Privacy Policy
Last updated: 4 August 2026 · Controller: Nadia Mohamed, hello@nadiamohamed.me
What we collect
- Account data — your email address and a hashed password (we never see the password itself).
- Service content — your projects (name, website URL), the messages you exchange with the assistant, the articles produced for you, and support conversations.
- Billing data — handled by Stripe; we store your plan, billing identifiers, and invoice records. Your card number never touches our systems.
- Technical data — standard server logs (IP address, timestamps) kept briefly for security and debugging.
Why we process it
To provide the Service (contract): running your article pipeline, storing your library, metering your plan. To bill you (contract/legal obligation). To answer support requests (contract). To keep the Service secure (legitimate interest). We do not sell personal data and we do not use it for advertising.
Who processes data for us
- Supabase — database and authentication (account, projects, articles, support threads).
- Railway — application hosting (processing during article runs).
- Netlify — web hosting of the app interface.
- Anthropic — AI model provider that performs research and writing on the topics you submit.
- Stripe — payments, subscriptions, and invoices.
- Ahrefs and Apify — search-data and web-content services used during research (they receive the topics/URLs being researched, not your account identity).
- Resend — transactional email delivery (account and support notifications), when enabled.
Some providers process data outside the EU/EEA under appropriate safeguards (e.g. standard contractual clauses).
Retention
Account data, projects, and articles are kept while your account exists. Invoice records are kept as long as tax law requires. If you delete content in the app it is removed from your workspace; ask us for full erasure of your account and we will action it within 30 days, save for records we must keep by law.
Your rights
Under the GDPR you can request access, correction, export, restriction, objection, or deletion of your personal data, and you can complain to your local supervisory authority. Contact us at the address above; we respond within 30 days.
Cookies
The app uses only the storage necessary to keep you signed in and to run the Service. No advertising or cross-site tracking cookies are used.