ContentMate Logo

Privacy Policy

Last updated: August 2026

This Privacy Policy explains how ContentMate ("we", "us", "our") collects, uses, and protects information when you use our platform at app.contentmate.co.uk (the "Service").

1. Who We Are

ContentMate provides an AI-powered content marketing platform for businesses. If you have questions about this policy, contact us at privacy@contentmate.co.uk.

2. Information We Collect

Account information: Name, email address, company name, and password when you register.

Billing information: Subscription tier and payment status. Card details are stored by Stripe, not by us.

Content and inputs: Articles, briefs, brand voice settings, website URLs, and any other content you create or upload within the Service.

Connected account credentials: OAuth tokens for third-party platforms (Google Search Console, WordPress, Shopify, Facebook, LinkedIn, Instagram) when you connect them. Tokens are stored encrypted.

Usage data: Pages visited, features used, article generation events, and similar interaction data for improving the Service and enforcing plan limits.

Technical data: IP addresses, browser type, device identifiers, and logs generated by your use of the Service.

Communications: Any emails, support requests, or messages you send us.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Process your subscription and billing
  • Generate AI content using your inputs and connected data
  • Send transactional emails (email verification, billing notifications, password resets)
  • Send product update and onboarding emails (you may opt out at any time)
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations
  • Improve our models and product (using anonymised, aggregated data only — never your identified content)

4. AI Processing

Content you provide (articles, brand voice, website data, briefs) is sent to third-party AI providers (currently OpenAI) to generate outputs. These providers process data under their own privacy policies and data processing agreements. We do not permit providers to use your data to train their models under our agreements.

5. Sharing Your Information

We do not sell your personal data. We share it only:

  • With service providers: Stripe (payments), OpenAI (AI generation), Bunny CDN (static hosting), Migadu (email infrastructure for outreach), and other infrastructure providers acting under data processing agreements
  • With connected platforms: Google, Meta, LinkedIn, WordPress, Shopify — only the data necessary to perform integrations you have authorised
  • For legal compliance: Where required by law, regulation, or valid legal process
  • In a business transfer: In connection with a merger, acquisition, or asset sale, in which case we will notify affected users

6. Cookies

We use essential session cookies to keep you logged in, and analytics cookies to understand how the Service is used. No third-party advertising cookies are set. You can disable non-essential cookies in your browser settings, though this may affect Service functionality.

7. Data Retention

We retain your data for as long as your account is active. After account deletion or subscription expiry, we retain data for 30 days before permanent deletion to allow recovery. Billing records are kept for 7 years for tax and compliance purposes.

8. Security

We use industry-standard measures including encryption at rest and in transit, access controls, and regular security reviews. Despite these measures, no system is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

  • Access a copy of the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to certain processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

To exercise these rights, email privacy@contentmate.co.uk. We will respond within 30 days.

10. International Transfers

ContentMate operates from the United Kingdom. Your data may be processed by service providers in the United States and other countries. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

11. Children

The Service is not directed at persons under 18. We do not knowingly collect personal data from children. If you believe we have done so, contact us and we will delete the data promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect. The date at the top of this page reflects the latest revision.

13. Contact

For any privacy questions or to exercise your rights:

Email: privacy@contentmate.co.uk
Post: ContentMate, United Kingdom