Privacy Policy

1. Introduction

Welcome to ContentFlow ("we," "our," or "us"). ContentFlow is a SaaS platform available at https://contentflow.cool that helps users repurpose content across multiple formats and platforms. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By accessing or using ContentFlow, you agree to this Privacy Policy. If you do not agree, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign up via Google OAuth or Kakao OAuth, we receive your name and email address from the respective provider.
• User Content: Any content you create, upload, or generate through our platform, including original posts, repurposed content, and associated metadata.
• Payment Information: When you subscribe to a paid plan, payment details (credit card number, billing address) are collected and processed directly by Stripe. We do not store your full payment card details on our servers.
• Communications: Any messages or feedback you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and interaction patterns.
• Device Information: Browser type, operating system, device type, and screen resolution.
• IP Address: Collected for security, analytics, and approximate geolocation purposes.

3. How We Use Your Information

• To provide, maintain, and improve our service.
• To process your transactions and manage your subscription.
• To generate repurposed content using AI services (OpenAI, Anthropic, Google Gemini).
• To publish content to third-party platforms (e.g., Twitter) on your behalf when you authorize such actions.
• To send service-related communications and updates.
• To detect, prevent, and address technical issues and security threats.
• To comply with legal obligations.

4. Third-Party Services

We integrate with the following third-party services, each governed by their own privacy policies:

• Google OAuth: Authentication and account creation.
• Kakao OAuth: Authentication and account creation.
• Twitter (X) API: Content publishing to your Twitter account when authorized.
• Supabase: Database hosting and user authentication infrastructure.
• Stripe: Payment processing. Stripe collects and processes payment information in accordance with PCI DSS standards. See Stripe's Privacy Policy.
• OpenAI / Anthropic / Google Gemini: AI content generation. Your content may be sent to these APIs for processing. We do not use your content to train third-party AI models.

5. Cookies and Tracking Technologies

We use cookies strictly for authentication and session management purposes. These are essential cookies required for the service to function properly. We do not use advertising or third-party tracking cookies.

• Session Cookies: To maintain your logged-in state and authentication session.
• Preference Cookies: To remember your settings such as theme preference and language.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure database hosting via Supabase, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at the email address provided below. We will respond within 30 days.

9. Your Rights Under CCPA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: Opt out of the sale of your personal information. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

10. Children's Privacy

ContentFlow is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including standard contractual clauses where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of ContentFlow after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@contentflow.app