Privacy Policy

Last updated: February 1, 2025

ContentHarvest ("we", "us", "our") operates the ContentHarvest SaaS platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and encrypted password.

Social Account Tokens: To post on your behalf, we store access tokens issued by Meta (Instagram) and other platforms. These are encrypted at rest.

Usage Data: We log actions within the platform (posts scheduled, content scraped, etc.) to improve the service and provide analytics.

Payment Information: Payments are processed by Stripe. We never store credit card numbers — only a Stripe Customer ID.

Scraped Content: When you use our content scraper, we store publicly available content from Reddit and Twitter/X. We do not scrape private data.

2. How We Use Your Information

• To operate and improve the ContentHarvest platform
• To publish posts to your connected social accounts on your instruction
• To send transactional emails (receipts, password resets, important notices)
• To provide customer support
• To detect and prevent fraud or abuse

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing
• SendGrid — for transactional email delivery
• Meta / Instagram — to publish posts via their official API
• DigitalOcean — infrastructure hosting (servers and storage)
• Anthropic / OpenAI — for AI caption generation (content is processed but not retained by these providers)

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Posted content and analytics may be retained in anonymized form for up to 12 months.

5. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive tokens, and regular security audits. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have rights including access to your data, correction, deletion ("right to be forgotten"), and data portability. To exercise any of these rights, email us at [email protected].

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Children's Privacy

ContentHarvest is not intended for users under 16 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact us at [email protected].