Privacy Policy

Last updated on January 8, 2025

This is a template privacy policy. Please consult a lawyer for your own privacy policy.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by reading the full policy below.

What information do we collect? We collect information that you provide to us, information we obtain automatically when you use our services, and information from third parties.
How do we process your information? We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with law.
When and with whom do we share your personal information? We may share information in specific situations and with specific third parties.
What are your rights? Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your data.
How do we keep your information safe? We use appropriate technical and organizational security measures to protect your personal information.

Information We Collect
How We Use Your Information
AI Training and Model Improvement
How We Process Your Content
Data Sharing and Disclosure
International Data Transfers
Data Retention
GDPR Legal Bases for Processing
Security Measures
Your Rights
Children’s Privacy
Do Not Track Signals
Third-Party Links
Updates to This Privacy Policy
Contact Us

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

Register for an account or create a profile
Use our services or make a purchase
Contact us for customer support
Subscribe to our newsletter or marketing communications
Participate in surveys, contests, or promotions
Post content, comments, or reviews on our website

This information may include:

Name and contact information (email address, phone number, postal address)
Account credentials (username, password)
Payment information (credit card details, billing address)
Profile information (preferences, settings)
User-generated content (posts, comments, reviews, submissions)
Communication preferences

Automatically Collected Information

When you visit or use our website and services, we automatically collect certain information, including:

Device Information: Device type, operating system, browser type and version, device identifiers
Usage Information: Pages visited, features used, time spent, click patterns, search queries
Location Information: General location data (IP address, time zone, approximate geographic location)
Log Data: IP address, access times, referring URLs, error logs
Cookies and Similar Technologies: See our Cookie Policy for detailed information

Information from Third Parties

We may obtain information about you from third-party sources, such as:

Social media platforms (when you connect your account or share content)
Payment processors (transaction information)
Analytics providers (usage and performance data)
Marketing partners (campaign performance data)
Public databases and records

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

To provide, maintain, and improve our services
To process transactions and manage your account
To authenticate users and prevent fraud
To deliver requested products and services
To personalize your experience

Communication

To send you service-related communications (account updates, security alerts)
To respond to your inquiries and provide customer support
To send you marketing communications (with your consent, where required)
To notify you about changes to our services or policies

Analytics and Improvement

To analyze usage patterns and trends
To understand how users interact with our services
To improve our website, services, and user experience
To develop new features and functionality
To conduct research and analytics

Legal Compliance

To comply with applicable laws, regulations, and legal processes
To respond to legal requests and enforce our rights
To protect our rights, property, and safety, and that of our users
To prevent fraud and abuse

Business Operations

To manage our business operations
To conduct business analytics and reporting
To facilitate mergers, acquisitions, or asset sales
For other purposes with your consent

AI Training and Model Improvement

How We Use Content for AI Training

We may use anonymized versions of user-submitted content to improve our AI models and detection algorithms. This helps us:

Improve content generation quality and accuracy
Enhance AI detection and analysis capabilities
Develop new features and functionality
Train and refine our AI models and algorithms
Provide better service to all our users

Anonymization Process

Before using any content for AI training, we implement strict anonymization procedures:

Remove all personally identifiable information (PII): Names, email addresses, phone numbers, and other identifiers are stripped from content
Strip metadata: Account information, timestamps, IP addresses, and user identifiers are removed
Aggregate data: Content is combined with other anonymized data to prevent re-identification
Irreversible processing: Anonymization is permanent - we cannot and do not attempt to re-identify users from training data

Opt-Out Control

You have full control over whether your content is used for AI training:

Account Settings: Visit your account dashboard at any time to manage your AI training preferences
Default Setting: You must actively consent during signup - we will ask for your explicit permission
Enterprise & API Users: Content submitted by enterprise and API users is never used for model training, regardless of settings
Effect of Opt-Out: When you opt out, your content is:
- Processed only for immediate service delivery
- Deleted after processing (unless you choose to save it to your account)
- Never used for model training or improvement
- Not shared with third-party AI providers for training purposes

Third-Party AI Service Providers

We use third-party AI infrastructure providers to power our services:

AI Model Providers: We use leading AI service providers to provide AI functionality
Contractual Restrictions: We have agreements with all AI providers that strictly prohibit them from using your content to train their own models
Data Processing Agreements: All AI providers have signed Data Processing Agreements (DPAs) ensuring GDPR compliance
Security Standards: All AI providers meet our security and privacy standards

Note: The specific AI providers we use may change as technology evolves. We will update this Privacy Policy to reflect any material changes when providers are finalized.

