Privacy Policy

1. What We Collect

Account Data

• Email address and name (when you register)
• Hashed password (we never store plain text)
• IP address (for security and abuse prevention)

Usage Data

• Sessions, sources, and destinations you create
• Collected content items and AI-processed results
• Pipeline run logs (timestamps, item counts, token usage)

API Keys You Provide

• Anthropic, OpenAI, Telegram, Threads API keys
• Keys are encrypted at rest using AES-256 encryption
• We never share your API keys with anyone

Content Data

• RSS feeds, Telegram posts, YouTube descriptions, Instagram captions collected by your pipelines
• AI-generated content briefs, headlines, and post drafts
• Edited and published post content

2. How We Use Your Data

• To provide and improve the ContentHub service
• To process content through AI providers (using YOUR API keys)
• To publish posts to your configured destinations
• To track usage against your plan limits
• To prevent abuse and enforce rate limits
• To send transactional emails (verification, password reset)

We do NOT:

• Sell your data to third parties
• Use your content to train AI models
• Share your API keys with anyone
• Display ads or share data with advertisers

3. Third-Party Services

• Anthropic (Claude API) — processes content using your API key
• OpenAI (GPT API) — processes content using your API key
• Telegram Bot API — publishes to your channels using your bot token
• Meta Threads API — publishes to your Threads account via OAuth
• Instagram — scrapes public profiles only (no login required)
• Neon (PostgreSQL) — hosts our database in EU (Frankfurt)
• Vercel — hosts the application

4. Data Storage & Security

• Database hosted on Neon PostgreSQL in EU (Frankfurt, Germany)
• Application hosted on Vercel (global edge network)
• All data encrypted in transit (TLS/HTTPS)
• API keys encrypted at rest (AES-256)
• Passwords hashed with bcrypt (12 salt rounds)

5. Data Retention

• Account data: retained while your account is active
• Collected content items: retained for 90 days, then auto-deleted
• Run logs: retained for 30 days
• Deleted account data: permanently removed within 30 days

6. Your Rights

You can export all your data, delete your account, update your information, and opt out of non-essential emails at any time.

For EU users (GDPR): you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Contact us at contact@cookiesoftware.io.

7. Cookies

We use only essential cookies for session authentication. No tracking, analytics, or advertising cookies.

8. Children

ContentHub is not intended for users under 16. We do not knowingly collect data from children.

9. Changes

We may update this policy. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

10. Contact

Yurii Skyba
Email: contact@cookiesoftware.io
Location: Valencia, Spain