ContentPad

Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains how ContentPad (“ContentPad,” “we,” “us,” or “our”), operated by CPD Blackbook, collects, uses, stores, shares, and protects information when you use our website at contentpad.io, our application at app.contentpad.io, and related services (collectively, the “Service”). By using the Service, you agree to the practices described here.

Information we collect Google user data How we use data Sharing Retention & deletion Security Your rights Contact

1. Information We Collect

Information you provide

Account information — your name, email address, phone number, and profile details you enter (bio, company, social handles).
Content you create — prompts, uploads, and media you generate or store in the Service (your “Vault”).
Payment information — processed by our payment processor (Stripe). We do not store full card numbers on our servers.

Information collected automatically

Basic usage and device information (e.g., log data, browser type, and actions taken in the app) used to operate and secure the Service.
Essential cookies and local storage used to keep you signed in and remember your preferences. We do not use advertising cookies.

2. Connected Accounts & Platform Data

ContentPad can connect to third-party platforms so you can publish and schedule from one place. Every connection is optional, is made by you through that platform’s own authorisation screen, and can be disconnected at any time from Integrations inside ContentPad. We never ask for, store, or see your password for any connected platform — only a revocable access token issued by the platform itself.

Across every platform below, the same rules apply: we do not sell platform data, we do not use it for advertising or profiling, and we do not share it with third parties except to perform the action you asked for or where required by law. Tokens and platform data are stored encrypted at rest and are used only to operate features you actively use.

Google

If you choose to connect your Google account, ContentPad requests only the access needed to power features you explicitly use. We request the following Google API scopes:

Google Calendar (calendar.events) — to create, view, and manage calendar events you schedule through ContentPad (for example, content and posting schedules).
Google Drive (drive.file) — to create and manage only the specific files you create with or open through ContentPad. This scope does not grant access to your other Drive files.
Basic profile and email (userinfo.email, userinfo.profile) — to identify your connected account and display your name and email.

Connecting Google is entirely optional. You can use ContentPad without it, and you can disconnect at any time.

Limited Use disclosure. ContentPad’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it except to provide or improve the specific features you request or as required by law, and we do not allow humans to read it except with your consent, for security, to comply with law, or where the data is aggregated/anonymized.

Instagram (Meta)

If you connect an Instagram Professional (Business or Creator) account, we request:

instagram_business_basic — to identify the connected account and show you its username and account type, so you know which account you are publishing to.
instagram_business_content_publish — to publish the posts you create in ContentPad to that account, at the time you choose.

We receive and store your Instagram account ID, username, account type and an access token. We store the media and caption of posts you create so they can be scheduled, published and shown in your content calendar. We do not read your Instagram messages or comments, we do not request those permissions, and we do not access your followers, insights or any content we did not publish on your behalf.

Disconnecting Instagram in ContentPad deletes the stored token immediately and stops all publishing to that account. You can also revoke ContentPad from Instagram at Settings › Apps and websites. Posts already published to Instagram remain on Instagram and are managed there.

TikTok

If you connect a TikTok account, we request:

user.info.basic — to identify the connected account and display its name in your integrations list.
video.publish — to upload and publish the videos you create in ContentPad to that account.

We receive and store a TikTok account identifier, display name, and access and refresh tokens. We store the video and caption of posts you create so they can be scheduled and published. We do not read your TikTok inbox, comments, followers or analytics. Disconnecting TikTok in ContentPad deletes the stored tokens immediately; you can also revoke access from TikTok at Settings › Security & permissions › Manage app permissions.

If you connect a LinkedIn account, we request:

openid and profile — to identify the connected account and display your name.
w_member_social — to publish posts you create in ContentPad to your own personal LinkedIn feed, at the time you choose.

We receive and store your LinkedIn member identifier, name and an access token. We do not read your LinkedIn connections, messages, feed or company pages, and we cannot post as any organisation — only as you, and only the posts you create. LinkedIn access tokens expire after roughly sixty days and cannot be renewed silently, so you will be asked to reconnect periodically. Disconnecting in ContentPad deletes the stored token immediately.

3. How We Use Information

To provide, maintain, and improve the Service and the features you use.
To authenticate you, keep your session secure, and prevent abuse or fraud.
To process purchases of credits and subscriptions.
To send transactional messages (e.g., confirmations, access codes, receipts, and important account notices).
To provide the Google-connected features described above, only at your direction.
To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your content or Google user data to train third-party advertising models.

We share information only as needed to run the Service:

Service providers (sub-processors) that operate the platform on our behalf, including hosting and database (Supabase, Cloudflare), payments (Stripe), email delivery (Resend), and the AI model providers that fulfill your generation requests. These providers process data only to perform services for us.
Google, when you use Google-connected features, via the scopes above.
Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of users and the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention & Deletion

We retain your account information and content for as long as your account is active or as needed to provide the Service. You may delete content from your Vault at any time. To request deletion of your account and associated personal data, contact us at the address below; we will delete or anonymize it within a reasonable period, except where retention is required by law (for example, transaction records).

You can revoke ContentPad’s access to your Google account at any time from your Google Account permissions page or by disconnecting Google within ContentPad. When you disconnect, we delete the associated Google access and refresh tokens.

6. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS), scoped access controls, and row-level security on our database. No method of transmission or storage is 100% secure, but we work to protect your data and promptly address issues.

7. Your Rights & Choices

Access, correct, or delete your personal information by contacting us or editing your profile.
Disconnect Google or any other integration at any time.
Unsubscribe from marketing emails using the link in any such email (transactional messages, like receipts, will still be sent).
Depending on your location, you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.

8. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

10. Contact Us

If you have questions or requests regarding this Policy or your data, contact:

ContentPad (CPD Blackbook)
Email: support@contentpad.io

ContentPad is a service of CPD Blackbook Advisors, Inc., 8 The Green, Suite A, Dover, DE 19901, United States.