How We Process Your Content

When you submit content to Contentzilla for AI analysis, generation, or other processing, here’s what happens:

During Processing

Temporary Storage: Content is held in secure memory during active processing
AI Analysis: Our AI models or third-party AI services analyze or generate content based on your input
Processing Time: Most operations complete within seconds to minutes
Secure Transmission: All data is encrypted in transit using industry-standard TLS/SSL protocols

After Processing

The handling of your content after processing depends on your choices:

If you save to your account: Content remains accessible in your account until you explicitly delete it
If you don’t save: Content is deleted from our systems immediately after processing is complete
Temporary Backups: For saved content, copies may exist in our backup systems for up to 30 days after deletion for disaster recovery purposes

Retention Periods

Active Processing: Only as long as needed to complete your request (typically seconds to minutes)
Saved Content: Retained for the duration of your account, plus 30 days after account deletion
Opted-In Training Data: Anonymized versions may be retained indefinitely for model improvement
Opted-Out Content: Deleted immediately after processing or when you delete from your account

Content Ownership

You Retain Ownership: You retain all intellectual property rights and ownership of content you submit
You Own AI Outputs: You own the AI-generated content we produce for you
We Don’t Claim Ownership: We do not claim any ownership rights in your input or output content
Limited License: You grant us only a limited license to process your content as described in this Privacy Policy and our Terms of Service

We may share your personal information in the following circumstances:

Service Providers

We share information with specific third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Payment Processing

Stripe (Privacy Policy) - Payment processing and subscription management
- Information shared: Name, email, billing address, payment card information
- Purpose: Process subscription payments and manage billing

Cloud Infrastructure & Hosting

Cloudflare (Privacy Policy) - CDN, security, and hosting infrastructure
- Information shared: IP address, browser information, usage data
- Purpose: Website delivery, DDoS protection, security, performance optimization

Analytics

We currently do not use third-party analytics services. If we begin using analytics services in the future, we will update this section with specific service details.

Email Communications

We use third-party email service providers for transactional email delivery. The specific provider may change as our services evolve.
- Information shared: Email address, name, email content
- Purpose: Send account notifications, password resets, service updates
- Note: We will update this section when email service providers are finalized

AI Infrastructure

We use third-party AI service providers to power our AI features. The specific providers may change as technology evolves.
- Information shared: Content you submit for processing (with strict contractual restrictions)
- Purpose: Provide AI content generation and analysis features
- Protection: Contractually prohibited from using your data for their own model training
- DPA: Data Processing Agreement in place for GDPR compliance
- Note: We will update this section when AI service providers are finalized

Note: The specific service providers we use may change as our business evolves. We will update this list to reflect material changes and will maintain our commitment to only working with providers who meet our privacy and security standards.

Business Transfers

If we are involved in a merger, acquisition, asset sale, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

We may share your information with third parties when you have given us explicit consent to do so.

Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we implement appropriate safeguards, such as:

Standard contractual clauses approved by relevant authorities
Adequacy decisions by relevant authorities
Other appropriate safeguards as required by applicable law

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and protect our legitimate interests.

Retention Periods by Data Type

Data Type	Retention Period	Reason
Account Information (name, email, profile)	Duration of account + 90 days	Legal obligations, service provision, backup recovery
User-Generated Content	Until user deletes + 30 days	Backup and disaster recovery
Submitted Content (for AI processing)	Immediately after processing OR saved to account	Service delivery
Saved AI Content	Until user deletes + 30 days	User preference, backup recovery
Payment Records	7 years from transaction	Tax and legal requirements (Australian Taxation Office)
Analytics Data	26 months	GDPR best practice
Consent Records (cookies, marketing)	3 years after withdrawal	GDPR compliance documentation
Marketing Communications Data	Until opt-out + 30 days	Business operations, legal compliance
AI Training Data (anonymized, opted-in only)	Indefinitely	Model improvement (cannot re-identify users)
Security Logs	90 days	Fraud prevention, security incident response
Customer Support Records	3 years	Quality assurance, dispute resolution

