Privacy Policy

Information We Collect

Personal information

• Name and email address when you create an account
• Payment information processed securely through Stripe (we do not store full payment card numbers)
• Profile and account information you choose to provide

Onboarding and preferences

• Creator niche, content preferences, brand assets, inspiration accounts or URLs, equipment profile, tone, calls-to-action, and similar setup information you provide during onboarding or in settings
• Notification and in-product preference choices

Usage information

• Content analysis data from Instagram accounts you connect
• Research session data, saved research, and project materials
• First-party product usage and performance metrics within the Service
• Device and browser information
• IP address and security-related log data for authentication and abuse prevention

Research content

• Public Instagram handles, reel URLs, or similar inputs you submit for research
• Research you save in a session, tied to your account and projects for outlines and scripting
• Aggregate or de-identified content used for pattern analysis, separate from your private account data where applicable

Research on public profiles is separate from the Instagram account connection described below. We do not treat a voluntary Instagram connection as permission to access unrelated accounts you do not control.

Waitlist and marketing

If you join our waitlist on contentfloor.ai, we collect your email address to send launch-related updates. The waitlist form may be hosted by a third-party provider. Joining the waitlist does not create a ContentFloor account. If you later register for the Service, your information is handled under this policy and our Terms of Service.

We use a CRM and email service provider for waitlist management, account-related messages, email verification, password reset, and other transactional communications you request or that are necessary to operate the Service.

Instagram Account Connection (Meta)

If you choose to connect an Instagram Professional (Business or Creator) account, you authorize ContentFloor to access data through Instagram's API on your behalf. Connection is optional and requires you to sign in through Instagram's login flow. No Facebook Page is required.

Profile and account linkage

• Instagram username, follower count, biography, and website (when provided on your profile)
• Instagram account identifier and linkage metadata (such as when the account was connected)
• OAuth access tokens and token expiry, stored so we can sync your account until you unlink or the token expires

Content and performance data

• Your published Reels available through the APIs you authorize, including captions, permalinks, thumbnails, and post dates
• Engagement and insight metrics associated with those Reels, such as likes, comments, views, reach, and shares (availability may vary by media type and Meta permissions)
• Performance insights and classifications we derive from that data for your account
• Hook summaries, patterns, and brand-voice samples generated from your content for use inside your account

We access Reels you have published—not drafts, direct messages, or content from accounts you have not connected.

Disconnecting Instagram

You can unlink your Instagram account in Account settings at any time. Unlinking removes stored access tokens and stops new imports from Meta. Unlinking does not automatically delete Reels, hook analyses, or brand-voice samples already saved in ContentFloor.

To delete Instagram-derived data stored in ContentFloor, follow the instructions in How to request deletion of your data below.

Public content research

When you submit public handles or URLs for research, we may retrieve publicly available content from third-party platforms using authorized methods and service providers. We do not access private messages, non-public accounts you have not connected, or content you are not permitted to research under applicable platform rules and law.

Smart Content Processing

ContentFloor uses automated analysis—including third-party AI service providers under our instructions—to help you research content, understand performance, summarize hooks, and generate scripts aligned with your brand voice.

• Purpose: Your content and prompts are processed to deliver outputs and features for your account—not to build a public directory of third parties.
• Instagram-connected content: When you link Instagram, captions and reel thumbnails you authorize us to access may be sent to our AI providers solely to produce analyses and summaries stored under your account.
• Model training: We do not use your Instagram OAuth content or your private account outputs to train general-purpose AI models. Our AI providers are required to use your data only to provide the services we request.
• Human review: We do not routinely manually review your prompts or generated outputs, except where necessary to investigate abuse, ensure safety, comply with law, or respond to your support request.

How We Use Your Information

• Provide and improve our content analysis, research, scripting, and analytics services
• Operate Instagram connection features: sync your Reels and metrics, generate performance insights, analyze hooks, and build brand-voice context for your projects
• Process payments and manage your subscription
• Send account, security, and service-related communications
• Analyze usage patterns to improve the Service
• Provide customer support when requested
• Comply with legal obligations and protect the security of our services

Cookies and Sessions

When you use the ContentFloor web application, we use authentication cookies and server-side sessions to keep you signed in securely. These are necessary to operate your account.

