Privacy Policy

1. Who We Are

ContentAI (contentai.ca) is operated by S.N.R.C. Solutions numériques, a sole proprietorship established in Québec, Canada ("ContentAI," "we," "us," or "our").

Person in Charge of the Protection of Personal Information: Slim, founder of ContentAI, reachable at support@contentai.ca.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service, in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

• Account information: name, email address, and password (stored in hashed form) when you register.
• Billing information: your subscription plan and billing history. Payment card details are collected and processed directly by Stripe, our payment processor — we do not receive or store your full card number. We remain the merchant of record for your purchase.
• Content data: the prompts, brand information, media, and generated content you create or upload through the Service.
• Connected account data: authentication tokens and basic profile information from third-party social media accounts you choose to connect (e.g., Twitter/X, Facebook, Instagram, LinkedIn, TikTok, YouTube, Pinterest), obtained through the relevant platform's OAuth authorization flow.
• Usage data: log data, device and browser information, and interactions with the Service, collected automatically to maintain and improve the Service.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and maintain the Service;
• Generate content on your behalf and publish it to connected accounts at your direction;
• Process payments and manage your subscription;
• Communicate with you about your account, service updates, or support requests;
• Detect, prevent, and address technical issues, fraud, or abuse;
• Comply with legal obligations.

We do not sell your personal information.

4. Who We Share Information With

We share personal information only as necessary to operate the Service, with the following categories of service providers:

• Supabase — database hosting and authentication infrastructure;
• Vercel — application hosting;
• Stripe — payment processing and billing;
• Anthropic — AI text generation (the prompts, brand information and context you provide are sent to generate your content);
• Google (Gemini) — AI image generation for Image Packs (your image prompt, and any reference image you provide, are sent to generate your image);
• Zernio — connecting your social media accounts and publishing to them, including scheduled publishing;
• Buffer — one-click publishing ("Post Now") to the Twitter/X, TikTok and YouTube accounts you choose to connect through your own Buffer account;
• Cloudflare — DNS and bot protection (Turnstile) on sign-in and sign-up;
• Upstash — rate limiting to prevent abuse (processes request metadata such as an IP address or account identifier);
• Resend — transactional email delivery.

These providers are contractually restricted from using your information for any purpose other than providing services to us. Some of these providers may store or process data outside Québec, including in the United States. Where this occurs, we take reasonable steps to ensure a comparable level of protection is maintained, as required under Law 25.

When you choose a password, we check it against the Have I Been Pwned breached-password service using an anonymized 5-character prefix of its hash (k-anonymity). Your password, the full hash and your email address are never sent to that service.

We may also disclose information where required by law, regulation, or valid legal process.

5. Data Retention

We retain your personal information for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. If you delete your account, your data is removed in accordance with Section 7 below.

If a paid subscription is canceled and not renewed, your account is downgraded to Free and your generated content — AI-generated posts, generated images, and uploaded media assets — is kept for 15 days and then permanently deleted. Resubscribing within those 15 days restores full access with that content intact. Your account, brand profiles, billing history, and the record of posts already published are not affected by this purge (full account deletion is covered in Section 7).

6. Security

We implement reasonable technical and organizational measures to protect your personal information, including row-level access controls on our database, restricted service credentials, and regular security audits. No system is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under Law 25 and PIPEDA, you have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Withdraw consent to certain uses of your information, subject to legal or contractual restrictions;
• Data portability — request your data in a structured, commonly used format;
• Deletion — request that we delete your personal information.

You can export your data or delete your account at any time directly from your account settings. For any other request, contact support@contentai.ca. We will respond within the timeframe required by applicable law.

8. Cookies

We use cookies and similar technologies necessary for authentication and core functionality of the Service. We do not currently use third-party advertising cookies.

9. Children's Privacy

The Service is not directed at individuals under the age of majority in their jurisdiction, and we do not knowingly collect personal information from children.

10. Data Breach Notification

In the event of a confidentiality incident involving personal information that presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and affected individuals as required under Law 25.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service before they take effect.

12. Contact Us

For any question or request regarding this Privacy Policy or your personal information, contact our Person in Charge of the Protection of Personal Information at support@contentai.ca.

If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada.