Privacy Policy

ContentOS is operated by Akshita Singh. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service. “We,” “us,” and “our” refer to ContentOS/Akshita Singh. “You” refers to you, the user of our Service.

For privacy-related queries, contact us at privacy@contentos.in.

We collect the following categories of information:

• Account information: Your name, email address, and password (stored securely via Supabase Auth)
• Brand data: Website URLs, brand names, niches, and product information you provide
• Usage data: Content generated, features used, and generation counts
• Billing information: Subscription plan and payment method details (handled by Stripe — we do not store raw card numbers)
• Technical data: IP address, browser type, and device information collected automatically
• Analytics data: Anonymised product usage events (via PostHog)

We use your information to:

• Provide and improve the ContentOS Service
• Generate AI content tailored to your brand voice
• Process payments and manage your subscription
• Send transactional emails (account verification, billing receipts)
• Detect and prevent fraud or abuse
• Analyse product usage to improve features (using aggregated, anonymised data)
• Comply with applicable legal obligations

We do not sell your personal data to third parties. We do not use your brand data or generated content to train our AI models without your explicit consent.

ContentOS uses the following third-party services that may process your data:

• Supabase — Database and authentication (data stored in EU region)
• Stripe — Payment processing (PCI-DSS compliant)
• NVIDIA NIM / AI services — AI model inference for content generation
• Pollinations.ai — AI image generation
• Remove.bg — Background removal for product images
• PostHog — Product analytics (anonymised usage events)
• Resend — Transactional email delivery
• Vercel — Hosting and edge infrastructure

Each of these services has its own privacy policy. We encourage you to review them for the services relevant to your use.

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons (e.g., billing records, which we retain for 7 years as required under Indian tax law).

Depending on your location, you may have the following rights:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to certain processing activities

To exercise any of these rights, email us at privacy@contentos.in. We will respond within 30 days.

ContentOS uses cookies and similar technologies for:

• Authentication (session cookies via Supabase)
• Analytics (PostHog, anonymised)

We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling authentication cookies will prevent you from logging in.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest (via Supabase), and role-level security (RLS) on all database tables. Access to production data is restricted to authorised personnel only.

No system is completely secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

For questions about this Privacy Policy, contact us at privacy@contentos.in.