1. Who is responsible for your data
The controller of your personal data is the administrator of the automatedblog.com service ("we", "us"). In this policy "the service" means the automatedblog.com website, the plan preview demo, customer accounts and the AutomatedBlog software.
For any privacy question or request, email [email protected]. We answer every privacy request we receive.
2. Personal data we collect
We collect only the data we need to run the service.
- Account data. Your email address and a hash of your password. We never store your password in readable form.
- Signup source. The page you signed up from, the plan you were interested in, and campaign tags in the link you used (UTM source, medium and campaign).
- Security data. Your IP address and browser user agent, recorded when you sign up, sign in and use the service.
- Demo inputs. The website address you enter in the plan preview and your selections, such as business type, publishing pace and platform.
- Public page content. To build your plan preview, the service reads public content of the website you enter, such as the page title, description, headings and menu labels.
- Connected site credentials. If you connect a website, the access keys or tokens needed to publish there. We store them encrypted.
- Content and settings. Brand rules, topics, drafts, published posts and reports linked to your account.
- Billing data. Your plan, subscription status and payment history. Payments are handled by our payment processor. We do not see or store your full card number.
- Messages. Emails you send to [email protected] and our replies.
3. Data we do not collect
We do not buy personal data from data brokers. We do not use advertising pixels or tracking cookies. We do not knowingly collect sensitive data such as health information, and we ask you not to put sensitive personal data into brand rules or prompts.
4. Why we use your data and our legal bases
Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on these legal bases.
- To create and run your account, run the plan preview, write and publish posts and send you service emails such as sign in codes. Legal basis is performance of a contract with you.
- To take payments, issue invoices and keep accounting records. Legal basis is performance of a contract and our legal obligations.
- To keep the service secure, prevent abuse and fraud, and fix errors. Legal basis is our legitimate interest in a safe and working service.
- To understand which pages and campaigns bring signups, using signup source and UTM tags. Legal basis is our legitimate interest in improving the service.
- To answer your questions and requests. Legal basis is performance of a contract or our legitimate interest in helping you.
- To comply with the law and defend legal claims. Legal basis is our legal obligations and our legitimate interest.
We do not use your data for automated decisions that have legal or similarly significant effects on you.
5. How AI is used with your content
The service uses AI models to read public pages, plan topics and write posts. The text sent to these models is your website content, your brand rules and the topics needed to write each post. We do not send your password or billing details to AI model providers. We do not allow AI model providers to use your content to train their models under our agreements with them.
6. Who receives your data
We do not sell your personal data and we do not share it for cross context behavioral advertising. We share data only with service providers who help us run the service, under written agreements that limit their use of the data.
- Hosting provider, which stores the service and its databases.
- Payment processor, which handles payments, cards and subscriptions.
- Email delivery provider, which sends sign in codes and service emails.
- AI model providers, which process text to plan and write posts.
We may also disclose data when the law requires it, to protect our rights or the safety of users, or as part of a sale or reorganization of the service, in which case this policy continues to protect your data.
When you connect a website, posts are published to that website. The platform that hosts your site processes that content under its own terms.
7. International transfers
Our service providers may process data outside your country, including in the United States and the European Economic Area. When data leaves the EEA or the UK, we use safeguards required by law, such as standard contractual clauses or an adequacy decision.
8. How long we keep your data
- Account data, content and settings are kept while your account is open, and deleted or anonymized within 90 days after you close it, unless the law requires us to keep them longer.
- Billing records are kept as long as tax and accounting laws require.
- Security logs with IP addresses and user agents are kept for up to 12 months.
- Plan preview results are kept for up to 30 days. Signup data of accounts that never confirmed their email is deleted within 90 days.
- Support emails are kept for up to 3 years after the last message.
- Connected site credentials are deleted when you disconnect the site or close your account.
9. Your rights under GDPR
If GDPR applies to you, you have the right to access your data, correct it, delete it, restrict its use, receive it in a portable format, and object to processing based on our legitimate interest. You can also withdraw any consent you gave, without affecting earlier processing. You have the right to lodge a complaint with your local data protection authority.
10. Your rights under US state privacy laws
If you live in California or another US state with a consumer privacy law, you have the right to know what personal data we collect and how we use it, to access it, to correct it, to delete it and to opt out of sale or sharing. We do not sell or share personal data as those laws define it, and we do not use sensitive personal data for purposes that require an opt out. We will not treat you differently for using your rights. You may use an authorized agent, and we may ask you to confirm your identity before we act on a request.
11. How to use your rights
Email [email protected] from the address on your account and tell us what you would like. We may ask you to confirm your identity. We answer within the time the law sets, usually within one month. You can also delete connected sites, posts and your account from inside your account.
12. Cookies
We use only essential cookies, which the service needs to work. They keep you signed in, protect forms against forged requests and remember basic preferences. Because we use only essential cookies, we do not show a cookie banner. We do not use advertising cookies or ad pixels, and any traffic statistics we keep do not rely on tracking cookies.
13. How we protect your data
We use encryption in transit, encrypted storage of connected site credentials, hashed passwords, limited staff access and regular backups. No system is perfectly secure, but we work to protect your data and will tell you without undue delay if a breach puts your rights at high risk. Read more on the security page.
14. Children
The service is built for businesses and is not meant for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email [email protected] and we will delete it.
15. Changes to this policy
We may update this policy when the service or the law changes. We will post the new version on this page with a new date, and tell account holders by email about important changes before they take effect.
16. Contact
For anything about privacy, email [email protected]. See also our terms of service and refund policy.