Privacy Policy

Effective October 4, 2026

This policy explains how ContentOS handles personal data in trycontentos.com, the app and ContentOS-hosted blogs, in line with Brazil's General Data Protection Law (LGPD). We are the controller of your account data. Everything else is covered by our Terms of Service.

What we collect

  • Account: name, email, password (stored hashed), language and, if you sign in with Google, your basic Google profile.
  • Brand and content: company details, website, brand guidelines, samples, uploaded logos and images, your prompts and the text, images and videos generated for you, and blog posts.
  • Billing: plan, subscription status and Stripe customer IDs. Card details are handled by Stripe; we never see or store them.
  • Usage: product events (such as signing up or generating content) and technical logs. Product analytics never include your IP address.
  • Blog visitors: page views with the IP address pseudonymized (hashed with a salt that changes daily), the browser's user agent and the referring page, used only to count views and filter bots. Raw views are deleted after 90 days; only daily totals remain.

We use only essential cookies: one to keep you signed in and protect forms and, if you choose to stay signed in, a longer-lived sign-in cookie. There are no advertising or third-party tracking cookies.

Why we use it

To provide the Service and process payments (contract); to secure, maintain and improve it and prevent abuse (legitimate interest); to send transactional emails such as confirmations and password resets; and to meet legal and tax obligations. We do not sell personal data.

Who processes it for us

  • Fly.io: hosting and database, in São Paulo, Brazil
  • Tigris: file storage and database backups
  • Stripe: payments
  • Resend: transactional email
  • PostHog: product analytics
  • Grafana Cloud: technical monitoring
  • Google: sign-in with Google, AI image and video generation, and web fonts requested by your browser (Google Fonts)
  • AI model providers (OpenAI, Anthropic, Google, and OpenRouter with the providers it routes to): AI text generation and AI visibility monitoring

Each receives only what it needs for its task, under its own terms. Some are outside Brazil, mainly in the United States; these transfers rely on the providers' contractual safeguards, as the LGPD permits.

Retention and security

We keep your data while your account is active. If you ask us to delete your account, we delete or anonymize your personal data within 30 days, except records the law requires us to keep, such as billing. Backups expire on a rolling basis. Data travels over HTTPS, passwords are hashed, and access is limited to people who need it.

Your rights

Under the LGPD you may confirm whether we process your data, access, correct or port it, have unnecessary data anonymized, blocked or deleted, learn whom we share it with, and withdraw consent. Write to us and we will reply within 15 days. You may also complain to Brazil's data protection authority (ANPD). The Service is not intended for anyone under 18.

Changes and contact

We will notify material changes by email or in the app. For privacy requests or questions, contact admin@trycontentos.com.