Privacy Policy

This Privacy Policy explains how ContentOS ("Contentosapp", "we", "us", or "our") collects, uses, and shares information in connection with the Contentosapp Studio WordPress plugin and the services available at contentosapp.com (collectively, the "Service"). By installing the plugin or using the Service, you acknowledge the practices described in this Policy.

1. Who We Are

ContentOS provides Contentosapp Studio, a WordPress plugin that creates articles through a multi-stage editorial pipeline and delivers them to WordPress sites. The Service can be used in two ways:

• with your own supported provider API keys ("BYOK — Bring Your Own Key"); or
• through ContentOS Auto, where production is processed through our managed infrastructure under a free allowance or subscription plan.

For privacy-related questions, contact us at [email protected].

2. Information We Collect

2.1 Account, License, and Billing Information

When you obtain a license or subscription, we may collect your email address, license key, plan type, site activation data, and payment status. Payments are processed by Stripe. We do not store your full card details on our servers.

2.2 Content Production Inputs

When you run the pipeline, the plugin processes inputs you provide, such as keywords, editorial angles, reader profiles, reference links, agent notes, language, and target-site information.

• In BYOK mode, requests required for generation are sent to the supported provider configured with your API key, under that provider's terms and privacy policy.
• In ContentOS Auto mode, inputs required for production are transmitted to our infrastructure and onward to the providers configured for the Service.

2.3 Connected WordPress Sites

To deliver content, the plugin may store connection details for WordPress sites you authorize, including site URLs and WordPress Application Passwords. Application Passwords are used to perform authorized WordPress operations. You can revoke them from the connected WordPress site.

2.4 Usage and Operational Data

In ContentOS Auto mode, we collect operational data needed to run and support the Service. This may include production counts, stage durations, success and error events, provider usage, image counts, article types, content locale, and quota activity. This data may be associated with your account or license.

2.5 Technical Data

We may collect standard technical data such as IP address, plugin version, WordPress version, browser or request information, timestamps, and security or debugging logs.

3. How We Use Information

We use information to:

• provide, operate, maintain, and secure the Service;
• create and deliver content according to your instructions;
• manage accounts, licenses, subscriptions, quotas, and billing;
• monitor performance, diagnose errors, and prevent abuse;
• provide support and communicate service updates;
• comply with legal obligations.

We do not sell personal information.

4. Third-Party Services and Data Sharing

To provide features you choose, inputs and certain operational data may be transmitted to third-party AI, search, payment, and WordPress services. Depending on your configuration, these may include supported text or image providers, search providers, Stripe, and WordPress sites you connect.

In BYOK mode, requests are sent to the provider whose API key you supply. In ContentOS Auto mode, requests are routed through our managed infrastructure to configured providers. We share data only to the extent reasonably necessary to deliver, secure, and support the selected features.

Your data is also subject to a provider's terms and privacy policy when transmitted to that provider. Review the provider policies applicable to your configuration.

5. Web Search and Grounding

When web search or grounding is enabled, stages responsible for discovery and research may send queries derived from your inputs to a configured search provider to locate current information and sources.

6. Data Retention

We retain account, license, billing-status, security, and operational data for as long as reasonably necessary to provide the Service, support users, prevent abuse, resolve disputes, and comply with legal obligations.

Generated articles and editorial history are stored on WordPress sites involved in the production. In managed mode, inputs and outputs may be processed and retained temporarily or in operational logs as necessary to complete, diagnose, secure, and support the Service.

You may request deletion of eligible account data as described below.

7. Data Security

We use reasonable technical and organizational measures designed to protect information, including safeguards for sensitive credentials. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export personal data and to object to or restrict certain processing. To submit a request, contact [email protected]. We will respond as required by applicable law.

Where applicable, processing may rely on performance of a contract, legitimate interests, consent, or compliance with legal obligations. We do not sell personal information.

9. International Data Transfers

The Service and its providers may process data in countries other than your own, including the United States. Where required, appropriate safeguards will be used for international transfers.

10. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Policy from time to time. We will publish the updated version and revise the "Last updated" date. Material changes may be communicated through additional notice where appropriate or required.