Legal · privacy

Privacy policy

How we collect, use, and protect your personal data.

Effective · 13 July 2026Last updated · 13 July 2026

1. Overview

This Privacy Policy explains how AI Content Desk(“we”, “us”, or “our”) handles personal data when you visit aicontentdesk.com and use our application.

For account, billing, and usage data, we act as the data controller. For the keywords, brand materials, and content you upload or generate (your Customer Content), you are the controller and we act as your processor under our Data Processing Agreement. If you have any questions, contact us at legal@aicontentdesk.com.

2. Data we collect

We collect only what we need to provide the service:

  • Account data — your name, email address, and a securely hashed password.
  • Customer Content — seed keywords, uploaded brand samples and style guides, briefs, drafts, generated articles, and any web pages you ask us to analyse.
  • Usage and log data — actions you take, feature and credit usage, IP address, device and browser details, and timestamps.
  • Billing data — a payment-provider customer reference and your subscription and credit status. We never receive or store full card numbers.
  • Communications — messages you send us through support or our contact form.

3. How we use your data

We process personal data on the following legal bases:

  • To provide the service (performance of our contract) — running the workflow, managing your account, and processing payments.
  • Our legitimate interests — keeping the service secure, preventing fraud, fixing problems, and improving the product using aggregated, anonymised insights.
  • Your consent — optional marketing emails and any non-essential cookies, which you can withdraw at any time.
  • Legal obligations — tax, accounting, and compliance records.

We do not sell your personal data, and we do not use your Customer Content for advertising.

4. AI content processing

To generate your content, we transmit the relevant inputs (such as your keywords, brief, and brand profile) to trusted AI model providers, which return results to you. We send only what is needed to produce the output you request.

We require these providers to process your Customer Content solely to deliver the service and not to train their models on it. Our AI generates content at your direction; it does not make decisions that produce legal or similarly significant effects about you.

5. Sharing and sub-processors

We share data with vetted sub-processors that process it only on our instructions, under data-processing agreements. These include:

  • Infrastructure and hosting — our database, authentication, and application hosting providers.
  • AI model providers — used to generate your content (see section 4).
  • SEO and research data providers — used to gather search and competitor data.
  • Payments — Stripe (see section 6).

A current list of our sub-processors is available on request at legal@aicontentdesk.com. We do not sell or rent personal data to third parties.

6. Payment processing

Payments are processed by Stripe (Stripe, Inc. and its EU/UK affiliates) acting as our payment processor. Your card details are collected and processed by Stripe through its hosted checkout under its own terms and privacy policy. AI Content Desk never sees or stores full card numbers.

We store only a payment-provider customer reference and a mirror of your subscription status (plan, status, and renewal date) to power your billing page and support requests. Stripe is named as a sub-processor under its Data Processing Agreement.

7. Cookies

We use strictly necessary cookies to keep you signed in and to secure your session. These are required for the application to work and do not need consent.

We do not use advertising cookies. If we introduce optional analytics in future, we will ask for your consent first and update this policy.

8. Your rights

Under the GDPR you may access, rectify, erase, restrict, port, or object to the processing of your personal data, and withdraw consent at any time.

To exercise any of these rights, email legal@aicontentdesk.com; we respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Data retention

We keep personal data only as long as we need it:

  • Account data — for the life of your account and a short period after closure, then deleted or anonymised.
  • Customer Content — until you delete it or close your account, subject to routine backup cycles.
  • Billing and tax records — for the period required by law.
  • Logs — for a limited period to support security and reliability.

10. International transfers

Some of our providers are located outside the European Economic Area. Where personal data is transferred internationally, we rely on an adequacy decision, the EU–US Data Privacy Framework, or Standard Contractual Clauses together with appropriate safeguards, so that your data continues to be protected to the standard required by EU law.

11. Security

We protect your data with encryption in transit and at rest, row-level access controls, least-privilege access, and segregated environments. No system is perfectly secure, but we work to safeguard your data and will notify the relevant supervisory authority, and affected users where required, of any qualifying personal-data breach.

12. Children

AI Content Desk is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us personal data, contact legal@aicontentdesk.com and we will delete it.

13. Free trial program

While we run a free-access trial programme, this section explains what is different about trial accounts. Everything else in this policy applies to trial accounts exactly as it does to paid accounts.

Purpose. We use trial account data for one purpose only: diagnostics and support — investigating errors and failures, reproducing defects, and responding to support requests. We do not use trial data to train or fine-tune any AI model, we do not use your content, results, or output for marketing (testimonials or case studies require your separate, specific consent), and we do not use it for any product-analytics purpose beyond diagnostics.

Marketing consent. Claiming a trial may require agreeing to receive occasional marketing email about the trial and the product. You can withdraw that consent at any time — from your account settings, or with the one-click unsubscribe link in any marketing email — with no friction and no need to contact support. Withdrawing consent is recorded as a new event; it never rewrites the fact that consent was originally given.

Email delivery. Trial lifecycle email (welcome, usage nudges, and renewal reminders) is sent through Resend, our email delivery sub-processor, under the same data-processing safeguards as the sub-processors listed in section 5.

After the trial. If your trial ends without converting to a paid plan, your account and content are retained under the same retention rules as any other account (section 9) — your work stays readable and exportable, it is not deleted because the trial ended.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the new version here with a revised effective date and, where changes are material, notify you directly.

15. Contact

AI Content Desk is the data controller for the account, billing, usage, and communications data described in this policy. For any privacy question or to exercise your rights, contact legal@aicontentdesk.com.

We may ask for information needed to verify your identity before completing a data-rights request.