Privacy Policy

1. Data Controller

As the data controller, we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Account Information: Name, email address, username, password.
• Profile and Usage Data: Profile photo (if uploaded), preferences, settings, activity logs, timestamps.
• Social Media API Data: When you connect a social media account (Facebook, LinkedIn, YouTube, Instagram, TikTok, Twitter), we receive only the data you authorize through the official API (e.g., profile name, post content, analytics). We never collect your social media credentials directly.
• Content Data: Drafts, posts, comments, media (images, videos) you manage through the Services.
• Communications: Correspondence between you and our support or sales teams.

3. How We Use Your Personal Data

We use personal data to:

• Provide, maintain, and improve the Services (account creation, access management, feature usage).
• Facilitate the full content creation pipeline (drafting, scheduling, publishing).
• Integrate with social media platforms via official APIs, in compliance with their terms of service.
• Send administrative messages, updates, and marketing communications (with your consent).
• Monitor and analyze usage to enhance performance and user experience.
• Detect, prevent, and respond to security and technical issues.

4. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

• Performance of a Contract: Processing necessary to provide the Services you request.
• Consent: Where you have given clear permission (e.g., marketing communications, social media connections).
• Legitimate Interests: For the operation and improvement of our Services, fraud prevention, and security, provided these interests do not override your fundamental rights.

5. Data Retention

• Account and Profile Data: Retained for as long as your account is active or as needed to provide you Services.
• Content Data: Stored until you delete it or request its deletion.
• Social Media Tokens: Stored only for the duration necessary to maintain API connections; you may revoke access at any time.
• Support Communications: Retained for up to 3 years for legal and operational purposes.

Upon request, we will delete or anonymize your personal data, except where otherwise required by law.

6. Your Rights under the GDPR

You have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erasure (the “right to be forgotten”).
• Restrict processing of your data.
• Data Portability to another controller.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent at any time (without affecting past processing).

To exercise any of these rights, please contact us at privacy@contentmachine.so.

7. Social Media and Third-Party APIs

When you connect your Facebook, LinkedIn, YouTube, Instagram, TikTok, or Twitter account, we:

• Use only the official APIs provided by each platform.
• Request only the permissions necessary to perform the requested functions.
• Comply with each platform’s terms of service and data handling policies.
• Obtain your explicit consent before accessing your social media data.
• Permanently delete all retrieved content and tokens if you request disconnection or account deletion.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. Measures include encryption in transit (TLS) and at rest, access controls, regular security assessments, and staff training.

9. International Data Transfers

Your data is processed and stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate safeguards such as Standard Contractual Clauses or reliance on an adequacy decision by the European Commission.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, track feature usage, and analyze trends. You can manage cookies through your browser settings. For more details, please see our Cookies Policy.

11. Changes to this Privacy Policy

We may update this policy periodically. We will notify you of significant changes via email or an in-app notification and update the “Last updated” date.

12. Contact Us

If you have questions, concerns, or wish to exercise your GDPR rights, please contact: