Privacy Policy

ContentPilot is a social media content management platform operated by Ellipse Studio (ABN 30 556 897 505) ("we", "us", "our"), an Australian business. This Privacy Policy explains how we collect, use, store, and protect your information when you use ContentPilot at ctpilot.com (the "Service").

The Service is offered to businesses in Australia and selected other countries. It is not currently offered in the United States or Canada. If you visit the sign-up page from there, we use your approximate country (from your internet connection, not your exact location) to show that page, and if you join the waitlist we keep your email address only to tell you when the Service becomes available.

By using the Service, you agree to the practices described in this policy. For any privacy-related questions, contact us at hello@ctpilot.com.

Account Information

When you register, we collect your email address and a hashed password. We never store your password in plain text.

Client and Brand Data

You may enter information about your clients including their business name, industry, brand voice, target audience, and website. This data is stored securely and used solely to generate and publish content on their behalf.

Your Clients' Details and the Emails We Send Them

If you add a client's email address, we store it to send that client the emails you ask for: links to review and approve posts, links to connect their social accounts, a request for permission to publish articles to their website, and, if you switch it on for that client, a weekly preview email every Monday listing the posts planned for their week. These emails are sent through Resend, carry your business name, and use your email address as the reply address. When you send a review link to an address you type, we keep only a protected (hashed) form of that address with the link.

Social Media Access Tokens

When you or your clients connect a social media account (Facebook, Instagram, Google Business Profile, Pinterest or LinkedIn), we receive and store OAuth access tokens issued by those platforms. These tokens allow us to publish content on your behalf. All tokens are encrypted at rest using AES-256-GCM encryption before being written to our database. We cannot publish to your accounts without an active, valid token that you have granted.

Website Credentials

When you connect a client's website, we store its address and the credential that lets us publish to it. For a WordPress site that is the user name and application password you give us. For a site built on Ellipse Edit it is the site's connection code. The credential is encrypted at rest using AES-256-GCM encryption before it is written to our database.

Content and Media

We store posts, captions, blog content, hashtags, and images generated or uploaded through the platform. This content belongs to you and your clients.

When your client reviews a post through a review link, we store the changes they make, any image they upload, their notes, and their choices of where each post should go, with the time of each choice.

Payment Information

Card payments are processed by Stripe and crypto payments by NOWPayments. We do not store card numbers or wallet keys. We keep the transaction confirmation and, for Stripe, your customer ID.

Usage Data

We collect basic usage data, such as which features you use, when agent runs are triggered, and credit usage, to operate and improve the Service.

When you sign up from a link on our website, we record which of our pages you signed up from, so we can tell which pages are useful. If you reached us from one of our ads, posts or listings, the short label on that link (for example, which ad it was) is kept in your browser and recorded with your account when you sign up. We do not use tracking cookies or third-party analytics for this.

When something fails, for example a post that could not be published, an alert with the error details and the client it concerns is sent to a private chat our team uses to fix problems.

To prevent abuse, we record the IP address of some requests, such as sign-ups, and count them over a one-hour window. The count starts again after the hour, but the address stays in that counter. The counter is not linked to your account.

We use the information we collect to:

• Provide, operate, and improve the ContentPilot platform
• Generate AI-assisted text using Anthropic (Claude) and images using OpenAI, on your behalf
• Publish content to connected social media platforms at your direction
• Process payments (Stripe for cards, NOWPayments for crypto) and manage your subscription
• Send transactional emails through Resend: account emails, billing receipts, and the review, connect, permission and weekly preview emails you send to your clients
• Respond to support requests and communicate about your account
• Comply with legal obligations

We do not use your data or your clients' data to train AI models. We do not sell your data to third parties.

When you connect a Facebook Page, Instagram Business account, Google Business Profile, Pinterest account, or LinkedIn profile or Page, we store an encrypted access token that allows us to publish content on your behalf. We request only the minimum permissions necessary to publish and manage posts. We do not access your private messages, contacts or follower lists. After a post is published, we read back its public results so you can see how it did: reactions, comments and shares on Facebook, likes and comments on Instagram, and your Google Business Profile's views, website clicks, calls and direction requests. We also record the follower count of each connected Facebook Page and Instagram account once a day. We store these numbers with the post and the client they belong to.