We do not use third-party advertising cookies or third-party web analytics trackers on the Service today. If that changes, we will update this policy.

Data Protection and Security

• Encryption in transit (TLS) for data sent between your browser and our services
• Secure cloud storage with industry-standard protection and access controls
• Authentication protocols and restricted internal access to production systems

Data retention

We retain your data only as long as necessary to provide our services and comply with legal obligations. Account research and project data remain while your account is active unless you delete it or ask us to remove it.

Instagram OAuth tokens are retained until you unlink, they expire, or we must remove them for security or legal reasons. Reels, metrics, and brand-voice data imported via Instagram remain until you request deletion or we delete your account data in response to a verified request.

How to Request Deletion of Your Data

If you use ContentFloor and we have collected personal information about you—including data obtained through Meta's Instagram or Facebook login—you may request that we delete it. This section explains how.

Option 1: Stop new Instagram data collection (unlink)

If you have a ContentFloor account and previously connected Instagram, sign in at app.contentfloor.ai, open Account settings, and unlink your Instagram account. This removes stored OAuth tokens and stops further imports from Meta. It does not by itself delete Reels, metrics, hook analyses, or brand-voice data already stored in your account.

Option 2: Request deletion by email (required for stored data)

To delete personal information we hold—including Instagram-derived reels, captions, thumbnails, metrics, hook summaries, brand-voice samples, research, scripts, and your account profile—email us at:

[email protected]

Include in your message:

• The email address associated with your ContentFloor account (or the email you used on the waitlist, if you have no account)
• Your Instagram username, if you connected Instagram and want Instagram-related data deleted
• Whether you want Instagram-derived data only deleted or your entire ContentFloor account and associated data deleted
• Any other details that help us locate your data

We will verify that you control the account or email before processing the request. We may ask follow-up questions if needed.

What we delete

When we approve a deletion request, we delete or anonymize the personal information covered by your request from our active systems, subject to limited exceptions (for example, backups for a short period, fraud prevention, or records we must keep by law). Instagram OAuth tokens are removed when you unlink or when we process an Instagram-data deletion request.

Timing

We aim to confirm receipt within a few business days and to complete verified deletion requests within thirty (30) days, unless a longer period is required by law or the request is unusually complex.

Waitlist only (no account)

If you joined our waitlist but never created a ContentFloor account, email [email protected] from the same email address you used on the waitlist and ask us to remove your contact information from our list.

Third-Party Services

We use trusted third-party services to operate ContentFloor. They process data on our instructions—not for their independent marketing purposes:

• Stripe: Payment processing
• Cloud infrastructure providers: Hosting and data storage
• Meta (Instagram / Facebook APIs): Optional account connection and authorized access to your Professional account data
• CRM and email providers: Waitlist, transactional email, and account communications
• AI service providers: Automated analysis of content you submit or authorize
• Data providers: Retrieval of publicly available platform content where you initiate research

These providers maintain their own privacy policies. We require contractual protections appropriate to the services they provide.

Your Rights

Depending on where you live, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data (see How to request deletion of your data)
• Disconnect Instagram and withdraw consent for further OAuth-based collection
• Opt out of marketing communications
• Restrict or object to certain processing where applicable
• Data portability where applicable
• File a complaint with a supervisory authority

California residents (CCPA/CPRA)

California residents may request to know, delete, or correct personal information we collect. We do not sell or share personal information for cross-context behavioral advertising as defined under California law.

To exercise these rights, email [email protected] or follow the steps in How to request deletion of your data. We may need to verify your identity.

EEA, UK, and Switzerland (GDPR / UK GDPR)

Conrad Ventures, LLC is the data controller for personal information processed through ContentFloor. We rely on legal bases including performance of a contract (providing the Service), your consent (such as optional Instagram connection), and legitimate interests (security, fraud prevention, and improving the Service) where permitted.

Where personal information is transferred internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms with our vendors where required.

Children's Privacy

ContentFloor is a paid service intended for adults. It is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact [email protected] and we will take appropriate steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated by email or in-product notice where appropriate. Continued use of the Service after changes become effective constitutes acknowledgment of the updated policy where permitted by law.