Privacy policy

1. Overview

This Privacy Policy explains how AI Content Desk(“we”, “us”, or “our”) handles personal data when you visit aicontentdesk.com and use our application.

For account, billing, and usage data, we act as the data controller. For the keywords, brand materials, and content you upload or generate (your Customer Content), you are the controller and we act as your processor under our Data Processing Agreement. If you have any questions, contact us at legal@aicontentdesk.com.

2. Data we collect

We collect only what we need to provide the service:

• Account data — your name, email address, and a securely hashed password.
• Customer Content — seed keywords, uploaded brand samples and style guides, briefs, drafts, generated articles, and any web pages you ask us to analyse.
• Usage and log data — actions you take, feature and credit usage, IP address, device and browser details, and timestamps.
• Billing data — a payment-provider customer reference and your subscription and credit status. We never receive or store full card numbers.
• Communications — messages you send us through support or our contact form.

3. How we use your data

We process personal data on the following legal bases:

• To provide the service (performance of our contract) — running the workflow, managing your account, and processing payments.
• Our legitimate interests — keeping the service secure, preventing fraud, fixing problems, and improving the product using aggregated, anonymised insights.
• Your consent — optional marketing emails and any non-essential cookies, which you can withdraw at any time.
• Legal obligations — tax, accounting, and compliance records.

We do not sell your personal data, and we do not use your Customer Content for advertising.

4. AI content processing

To generate your content, we transmit the relevant inputs (such as your keywords, brief, and brand profile) to trusted AI model providers, which return results to you. We send only what is needed to produce the output you request.

We require these providers to process your Customer Content solely to deliver the service and not to train their models on it. Our AI generates content at your direction; it does not make decisions that produce legal or similarly significant effects about you.

5. Sharing and sub-processors

We share data with vetted sub-processors that process it only on our instructions, under data-processing agreements. These include:

• Infrastructure and hosting — our database, authentication, and application hosting providers.
• AI model providers — used to generate your content (see section 4).
• SEO and research data providers — used to gather search and competitor data.
• Payments — Stripe (see section 6).

A current list of our sub-processors is available on request at legal@aicontentdesk.com. We do not sell or rent personal data to third parties.

6. Payment processing

Payments are processed by Stripe (Stripe, Inc. and its EU/UK affiliates) acting as our payment processor. Your card details are collected and processed by Stripe through its hosted checkout under its own terms and privacy policy. AI Content Desk never sees or stores full card numbers.

We store only a payment-provider customer reference and a mirror of your subscription status (plan, status, and renewal date) to power your billing page and support requests. Stripe is named as a sub-processor under its Data Processing Agreement.

7. Cookies

We use strictly necessary cookies to keep you signed in and to secure your session. These are required for the application to work and do not need consent.

We do not use advertising cookies. If we introduce optional analytics in future, we will ask for your consent first and update this policy.

8. Your rights

Under the GDPR you may access, rectify, erase, restrict, port, or object to the processing of your personal data, and withdraw consent at any time.

To exercise any of these rights, email legal@aicontentdesk.com; we respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Data retention

We keep personal data only as long as we need it:

• Account data — for the life of your account and a short period after closure, then deleted or anonymised.
• Customer Content — until you delete it or close your account, subject to routine backup cycles.
• Billing and tax records — for the period required by law.
• Logs — for a limited period to support security and reliability.

10. International transfers

Some of our providers are located outside the European Economic Area. Where personal data is transferred internationally, we rely on an adequacy decision, the EU–US Data Privacy Framework, or Standard Contractual Clauses together with appropriate safeguards, so that your data continues to be protected to the standard required by EU law.

11. Security

We protect your data with encryption in transit and at rest, row-level access controls, least-privilege access, and segregated environments. No system is perfectly secure, but we work to safeguard your data and will notify the relevant supervisory authority, and affected users where required, of any qualifying personal-data breach.

12. Children

AI Content Desk is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us personal data, contact legal@aicontentdesk.com and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the new version here with a revised effective date and, where changes are material, notify you directly.

14. Contact

AI Content Desk is the data controller for the account, billing, usage, and communications data described in this policy. For any privacy question or to exercise your rights, contact legal@aicontentdesk.com.

We may ask for information needed to verify your identity before completing a data-rights request.