Privacy Policy

ContentLoop (“we”, “us”, or “our”) is a SaaS platform that helps creators and marketers turn viral video patterns into publishable social-media content. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

By using ContentLoop you agree to the practices described here. If you do not agree, please do not use the service.

1. Data We Collect

Account & profile

When you sign up we collect your email address and, optionally, a display name. This information is stored securely in our database (Supabase / PostgreSQL) and is used to identify your account and send transactional emails.

Social platform OAuth tokens

When you connect LinkedIn, Instagram, TikTok, or Facebook we receive and store OAuth access tokens on your behalf. These tokens are used exclusively to publish content and pull engagement metrics at your direction. We request only the minimum scopes necessary:

• LinkedIn — profile read, email read, member posts write and read (post-read access is used solely to display engagement metrics — likes, comments, shares — for posts you published through ContentLoop, shown privately in your own Metrics Hub; we do not access or store data belonging to any other LinkedIn member)
• Instagram — business content publish, insights read (via Facebook Login)
• TikTok — video upload and publish
• Facebook — pages manage posts, pages show list

Tokens are encrypted at rest. You can revoke access at any time from the Settings page or directly through each platform's own security settings.

Video URLs & transcripts

When you ingest a video we send its URL to our transcript provider (Supadata / SocialKit) to retrieve a text transcript. The transcript is passed to our AI pipeline to extract content patterns and is then stored in your account so you can re-use those patterns. We do not download or store the video file itself.

Brand Vault answers

The Brand Vault questionnaire collects information about your brand, goals, and competitors. These answers are processed by AI to generate a brand context summary and are stored in your account. They are never shared with other users or used to train AI models.

Generated content & metrics

Scripts, topic ideas, carousel drafts, and graphic images you generate are stored in your account. If you manually enter or import engagement metrics (views, likes, saves) we store these to calculate performance scores that improve future content suggestions.

Billing information

Payment processing is handled entirely by Stripe. ContentLoop never sees or stores your full card number. We store only your Stripe customer ID, subscription plan, and credit balance.

Usage data & cookies

We set a session cookie (via Supabase Auth) that keeps you logged in. We do not set advertising cookies or share browsing data with third parties for marketing purposes.

2. How We Use Your Data

• To provide, operate, and improve the ContentLoop service
• To publish content to social platforms on your behalf when you click “Publish” or “Schedule”
• To generate AI-powered scripts, topic ideas, and graphics using your brand context
• To calculate win scores and personalise future content suggestions
• To process payments and manage your subscription via Stripe
• To send transactional emails (account confirmation, billing receipts) — no marketing emails without your consent

We do not sell your personal data. We do not use your content or answers to train AI models operated by Anthropic, Google, or any other provider.

3. AI & Third-Party Providers

ContentLoop uses the following third-party services to deliver its core functionality. Each provider has its own privacy policy and data-processing terms:

• Anthropic Claude — script generation, pattern extraction, brand analysis
• Google Gemini — image generation for graphics and carousels
• Tavily — web research for topic ideas
• Supadata / SocialKit — video transcript retrieval
• Stripe — payment processing and subscription management
• Supabase — database, file storage, and authentication
• Vercel — hosting and serverless functions

Data sent to AI providers (e.g. transcripts, brand answers, scripts) is processed solely to return results to you. We use API configurations that opt out of provider model-training where available.

4. YouTube API Services

ContentLoop uses the YouTube API Services as part of our Brand Vault “Top Players” research feature. When you trigger this feature, we query YouTube's public search and video-statistics endpoints (using a server-side API key, not your personal Google or YouTube account) to find publicly available video metadata — titles, channel names, publish dates, and view counts — relevant to your industry niche. This data is used solely to generate aggregated, text-based strategic insights (positioning, content patterns, and performance signals) shown privately in your ContentLoop dashboard. We do not download, rehost, embed, or redistribute YouTube video content itself, and this feature never requires you to sign in with a Google account.

By using this feature, you also agree to be bound by the YouTube Terms of Service. Data obtained via the YouTube API is also subject to Google's Privacy Policy.

Research results derived from the YouTube API are stored as part of your Brand Vault data and are replaced in full each time you re-run this research feature. Like the rest of your account data, this information is deleted within 30 days of account deletion, consistent with the retention policy described in Section 5 below.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, we will delete your personal data, OAuth tokens, brand vault content, generated scripts, and metrics within 30 days, except where we are required to retain certain records for legal or financial compliance (e.g. billing history).

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — request that we delete your account and associated data
• Portability — request an export of your data in a machine-readable format
• Revoke social connections — disconnect any platform at any time via Settings

To exercise any of these rights, email us at hypestudio88@gmail.com.

7. Security

We apply industry-standard measures to protect your data: all connections use HTTPS/TLS, OAuth tokens are encrypted at rest, database access is restricted by row-level security policies, and cron jobs use secret-key authentication. No method of transmission or storage is 100% secure; we encourage you to use a strong password and to revoke social connections when they are no longer needed.

8. Children's Privacy

ContentLoop is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of ContentLoop after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please reach out:

ContentLoop
Email: hypestudio88@gmail.com