Privacy Policy

At Contento ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our content management system platform, website, and related services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password, and organization details when you create an account.
• Profile Information: Job title, profile picture, and biographical information you choose to provide.
• Content Data: Text, images, media, and other content you create, upload, or manage through the Service.
• Payment Information: Billing address and payment method details processed through our third-party payment providers.
• Communications: Information you provide when contacting our support team or participating in surveys.

Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

• Log Data: IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device Information: Device type, unique device identifiers, and screen resolution.
• Usage Data: Features used, actions taken, frequency and duration of activities, and performance metrics.
• API Usage Data: API endpoints called, request volumes, response times, and error rates.

Information from Third Parties

We may receive information about you from third-party sources, including identity verification services, payment processors, analytics providers, and integration partners you connect to the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service, including content management, API access, and user authentication.
• Account Management: To create and manage your account, process transactions, and send service-related communications.
• Personalization: To customize your experience, including interface preferences and content recommendations.
• Analytics: To understand how the Service is used, identify trends, and measure the effectiveness of features.
• Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Communication: To send you updates, security alerts, support messages, and, with your consent, marketing communications.
• Product Development: To develop new features, products, and services based on aggregate usage patterns.

3. Data Storage and Security

Your data is stored on secure servers provided by reputable cloud infrastructure providers. We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of data at rest using AES-256 encryption.
• Regular security audits and vulnerability assessments.
• Access controls and authentication mechanisms for internal systems.
• Automated backups and disaster recovery procedures.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing reasonable safeguards.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files placed on your device that help us improve the Service and your experience.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly, including authentication and security cookies.
• Analytics Cookies: Help us understand how visitors interact with the Service by collecting anonymous usage data.
• Preference Cookies: Remember your settings and preferences to provide a personalized experience.

For more information about our use of cookies, please see our Cookie Policy.

5. Third-Party Services

We work with third-party service providers to operate and improve the Service. These providers may have access to your personal information only to perform tasks on our behalf and are obligated to protect it. Our third-party providers include:

• Cloud Hosting: Infrastructure providers for data storage and processing.
• Payment Processing: Secure payment providers for subscription billing.
• Analytics: Services that help us understand usage patterns and improve the Service.
• Email Delivery: Providers for transactional and marketing email communications.
• Customer Support: Tools for managing support inquiries and communications.

We do not sell your personal information to third parties. We may share aggregated, non-identifiable data with partners for industry analysis and research purposes.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained for the duration of your account and up to 30 days after account deletion.
• Content Data: Retained until you delete it or close your account, after which it is purged within 30 days.
• Log Data: Retained for up to 12 months for security and analytics purposes.
• Billing Data: Retained for up to 7 years as required by tax and accounting regulations.
• Backup Data: Purged from backup systems within 90 days of deletion from primary systems.

After the applicable retention period, your data is securely deleted or anonymized. You may request earlier deletion of your data by contacting us, subject to any legal obligations that require us to retain certain information.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances.
• Objection: Object to the processing of your personal information for certain purposes.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@contento.io. We will respond to your request within 30 days.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention and service improvement.
• Consent: Processing based on your explicit consent, which you may withdraw at any time.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

We may transfer your personal data to countries outside the EEA. When we do, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

9. CCPA Compliance

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at privacy@contento.io or use the contact information provided below. We will verify your identity before processing your request.

10. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@contento.io.

If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last updated" date.
• Notify you by email or through a prominent notice within the Service.
• Provide a summary of the key changes where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.