ContentVelo

1. Introduction

ContentVelo ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media content management platform ("the Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: Full name, email address, password (stored in hashed form), and workspace name when you register
• Profile information: Any additional details you add to your profile or workspace settings
• Payment information: Billing details processed through our third-party payment processors. We do not store your full credit card number on our servers.
• Content data: Text, images, prompts, and other content you create, upload, or generate through the Service
• Communication data: Messages you send to our support team or feedback you provide

2.2 Information from Facebook (Meta)

When you connect your Facebook pages to the Service, we access:

• Facebook page names, IDs, and profile information
• Page access tokens (stored securely and encrypted)
• Page posts, insights, and engagement metrics
• Page follower counts and audience demographics (aggregated)

We only access the Facebook data necessary to provide the Service. We do not access your personal Facebook profile, private messages, or friend lists.

2.3 Information Collected Automatically

• Usage data: Features used, actions performed, content generated, credits consumed, and timestamps
• Device information: Browser type, operating system, device type, and screen resolution
• Log data: IP addresses, access times, pages viewed, and referring URLs
• Cookies and similar technologies: Session cookies for authentication, preference cookies, and analytics cookies (see Section 8)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: Create and manage your account, process content generation requests, schedule and publish posts, and deliver analytics
• AI content generation: Process your prompts and page data to generate relevant social media content using AI models
• Billing and payments: Process credit purchases, manage subscriptions, and send invoices
• Communication: Send account verification emails, service updates, security alerts, and respond to support requests
• Improvement: Analyze usage patterns to improve the Service, optimize AI model performance, and develop new features
• Security: Detect and prevent fraud, abuse, rate-limit violations, and unauthorized access
• Legal compliance: Comply with applicable laws, regulations, and legal processes

4. AI Data Processing

Our Service uses third-party AI providers to generate content. When you use AI features, the following data may be sent to AI providers:

• Your content prompts and generation parameters
• Page context information (page name, category, recent post themes) to improve content relevance
• Reference images you upload for image generation features

We do not send your personal information (name, email, payment details) to AI providers. AI-generated outputs are stored in your account and are not used to train third-party AI models on our behalf.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: With trusted third-party providers who assist in operating the Service (payment processors, cloud hosting, email delivery, AI providers), subject to confidentiality obligations
• Facebook (Meta): When you authorize us to publish content to your connected Facebook pages
• Legal requirements: When required by law, subpoena, court order, or governmental request
• Protection of rights: To protect our rights, privacy, safety, or property, or that of our users or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and sensitive data at rest
• Secure password hashing (bcrypt/Argon2)
• Encrypted storage of Facebook access tokens
• Rate limiting and brute-force protection on authentication endpoints
• Regular security audits and vulnerability assessments
• Role-based access controls for internal systems

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data as follows:

• Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Generated content: Retained in your account until you delete it or your account is closed.
• Usage logs: Retained for up to 12 months for analytics and security purposes, then anonymized or deleted.
• Payment records: Retained as required by tax and financial regulations (typically 7 years).
• Backups: Encrypted backups may retain data for up to 90 days after deletion from production systems.

8. Cookies and Tracking Technologies

We use the following types of cookies:

Essential cookies are required for the Service to function and cannot be disabled. You can manage functional and analytics cookies through your browser settings.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your data for specific purposes
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. International Data Transfers

Your data may be processed and stored in countries outside your country of residence. When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and compliance with applicable data protection frameworks.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (such as Facebook/Meta). We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service, sending an email notification, or displaying a prominent notice within the Service. Your continued use of the Service after the changes take effect constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: