Privacy Policy

Last updated: 25 September 2026

1. Who we are

ContentPilot is operated by Clobie Enterprise Limited (“ContentPilot”, “we”, “us”, “our”), a company registered in the United Kingdom.

For any privacy question, request, or complaint, contact us at privacy@usecontentpilot.com.

2. Scope

This policy covers app.usecontentpilot.com and usecontentpilot.com, and applies wherever you access them from. It doesn’t cover third-party sites we link to, or the platforms you choose to connect your account to (X, TikTok, Instagram, YouTube, LinkedIn). Their own privacy policies apply to how they handle your data.

3. Information we collect

Account information. Your name, email address, and password (or, if you sign in with Google, the basic profile information Google shares with us: your name, email, and profile picture).

Content and brand information. The niche, primary platform, posting goal, tone of voice, and content preferences you set during signup or in Brand settings; any social media handles you add; content ideas, scripts, hooks, and posts you create or save; images and videos you upload to your Media Bank.

Connected social accounts. If you connect a social account to publish or schedule posts, we store which platform and account you’ve connected (e.g. “Instagram: @yourhandle”) so we know where to publish. See Section 6 for how this actually works.

Billing information. If you subscribe to a paid plan, our payment processor Stripe collects your payment details directly. We never see or store your full card number. We keep a record of your subscription status and billing history.

Technical and usage information. Standard web request data (IP address, browser type, pages visited, timestamps), authentication session data, and usage logs we use for rate-limiting and abuse prevention (e.g. daily generation limits).

Support communications. Anything you send us via email or in-app support requests.

4. How we use your information

We use your information to:

  • create and maintain your account, and keep you signed in (necessary to provide the service)

  • generate personalised content ideas, plans, and brand analysis based on your niche, platform, goals, and brand inputs (necessary to provide the service)

  • let you publish or schedule posts to social accounts you’ve connected (necessary to provide the service)

  • process payments and manage your subscription, if you’re on a paid plan (necessary to provide the service / legal obligation for financial record-keeping)

  • enforce daily/plan usage limits and prevent abuse of the service (legitimate interest in keeping the service reliable and fair to all users)

  • respond to support requests (necessary to provide the service)

  • keep the service secure and investigate misuse (legitimate interest in protecting the service and our users)

We do not use your data for advertising, and we do not sell your data to anyone, ever.

5. AI-generated content

ContentPilot’s AI features (content ideas, brand analysis, “remix from a link” video analysis) are powered by Google’s Gemini API. When you use these features, the relevant inputs, such as your niche/brand context, a topic or prompt, or a video/image you ask us to analyse, are sent to Google solely to generate the output you asked for. We don’t use your content to train our own models, and we don’t retain your prompts beyond what’s operationally necessary to provide the feature (e.g. brief logging for debugging, kept only as long as described in Section 11).

Google’s own privacy terms for its API services govern how Google itself handles that data in transit.

6. Connected social accounts and publishing

If you choose to connect a social account (to publish or schedule a post through ContentPilot), the actual connection, including the OAuth login and the access tokens that let us post on your behalf, is handled by our infrastructure partner, Post for Me, not stored directly on our own servers. We store a reference to that connection (which platform, which account) so the app knows what’s connected, but the credentials themselves live with Post for Me. You can disconnect an account at any time from Settings, which revokes that access.

7. Trend and inspiration data

The trending videos and posts shown in Create and Trends are gathered from publicly available social media content using a data provider, Apify. This is public content from creators unrelated to you. We don’t scrape or process data about you through this feature, only about your niche’s public trending content.

8. Who we share information with

We share information with the following third-party service providers, only as needed to run the service:

Provider

What it’s for

Supabase

Our database, authentication, and file storage

Google (Gemini API)

AI content generation and analysis

Google (OAuth)

“Continue with Google” sign-in

Post for Me

Connecting to and publishing on social accounts you link

Apify

Gathering public trending content for Trends/inspiration

Stripe

Payment processing for paid plans

Vercel

Hosting the application

Sentry

Error monitoring, so we find out when something breaks

Framer

Hosting our marketing site (usecontentpilot.com) and counting visits to it

We may also share information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of ContentPilot or our users. If ContentPilot is ever acquired or merged, your information may transfer as part of that deal, subject to the same protections described here.

We do not sell your personal information, and we do not share it with anyone for their own advertising purposes.

9. Cookies

We set one cookie of our own: a session cookie from Supabase that keeps you signed in. There are no advertising cookies. On our marketing site (usecontentpilot.com), we use Framer’s built-in analytics to count visits. It sets no cookies and doesn’t identify you: to count unique visitors, it combines your IP address and browser details with a secret that changes and is deleted every day. The app itself runs no third-party analytics or tracking. Because our cookie is strictly necessary for the service to work, we don’t need to show you a consent banner for it. The one exception is under your control: if you choose to play an Instagram, TikTok or YouTube video inside Trends, that platform’s own player loads at that moment and may set its own cookies. Nothing from those platforms loads until you click a video, and we use YouTube’s no-cookie player so it stays quiet until you press play.

10. International data transfers

We’re a UK company, but some of our service providers (listed in Section 8) process data outside the UK, including in the United States. Where that happens, we rely on the providers’ own compliance with recognised data transfer safeguards (such as Standard Contractual Clauses or equivalent frameworks) to make sure your data stays protected wherever it’s processed.

11. How long we keep your information

  • Account and content data: for as long as your account is active. If you delete your account from Settings, we permanently delete your data within 30 days, except anything we’re legally required to keep longer.

  • Billing and invoice records: kept for 6 years after the relevant transaction, as required for UK tax and accounting purposes.

  • Server and security logs: kept for up to 90 days, then deleted.

  • Support requests: kept for up to 2 years after resolution, in case you follow up.

12. Your rights

Under UK GDPR, you have the right to:

  • access the personal information we hold about you

  • correct it if it’s inaccurate or incomplete

  • delete it (you can do this yourself for most data in Settings under Delete Account, or ask us directly for anything that isn’t self-service)

  • restrict or object to certain processing

  • receive a copy of your data in a portable format

  • withdraw consent at any time, where we rely on consent

To exercise any of these, email privacy@usecontentpilot.com. We’ll respond within a reasonable time and may need to verify your identity first.

If you’re unhappy with how we’ve handled your information, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.

13. Children

ContentPilot isn’t directed at, or intended for use by, anyone under 16. We don’t knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we’ll delete it.

14. Security

We use industry-standard measures to protect your data: encryption in transit (HTTPS) and at rest, and authenticated, application-level checks on every read and write so you can only ever access your own account data. No system is 100% secure, but we take reasonable steps to protect your information and will notify you if we become aware of a breach affecting your data, as required by law.

15. Changes to this policy

We may update this policy from time to time. If we make a material change, we’ll let you know by email or an in-app notice before it takes effect. The “Last updated” date at the top always reflects the current version.

16. Contact us

Clobie Enterprise Limited (trading as ContentPilot)

Email: privacy@usecontentpilot.com

Terms of Service · support@usecontentpilot.com