Alongside the token we keep only what publishing needs. From Pinterest: your username and the ID of the board posts are published to. From LinkedIn: your member ID and display name, or the ID and name of the LinkedIn Page posts are published to. We do not read your Pinterest or LinkedIn feed, connections, messages or email address.

You can revoke our access at any time by pressing Disconnect on the client's Connections page, which deletes the stored token immediately, or directly through each platform's security settings.

You can connect ContentPilot to an AI assistant, such as Claude (made by Anthropic) or ChatGPT (made by OpenAI), by signing in with your own ContentPilot login. On the consent screen you choose what the assistant may do. It can always see your clients, topic queues, post status and credit use, and, if you allow it, add topics to a client's queue and write drafts. It cannot approve, schedule or publish a post, or email a client.

The assistant sees only your own account, and only what you allowed. What it reads from ContentPilot is passed to the assistant's provider so it can answer you, and is handled under that provider's privacy terms (Anthropic, OpenAI), not this policy.

We keep a record of which assistants you have connected and what you allowed each one to do. For each request an assistant makes, we log which tool it used, when, whether it worked, how long it took and any error message. We do not see or store your conversation with the assistant.

You can disconnect an assistant at any time from your Account page, and it loses access straight away. You can also remove ContentPilot from the assistant's own settings.

If you connect a client's website, we send it the articles you approve, with their pictures, as drafts until you choose to publish them live. For a WordPress site, we use the user name and application password you give us only to work with that site: to send those articles and to read the site to check that they arrived. Disconnecting a WordPress site deletes the stored password immediately.

If the website is built on Ellipse Edit (made by Ellipse Studio, like ContentPilot), we also send it a monthly summary of that client's social media results, so it can appear in the website's monthly report.

ContentPilot relies on the following third-party services to operate. Each is subject to their own privacy policy:

All data is stored in Supabase-managed PostgreSQL databases hosted on AWS infrastructure. Media files are stored in Supabase Storage. Social media access tokens are encrypted at rest using AES-256-GCM before being written to the database, and decrypted only when needed to publish content.

We use encrypted connections (HTTPS/TLS), access controls, and regular security reviews. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

Our database and file storage are hosted by Supabase on AWS in Singapore. The website and app run on Netlify, and the AI providers, Stripe, Resend, NOWPayments and Telegram process data in their own regions, including the United States. If you are in Australia or the EU, your data may be transferred internationally. By using ContentPilot, you consent to this transfer.

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (such as billing records, which are kept for 7 years under Australian law).

Social media access tokens are deleted immediately upon disconnection of a platform or account closure.

Our public pages use Cloudflare Web Analytics, a small script that counts page views and measures how quickly pages load. It sets no cookies, stores nothing in your browser and does not follow you to other sites. We see totals only. It is not used inside your account or on the links we send your clients.

We use essential session cookies to keep you logged in and maintain application state. We do not use advertising or third-party tracking cookies. Stripe and Supabase may set their own cookies governed by their respective privacy policies.

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that we fix inaccurate or incomplete data
• Deletion: request that we delete your personal data ("right to be forgotten")
• Portability: request your data in a portable, machine-readable format
• Objection: object to certain uses of your data
• Withdraw consent: withdraw consent where consent is the legal basis

To exercise any of these rights, contact us at hello@ctpilot.com. We will respond within 30 days.

ContentPilot complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you believe we have mishandled your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you are located in the European Economic Area (EEA), our legal basis for processing your data is: contract performance (providing the Service you signed up for), legitimate interests (improving the platform, preventing fraud), consent (connecting social accounts), and legal obligation where required. You have the right to lodge a complaint with your local data protection authority.

Content you and your clients create using ContentPilot, including AI-generated posts, images, and blog content, belongs to you. We do not claim any ownership over content generated through the Service.

ContentPilot, its design, code, and all non-user-generated content remain the intellectual property of Ellipse Studio. You may not copy, reproduce, or reverse-engineer any part of the platform without our written permission.

ContentPilot is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top, and where changes are material, notify you by email. Continued use of ContentPilot after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints: