Privacy Policy

Last updated: July 11, 2026

1. Introduction

This Privacy Policy describes how Content Pilot ("ContentPilot", "we", "us", or "our") collects, uses, and protects your information when you use our content creation and social media management platform at contentpilot.media (the "Service").

Content Pilot is a sole proprietorship based in Pakistan. For questions about this policy, contact us at privacy@contentpilot.media.

2. What Information We Collect

We collect the following categories of information:

  • Account information — your name and email address, collected via Clerk authentication when you create an account.
  • Social media account connections — when you connect a social media platform (YouTube, Facebook, Instagram, Threads, X, or LinkedIn), we receive and store OAuth access tokens, refresh tokens, your connected account username/handle, and platform-assigned user, page, or business IDs.
  • Content — posts, captions, schedules, and other content you create or schedule through the platform.
  • Usage data — basic analytics about how you interact with the platform (e.g. features used, session duration).

3. How We Use Information

We use the information we collect to:

  • Authenticate you and operate your account.
  • Publish content to the social media platforms you have explicitly connected and authorized, only when you initiate or schedule such an action.
  • Display analytics and insights data pulled from connected platforms back to you in your dashboard.

We do not sell your data or share it with third parties for advertising purposes.

4. How We Store and Protect Information

  • All OAuth access tokens and refresh tokens are encrypted at rest (AES-256) before being stored in our database.
  • Data is stored in a PostgreSQL database (Neon) with access restricted to authorized application services only.

5. Third-Party Platforms

When you connect a third-party social media platform to ContentPilot, that platform's own privacy policy also governs how they handle your data. We encourage you to review their policies:

6. User Rights

  • You can disconnect any connected social media account at any time from your dashboard settings, which revokes ContentPilot's stored access to that account.
  • You can request full account deletion by contacting us — see our Data Deletion Instructions page.
  • You can request a copy of your data or ask questions by contacting privacy@contentpilot.media.

7. Data Retention

When you disconnect a social media account, its OAuth tokens are marked as revoked. The historical record is kept for a limited period for support and audit purposes. Full account deletion removes all associated data permanently — see our Data Deletion Instructions page for details.

8. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Service.

10. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@contentpilot.media.