Privacy Policy

1. Introduction

At Content OS ("we," "our," "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our content generation and social media management platform ("Service").

2. Definitions

"Personal Data"

Any information relating to an identified or identifiable natural person, including but not limited to names, email addresses, IP addresses, and social media account information.

"Processing"

Any operation performed on Personal Data, whether automated or not, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, or erasure.

"Data Controller"

Content OS (Systems That Scale Ltd.), who determines the purposes and means of Processing Personal Data. For business customers, we act as both a Data Controller and a Data Processor.

"Data Processor"

An entity that processes Personal Data on behalf of the Data Controller, including our cloud service providers, payment processors, and analytics providers.

"Special Category Data"

Sensitive personal data including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation. We do not intentionally collect or process Special Category Data.

"Data Protection Laws"

The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and any other applicable data protection legislation.

3. Supervisory Authority

The Information Commissioner's Office (ICO) is the UK's independent authority set up to uphold information rights. As a UK-based company, we operate under the supervision of the ICO.

You have the right to lodge a complaint with the ICO if you believe we have not handled your Personal Data in accordance with Data Protection Laws. The ICO can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

Website: www.ico.org.uk

4. Information We Collect

Personal Data:

  • Name and contact information
  • Account credentials
  • Payment information
  • Company information (if applicable)

Social Account Information:

  • Connected social media account credentials
  • Profile information from social platforms
  • Post content and engagement metrics
  • Analytics and performance data

Usage Information:

  • Log data and analytics
  • Device and browser information
  • IP address and location data
  • Content creation and scheduling data

5. Legal Basis for Processing (UK GDPR Compliance)

We process your Personal Data based on the following lawful bases:

  • Consent: When you explicitly agree to the processing of your data, such as connecting social media accounts.
  • Contract: Processing necessary to provide our services and fulfill our contractual obligations.
  • Legal Obligation: When required to comply with UK laws and regulations.
  • Legitimate Interests: For purposes that benefit our business while respecting your rights and freedoms.

6. How We Use Your Information

  • To provide and maintain our content generation platform
  • To manage your social media accounts and schedule posts
  • To analyze social media performance and generate reports
  • To process payments and manage subscriptions
  • To improve and personalize our services
  • To communicate important updates and information
  • To prevent fraud and ensure platform security
  • To comply with legal obligations

7. Information Sharing

We may share your information with:

  • Social media platforms for account integration
  • Payment processors for subscription management
  • Analytics providers to improve our service
  • Cloud storage providers for data backup
  • Legal authorities when required by law

We do not sell your personal information to third parties for marketing purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • End-to-end encryption for data transmission
  • Secure data storage with encryption at rest
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response procedures

9. Your Rights Under UK GDPR

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the ICO

10. International Data Transfers

As a UK-based company, we primarily store and process your data within the UK. However, we may transfer your data to countries outside the UK and European Economic Area (EEA) when necessary for providing our services. When we do, we ensure at least one of the following safeguards is in place:

  • The country has been deemed to provide an adequate level of protection for Personal Data by the UK Government through an adequacy regulation
  • We have implemented appropriate safeguards such as the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses (SCCs)
  • You have provided explicit consent to the proposed transfer after being informed of any potential risks
  • The transfer is necessary for the performance of a contract between us or the implementation of pre-contractual measures

For more information about specific mechanisms used for international transfers, please contact our Data Protection Officer.

11. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential platform functionality
  • Performance monitoring
  • User preference management
  • Analytics and improvement

You can manage cookie preferences through your browser settings. Our cookie policy provides detailed information about the types of cookies we use.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect or process personal information from children.

13. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through our platform or via email.

13. Contact Us

For privacy-related inquiries, to exercise your rights, or to contact our Data Protection Officer:

Data Protection Officer: dpo@contentos.com

Privacy Team: privacy@contentos.com

Company Details:
Systems That Scale Ltd.
Glenroy, Whitchurch Road
Chester, CH3 6AE
United Kingdom

Last updated: 2/25/2025