Privacy Policy

This Privacy Policy explains how ContentOS ("we", "us", "our") collects, uses, and shares information in connection with the FactoryOS plugin and the ContentOS services available at contentosapp.com (collectively, the "Service"). By installing the FactoryOS plugin or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who We Are

ContentOS provides FactoryOS, a WordPress plugin that generates SEO articles using a pipeline of AI agents and publishes them to WordPress sites. The Service can be used in two ways:

• Standalone, using your own API keys ("BYOK – Bring Your Own Key"); or
• ContentOS Auto, where content generation is processed through our managed infrastructure under your subscription plan.

For any privacy-related question, contact us at [email protected].

2. Information We Collect

2.1 Account and License Information

When you obtain a license or subscription, we collect your email address, license key, plan type, site activation data, and payment status. Payments are processed by our payment provider (Stripe); we do not store your full card details on our servers.

2.2 Content Generation Inputs

When you run the pipeline, the plugin processes the inputs you provide, such as keywords, editorial angles, reader profiles, reference links, agent notes, and target site information. In ContentOS Auto mode, these inputs are transmitted to our servers and onward to AI providers (see Section 4) to generate your article.

2.3 Connected WordPress Sites

To publish content, the plugin stores connection details for the WordPress sites you connect, including site URLs and WordPress Application Passwords. Application Passwords are used solely to publish drafts and content to the sites you authorize. You can revoke them at any time from your WordPress site.

2.4 Usage and Telemetry Data

In ContentOS Auto mode, we collect operational telemetry to run and improve the Service, including: number of productions, agent durations, success and error rates, token usage, image generation counts, article types, and content locale. This telemetry is operational in nature and is associated with your license.

2.5 Technical Data

We may collect standard technical data such as IP address, plugin version, WordPress version, and request logs for security, debugging, and abuse prevention.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Generate and publish content according to your instructions;
• Manage licenses, subscriptions, quotas, and billing;
• Monitor performance, detect errors, and prevent abuse;
• Communicate with you about your account, updates, and support;
• Comply with legal obligations.

We do not sell your personal information.

4. Third-Party Services and Data Sharing

To deliver the Service, your content inputs and certain data are transmitted to third-party providers. Depending on your configuration, these may include:

• Google Gemini (Google LLC) — text and image generation, and grounded web search;
• OpenAI — text and image generation, when selected;
• Anthropic (Claude) — text generation, when selected;
• Stripe — payment processing for subscriptions and extra quota purchases;
• Your connected WordPress sites — where generated content is published.

In BYOK mode, requests are sent directly to the provider whose API key you supply, under that provider's own terms and privacy policy. In ContentOS Auto mode, requests are routed through our infrastructure to the configured provider.

We encourage you to review the privacy policies of these providers, as your data is also subject to their terms when transmitted to them. We share data with these providers only to the extent necessary to deliver the features you use.

5. Web Search (Grounding)

When the grounding/web search feature is enabled, the Discoverer and Researcher agents may send queries to a search provider (Google, or the native ContentOS search) to enrich content with current information. Search queries derived from your inputs are transmitted to that provider for this purpose.

6. Data Retention

We retain account, license, and telemetry data for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. Generated content is stored on your own WordPress sites; we do not retain copies of your published articles beyond what is necessary for processing and operational logging. You may request deletion of your account data as described in Section 8.

7. Data Security

We use reasonable technical and organizational measures to protect your information, including encryption of sensitive credentials at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

If you are in the European Economic Area or the United Kingdom, our lawful bases for processing include performance of a contract (providing the Service), legitimate interests (operating and securing the Service), and consent where required.

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

9. International Data Transfers

The Service and its providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes may be communicated by additional notice.