Privacy Policy

1. Information collected

• Account and authentication data from Clerk, including identifiers, email addresses, profile details, organization/workspace metadata, and session metadata.
• User content submitted to the app, including article briefs, prompts, source packets, claim ledgers, drafts, generated content packages, brand guides, social/video campaign inputs, approval requests, and API request payloads.
• Usage and billing data, including plan, credits, usage events, Stripe customer/subscription identifiers, invoice/payment metadata handled by Stripe, and API-key metadata. Card details are handled by Stripe and are not intended to be stored by the app.
• Support and contact data submitted through forms or support channels, including message text, contact details, and related metadata.
• Technical data such as device/browser metadata, approximate location from network data, IP address, security/rate-limit signals, logs, diagnostics, and cookies or local storage described in the Cookie Policy.

2. How information is used

Information is used to provide and secure the product, authenticate users, generate and store review-ready content packages, operate dashboards and APIs, prevent abuse, provide support, process approved billing workflows, measure reliability and product usage, improve prompts and workflows, and comply with legal obligations.

User content should be treated as review material. ContentCrafter AI may process prompts and drafts with configured model providers to return outputs, but users remain responsible for reviewing outputs before publication.

3. Analytics, cookies, and third-party providers

Current product providers include Vercel hosting/platform logs, Clerk authentication, Payload CMS/PostgreSQL app and CMS storage, Vercel Blob media storage, Resend email, OpenRouter/model providers for AI generation, Stripe payment/billing infrastructure where enabled, and Sentry diagnostics when SENTRY_DSN is configured.

No standalone optional analytics or marketing pixel provider is approved in this codebase yet. If one is added, the provider must be categorized under the EXC-279 consent model and this policy must be updated before use.

4. How information is shared

Information may be shared with service providers that operate the product, process content, authenticate users, provide hosting/storage/email/payment/error-monitoring services, comply with law, protect rights and safety, complete a business transfer, or act with user consent. The product is not intended to sell personal information in the ordinary sense of selling a customer list for money.

5. Retention

Account, content package, usage, API-key, and billing metadata are retained while needed to provide the service, satisfy security/fraud-prevention needs, support auditability, or meet legal/accounting obligations. Contact messages, logs, backups, and diagnostics should be retained only as long as needed for support, reliability, security, and compliance. Final retention windows must be approved before public launch.

6. Children's privacy and sensitive content

ContentCrafter AI is not directed to children under 13 and is not approved for child-directed data collection. Do not submit children's personal information, medical records, diagnosis details, legal/financial advice requests, emergency information, or other sensitive regulated content unless the product later documents and approves a specific workflow for that data.

7. Choices and rights

Users may request access, correction, deletion, export, or restriction of certain personal information by contacting support@contentcrafter.ai. Users may also manage cookie categories through the cookie preferences control where non-essential cookies are used.

8. Security, international processing, and changes

The product uses reasonable administrative, technical, and organizational safeguards, but no internet service can be guaranteed completely secure. Information may be processed in locations where the operator and service providers operate. This draft policy should be updated when product features, providers, retention practices, or legal requirements change.