Deletion Process

When retention periods expire:

Automated Deletion: Most data is automatically deleted by our systems
Secure Deletion: Data is securely overwritten or destroyed, not just marked as deleted
Backup Systems: Data may persist in backup systems for up to 30 additional days before permanent deletion
Anonymization: Some data may be anonymized rather than deleted if needed for statistical purposes

Your Right to Request Deletion

You can request deletion of your personal information at any time by:

Using the “Delete Account” option in your account settings
Contacting us at contact@contentzilla.com

We will process deletion requests within 30 days, subject to legal retention requirements.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases as required by the General Data Protection Regulation (GDPR):

We process your personal information to perform our contract with you when you use our services:

Creating and managing your account: To provide you with access to our services
Processing payments: To bill you for subscription fees and process transactions
Delivering services: To provide AI content generation, analysis, and other features you request
Customer support: To respond to your inquiries and provide assistance
Service communications: To send transactional emails (password resets, account notifications, billing confirmations)

We process certain personal information based on your explicit consent:

Marketing communications: To send you promotional emails, newsletters, and product updates (you can withdraw consent at any time)
AI model training: To use anonymized versions of your content for model improvement (you can opt-out in your account settings)
Non-essential cookies: To use analytics, marketing, and functionality cookies (you can manage preferences in our Cookie Consent Manager)
Optional features: To provide features that require additional data processing beyond core service delivery

We process personal information based on our legitimate business interests, balanced against your rights:

Fraud prevention and security: To protect our services and users from security threats, fraud, and abuse
Service improvement: To analyze how users interact with our services and improve user experience
Direct marketing to existing customers: To inform customers about new features and updates (you can opt-out at any time)
Internal analytics: To understand service performance and make data-driven decisions
Legal claims: To establish, exercise, or defend legal claims

Your Right to Object: You have the right to object to processing based on legitimate interests at any time.

We process personal information to comply with legal requirements:

Tax records: To maintain records required by Australian tax law (7 years)
Accounting requirements: To comply with financial reporting obligations
Responding to legal requests: To comply with court orders, subpoenas, and lawful government requests
Regulatory compliance: To meet obligations under applicable laws and regulations

Data Processing Safeguards

When we process your information under any of these legal bases, we:

Minimize data collection: Only collect data necessary for the specified purpose
Limit retention: Retain data only as long as necessary
Implement security: Protect data with appropriate technical and organizational measures
Respect your rights: Honor your GDPR rights (access, rectification, erasure, restriction, portability, objection)

Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls and authentication mechanisms
Regular security assessments and updates
Employee training on data protection
Secure data centers and infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access

You have the right to request access to the personal information we hold about you and to receive a copy of that information.

Rectification

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

Erasure

You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another controller.

Objection to Processing

You have the right to object to the processing of your personal information in certain circumstances, including for direct marketing purposes.

If we process your personal information based on your consent, you have the right to withdraw that consent at any time.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

The right to know what personal information is collected, used, shared, or sold
The right to delete personal information
The right to opt-out of the sale of personal information
The right to non-discrimination for exercising your privacy rights

Australian Privacy Rights

If you are located in Australia, you have rights under the Australian Privacy Act 1988, including:

The right to access your personal information
The right to correct your personal information
The right to make a complaint to the Office of the Australian Information Commissioner (OAIC)

Exercising Your Rights

To exercise any of these rights, please contact us at contact@contentzilla.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Children’s Privacy

Our services are not directed to children under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information.

Do Not Track Signals

Some web browsers incorporate a “Do Not Track” (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no standard for how DNT signals should be interpreted. As a result, we do not currently respond to DNT signals. We will continue to monitor developments around DNT technology and may update our practices in the future.

Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not owned or controlled by Contentzilla. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our website.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated Privacy Policy on this page
Updating the “Last updated” date at the top of this page
Sending you an email notification (if we have your email address)
Posting a notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: contact@contentzilla.com

Postal Address:
Contentzilla
Ballarat, Victoria, Australia, 3350

For privacy-related inquiries, please include “Privacy Policy” in the subject line of your email.