Privacy Policy

Alevate Spaces Pvt Ltd ("we", "our", or "us") operates ContentOS (the "Service"), a unified content operating system available at contentos.social and through our browser extension. This Privacy Policy explains what data we collect, how we use it, and your rights.

By using ContentOS you agree to this policy. If you do not agree, please stop using the Service.

1. Information We Collect

Account Information

When you register we collect your name, email address, and password (stored as a one-way hash). If you sign in via OAuth (Google, etc.) we receive your name, email, and profile picture from that provider.

Connected Social Accounts

When you connect a social media account (Instagram, Facebook, LinkedIn, X/Twitter, YouTube, etc.) we store the OAuth access and refresh tokens required to post on your behalf. We do not store your social media passwords.

Content You Create

We store the posts, captions, images, videos, ideas, and scheduled content you create or upload inside ContentOS. This content is stored on our servers and in Cloudflare R2 object storage.

Browser Extension Data

Our Chrome extension reads page content only when you explicitly invoke it (e.g., by clicking "Save to ContentOS" or activating the selection tool). It does not run in the background reading pages you visit passively. Data captured is sent directly to your ContentOS account.

Usage and Technical Data

We collect standard server logs (IP address, browser type, pages visited, timestamps) and in-app usage events to operate and improve the Service. We do not sell this data.

Billing Information

Payments are processed by Stripe. We do not store full card numbers; Stripe provides us a token and the last four digits of the card for display purposes.

2. How We Use Your Information

• To provide, operate, and improve ContentOS
• To publish and schedule content to connected social accounts on your instruction
• To send transactional emails (account confirmations, password resets, billing receipts)
• To send product updates and newsletters — you can unsubscribe at any time
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your content to train AI models.

3. Data Sharing

We share data only with:

• Social platforms — when you instruct us to publish or retrieve data on your behalf
• Infrastructure providers — our VPS provider, Cloudflare (CDN and object storage), and Vercel (frontend hosting) process data as sub-processors under appropriate data agreements
• Stripe — for payment processing
• Law enforcement — only when required by applicable law or valid legal process

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records for 7 years under Indian GST regulations).

5. Security

We use HTTPS for all data in transit, encrypt OAuth tokens at rest, and apply least-privilege access controls. Despite these measures, no system is 100% secure. Please use a strong, unique password and enable two-factor authentication where available.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your content in a portable format
• Object to or restrict certain processing
• Withdraw consent for optional communications (e.g., marketing emails)

To exercise these rights, email privacy@contentos.social. We will respond within 30 days.

7. Cookies

We use strictly necessary cookies for authentication (session tokens) and functional cookies to remember your preferences. We do not currently use third-party advertising or tracking cookies. You can disable cookies in your browser, but some parts of the Service may not work correctly.

8. Children

ContentOS is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. International Transfers

ContentOS is operated from India. Your data may be processed by our sub-processors in other countries (e.g., Cloudflare's global network). By using the Service you consent to this transfer. We ensure our sub-processors provide adequate data protection.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by a prominent notice in the app at least 14 days before the change takes effect. The "Last updated" date at the top reflects the most recent revision.

11. Contact

If you have any questions about this Privacy Policy or your data: