Privacy Policy

1. What we collect

• Account data — your email address, a display name if you provide one, and a securely hashed password. We never see your password in plain text.
• Business inputs — everything you type into Discovery and the rest of the app: your audience, your expertise, your offer ideas, and any notes you save.
• Generated work — the offers, offer stacks, content plans, and other output produced for you, stored so you can return to it.
• Subscription data — your subscription status, plan interval, renewal date, and the identifiers our payment processor assigns to you. We do not store your card number, CVC, or full billing details.
• Technical data — basic logs needed to run and secure the service, such as request timestamps, error traces, and IP addresses used for abuse prevention and rate limiting.

We do not use advertising trackers, and we do not sell or rent your personal information to anyone.

2. Why we use it

• To create and secure your account and sign you in.
• To run the product: save your work and generate results from your inputs.
• To process subscription payments and manage renewals and cancellations.
• To send transactional email — confirmation, password reset, billing notices.
• To debug failures, prevent abuse, and keep the service available.
• To comply with legal obligations.

We send product or marketing email only if you opt in, and every such message includes an unsubscribe link. Transactional email is not optional while you hold an account.

3. AI processing

To generate offers, offer stacks, and content plans, the relevant parts of your business inputs are sent to third-party AI model providers through our AI gateway. Those providers process the request and return a result.

We do not use your business inputs or generated work to train our own models. We instruct providers not to use content submitted through the API for model training, in line with their standard API data-handling terms. Only the context needed for the specific request is sent — never your password or payment details.

4. Who else processes your data

• Supabase — database, authentication, and file storage.
• Lovable — application hosting, server runtime, transactional email delivery, and the AI gateway.
• Stripe, Inc. — payment processing, subscription billing, and the billing portal. Stripe handles your card data directly under its own privacy policy.
• AI model providers — reached through the AI gateway, as described above.

Each of these acts as a processor on our behalf and is bound to use your data only to provide their service to us.

5. How long we keep it

Your workspaces — your business inputs and the work generated from them — are kept while your subscription gives you access to Contentpreneur. If you cancel, you keep full access until the end of the period you have already paid for. When that paid period ends and your subscription is no longer active, your workspaces, business inputs, and generated work are permanently deleted and cannot be recovered. Your sign-in account itself remains, so you can subscribe again later, but you will start with a new, empty workspace.

Support conversations you have with us through the in-app Support page are kept as part of your account, separately from your workspaces. If your workspaces are deleted, your support conversations remain so we can continue to help you with billing or account questions; they contain only what you and our support team wrote in them. When you delete your account entirely, your support conversations are deleted with it.

Some records are retained longer where the law requires it, most notably billing and tax records held by our payment processor. Backups are cycled out on a rolling schedule.

6. Security

Data is encrypted in transit and at rest. Access to your rows is enforced at the database level, so one account cannot read another’s data. Secrets and API keys are stored in an encrypted secret store and are only readable by server-side code. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit your profile and delete your workspaces in the app at any time.

For anything you cannot do in the app — including full account deletion or a data export — email info@contentpreneur.app and we will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

8. International transfers

Our infrastructure and processors are primarily located in the United States. If you use the service from outside the United States, your data is transferred to and processed there under appropriate safeguards.

9. Children

The service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes and contact

We will post any update to this policy on this page and change the “last updated” date. Material changes are announced by email.

Privacy questions and general support: info@contentpreneur.app.