your account, billing, and product updates.
  • To detect, prevent, and address technical or security issues.
  • To comply with legal obligations.

4. AI Processing

Text you enter (onboarding intake, post metrics, and generation prompts) is transmitted to Anthropic's Claude API to produce Output. Under our commercial agreement with the model provider, your inputs and Outputs are not used to train underlying foundation models. Aggregated, non-identifying usage metadata may be retained by the model provider for abuse prevention and reliability.

5. Who We Share Data With

  • Anthropic — AI model provider processing your prompts and returning Output.
  • Paddle — payment processor and Merchant of Record; handles card processing, tax, and fraud checks.
  • MongoDB Atlas — cloud database provider that stores your account, intake, and generated content data.
  • Hosting provider — the cloud infrastructure on which the Service runs.
  • Third-party platforms you connect — Meta (Instagram), LinkedIn, and Google (YouTube) receive requests for the metrics and posts you authorize us to access.

We do not sell your personal data. We do not share your Content Data with advertisers.

6. International Transfers

Your data may be processed in countries other than your own, including the United States. Where required, we rely on standard contractual clauses or equivalent safeguards for such transfers.

7. Data Retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it (e.g., for tax, fraud prevention, or legal claims). Third-party account tokens are deleted immediately when you disconnect a platform.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. Contact support@contentos.digital to exercise these rights. If you are in the EEA/UK, you have the right to lodge a complaint with your local supervisory authority.

9. Cookies

We use a minimal set of cookies and local-storage keys necessary to keep you signed in and remember pending purchases across the checkout flow. We do not use advertising cookies. Analytics events, where used, are aggregated and do not include your email or password.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, email us and we will delete it.

11. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (HTTPS), hashed passwords (bcrypt), scoped access tokens, and least-privilege access to production systems. No system is 100% secure — please notify us immediately of any suspected compromise.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will notify you by email or in-app notice. Your continued use of the Service after the changes take effect constitutes acceptance.

13. Contact

Privacy questions or requests: support@contentos.digital.