Privacy Policy

Sovereign Data Policy

At ContentOps, we treat data as a liability, not an asset. We collect only what is strictly necessary to provision your account and deliver the “Sovereign Authority” framework.

1. Data We Collect

We collect the minimum information required to manage your account and communicate effectively:

  • Identification: First Name, Last Name.
  • Communication: Email address.
  • Geographic Context: Country Code (for compliance and tax attribution).

2. Lawful Basis for Processing

We process this data under two frameworks:

  • Performance of a Contract: We require your data to provision your account, deliver API keys, and grant access to the ContentOps Command Center.
  • Legitimate Interest: We use your email to provide essential service updates, infrastructure alerts, and tailored intelligence related to your usage of ContentOps tools.

3. Our Sub-Processors (The Data Footprint)

We minimize the touchpoints of your data. We rely on the following third-party infrastructure to maintain your account:

  • Stripe: Acts as our secure payment vault. They manage all billing, payment processing, and transaction records.
  • Google / Firebase: Provides our secure database and authentication hosting.
  • Brevo: Handles our transactional and lifecycle communication (onboarding, feature drops, and system status).

4. Data Minimization (What We Do NOT Store)

We believe in server-side sovereignty. Our own servers do not store:

  • Full billing or physical addresses.
  • Sensitive Credit Card Numbers (PCI compliance is handled entirely by Stripe).
  • Persistent IP tracking or browser fingerprinting.

5. Your Rights (DSAR)

You own your data footprint. You have the right to request access to or deletion of your information at any time.

How to execute a Data Subject Access Request (DSAR):

  1. Send an email to privacy@contentops.so.
  2. Use the subject line: “Data Deletion Request” or “Data Access Request”.
  3. We will authenticate your request and purge your record from our database (Firestore) and our communication hub (Brevo) within 72 hours.

6. Cookie & Tracking Policy

Our digital footprint is strictly necessary. We utilize only essential cookies (primarily for Firebase Authentication tokens) required to keep your session secure and active. We do not use third-party marketing pixels (e.g., Meta Pixel) or invasive tracking scripts.