Privacy Policy

Last updated: March 2025

1. Data Controller

Contant Brain ("we", "us") is the data controller for personal data processed through our Service.

2. Data We Collect

• Account data: email address, name (if provided via OAuth)
• Business data: business name, services, location, brand colors, logo
• Lead data: name, email, phone, message submitted through link-in-bio forms (with explicit consent)
• Usage data: pages visited, features used, anonymized analytics
• Payment data: processed by Stripe — we do not store card numbers
• Social media tokens: Meta OAuth tokens stored encrypted for publishing

3. Legal Basis (GDPR)

• Contract: processing account and business data to provide the Service
• Consent: lead form submissions, marketing emails
• Legitimate interest: analytics, security, service improvement

4. How We Use Data

To provide the Service, generate content, process payments, deliver notifications, improve the product, and comply with legal obligations.

5. Data Sharing

We share data only with: Supabase (hosting/database), Stripe (payments), OpenAI (content generation — only business descriptions, not personal data), Meta (publishing), Resend (emails). We do not sell personal data.

6. Data Retention

Account data is retained while the account is active. After deletion, data is removed within 30 days. Lead data is retained until deleted by the business owner.

7. Your Rights (GDPR/CCPA)

You have the right to: access, rectify, erase, port your data, restrict processing, and object to processing. Contact support@content-brain.com to exercise these rights.

8. Security

We use Row Level Security, encrypted connections (HTTPS), and follow industry best practices to protect your data.

9. International Transfers

Data may be processed in the US and EU. We ensure appropriate safeguards are in place (Standard Contractual Clauses where applicable).

10. Children

The Service is not intended for users under 18 years of age.

11. Changes

We will notify you of material changes via email or in-app notice.

12. Contact

Data protection inquiries: support@content-brain.com