Contentor legal
Privacy overview
Last updated: 15 August 2026
This factual overview explains how Contentor (legal entity to be confirmed) handles information. The controller identity, legal bases, request channel and transfer documentation below remain launch-gated configuration items; they must be completed before paid service is enabled.
Controller and contact
Controller: Contentor (legal entity to be confirmed). Address: Registered business address to be confirmed before launch.. Privacy requests: Legal contact email to be confirmed before launch.. These details must be replaced with the final legal entity and working request channel before launch.
Account data
We receive your Clerk user ID, name and email, and Stripe customer and subscription information when you use billing.
Customer content
Uploaded photographs, brand descriptions, audience profiles and voice examples are processed to create content for your account. Uploaded photographs may be sent to OpenAI vision models for tagging and focal-point detection and to OpenAI image editing for requested outpaint operations. Generation prompts derived from your brand, audience and voice inputs are sent to Google's Gemini image model (Nano Banana Pro / gemini-3-pro-image).
Uses and service providers
We use account, billing, uploaded-content and operational information to provide requested features, authentication, billing, support, security and service operations. Google, OpenAI, Vercel, Neon, Cloudflare R2, Clerk, Stripe, Resend, Upstash and Sentry support the service. Their roles and the information involved are listed in the sub-processors inventory. The current application has no analytics or advertising SDK and no configured cross-context behavioral advertising flow.
International processing
Some service providers may process information outside the European Economic Area, including providers based in the United States. The controller identity, legal bases, provider DPAs and the final transfer mechanism and contractual documentation must be confirmed and published before launch.
Retention
Contentor deletes an uploaded or generated asset 90 days after creation unless a project using it was touched in the last 90 days. Rendered images and video are cleared 90 days after the post was last touched, while the post, caption and layout survive. After a subscription cancellation, reusable library media is deleted 30 days later. Retention may be adjusted where applicable law requires a different period.
Your rights and account controls
Depending on where you live, applicable law may give you rights over your personal information, including access, correction, deletion, restriction, objection or portability. Signed-in users can export their account data and delete their account and associated stored media from the dashboard. Privacy requests can be sent to Legal contact email to be confirmed before launch.; the final request-handling procedure and SLA must be confirmed before launch.
United States privacy choices
The current product inventory does not sell or share personal information for cross-context behavioral advertising, and no advertising cookies are enabled. Whether a particular US state law applies, which notices and request methods are required, and whether any opt-out or Global Privacy Control handling is needed must be validated against the final business model and counsel's advice.