Privacy policy

ContentNod is operated by RethinkUX (“we”, “us”). This policy explains what we collect when you visit this website or use the ContentNod app, why we collect it, and the choices you have. We wrote it in plain language on purpose.

What we collect

• Sign-ups and messages: the name, work email and agency name you give when you start a trial, and anything you send us through the contact form.
• Account details: name, email address and role for agency team members and the clients they invite.
• Content you upload: content calendars, captions, videos, images, comments and approvals. This belongs to you and your clients.
• Technical data: a sign-in cookie that keeps you logged in, and basic server logs (IP address, browser, time) used for security and to fix problems.

We do not use advertising cookies, and we do not sell or rent your personal data to anyone.

How we use it

• To run the service: show your calendars and creatives, send notifications and sign-in links, and keep a record of approvals.
• To set up your agency's workspace, reply to your messages and help you get started.
• To keep the service secure, prevent abuse, and improve it.

Who processes data for us

We use a small number of trusted providers to host and run ContentNod. They only process data on our instructions:

• Vercel (website and app hosting)
• Neon (database, hosted in Singapore)
• Cloudflare R2 (storage for uploaded videos and images)
• Resend (sending emails such as sign-in links and notifications)
• Post for Me (publishing approved posts to the social accounts an agency connects, only when it uses auto-publishing)

How long we keep it

Account data is kept while your agency uses ContentNod. Agencies can delete creatives at any time, and may set videos to be removed automatically some days after they are published. Sign-up details and contact messages that never became an account are kept for up to 24 months, or until you ask us to delete them.

Your rights

You can ask us to access, correct or delete your personal data, or withdraw consent, as provided under India's Digital Personal Data Protection Act, 2023 and other applicable laws. If your data was added by an agency you work with, we may refer your request to that agency.

Security

Data is encrypted in transit (HTTPS). Sign-in links expire after 15 minutes and can be used once. Stored integration keys are encrypted. Files are served through short-lived signed links.

Contact

Questions or requests about your data? Contact us and we'll reply within 7 working days.

Changes

If we change this policy in a meaningful way we'll update the date above and, for account holders, let you know by email.