Privacy Policy

This Privacy Policy explains what personal data contentPhD ("we", "us") collects, why, and what rights you have over it. We're a UK-based company and handle personal data in line with UK GDPR.

1. What we collect

• Account data: your email address and password (stored securely by our authentication provider, Supabase — we never see your plaintext password).
• Content you submit: text you paste in for scoring or rewriting, and any topics you ask contentPhD to write about.
• Billing data: handled directly by Stripe. We store your Stripe customer/subscription ID and plan status, never your full card number.
• Usage data: how many scans/rewrites you've run, and basic product analytics (pages visited, features used) via PostHog.

2. How we use it

• To provide the core service — scoring and rewriting your content;
• To operate your account, enforce plan limits, and process billing;
• To send transactional email (welcome messages, usage warnings, receipts);
• To understand product usage and improve contentPhD;
• To comply with legal obligations.

3. Third-party processors

We share data with the following processors, only as needed to run the service:

• Anthropic — receives the content you submit in order to generate scores and rewrites. Anthropic processes this content to return a result to you and does not use it to train models under our agreement with them.
• Stripe — processes payments and stores billing details.
• Supabase — stores your account and application data.
• Resend — sends transactional email on our behalf.
• PostHog — collects product usage analytics.

Some of these providers may process data outside the UK/EEA (for example, in the United States), under appropriate safeguards such as Standard Contractual Clauses.

4. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we're required to keep billing records for legal or tax purposes.

5. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Request deletion of your data;
• Object to or restrict certain processing;
• Receive your data in a portable format;
• Complain to the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at hello@contentphd.com.

6. Cookies

We use essential cookies to keep you logged in and to remember your session. We also use analytics cookies (PostHog) to understand how the product is used.

7. Security

We use industry-standard measures — including encryption in transit and access controls — to protect your data. No system is completely secure, and we can't guarantee absolute security.

8. Children

contentPhD is not directed at children under 16, and we don't knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

10. Contact

Questions about this policy or your data? Contact us at hello@contentphd.com.