Privacy Policy
Last updated: July 23, 2026
This Privacy Policy explains how ContentPad (“ContentPad,” “we,” “us,” or “our”), operated by CPD Blackbook, collects, uses, stores, shares, and protects information when you use our website at contentpad.io, our application at app.contentpad.io, and related services (collectively, the “Service”). By using the Service, you agree to the practices described here.
1. Information We Collect
Information you provide
- Account information — your name, email address, phone number, and profile details you enter (bio, company, social handles).
- Content you create — prompts, uploads, and media you generate or store in the Service (your “Vault”).
- Payment information — processed by our payment processor (Stripe). We do not store full card numbers on our servers.
Information collected automatically
- Basic usage and device information (e.g., log data, browser type, and actions taken in the app) used to operate and secure the Service.
- Essential cookies and local storage used to keep you signed in and remember your preferences. We do not use advertising cookies.
2. Google User Data
If you choose to connect your Google account, ContentPad requests only the access needed to power features you explicitly use. We request the following Google API scopes:
- Google Calendar (calendar.events) — to create, view, and manage calendar events you schedule through ContentPad (for example, content and posting schedules).
- Google Drive (drive.file) — to create and manage only the specific files you create with or open through ContentPad. This scope does not grant access to your other Drive files.
- Basic profile and email (userinfo.email, userinfo.profile) — to identify your connected account and display your name and email.
Connecting Google is entirely optional. You can use ContentPad without it, and you can disconnect at any time.
Limited Use disclosure. ContentPad’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it except to provide or improve the specific features you request or as required by law, and we do not allow humans to read it except with your consent, for security, to comply with law, or where the data is aggregated/anonymized.
3. How We Use Information
- To provide, maintain, and improve the Service and the features you use.
- To authenticate you, keep your session secure, and prevent abuse or fraud.
- To process purchases of credits and subscriptions.
- To send transactional messages (e.g., confirmations, access codes, receipts, and important account notices).
- To provide the Google-connected features described above, only at your direction.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use your content or Google user data to train third-party advertising models.
4. How We Share Information
We share information only as needed to run the Service:
- Service providers (sub-processors) that operate the platform on our behalf, including hosting and database (Supabase, Cloudflare), payments (Stripe), email delivery (Resend), and the AI model providers that fulfill your generation requests. These providers process data only to perform services for us.
- Google, when you use Google-connected features, via the scopes above.
- Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of users and the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. Data Retention & Deletion
We retain your account information and content for as long as your account is active or as needed to provide the Service. You may delete content from your Vault at any time. To request deletion of your account and associated personal data, contact us at the address below; we will delete or anonymize it within a reasonable period, except where retention is required by law (for example, transaction records).
You can revoke ContentPad’s access to your Google account at any time from your Google Account permissions page or by disconnecting Google within ContentPad. When you disconnect, we delete the associated Google access and refresh tokens.
6. Security
We use industry-standard measures to protect your information, including encryption in transit (HTTPS), scoped access controls, and row-level security on our database. No method of transmission or storage is 100% secure, but we work to protect your data and promptly address issues.
7. Your Rights & Choices
- Access, correct, or delete your personal information by contacting us or editing your profile.
- Disconnect Google or any other integration at any time.
- Unsubscribe from marketing emails using the link in any such email (transactional messages, like receipts, will still be sent).
- Depending on your location, you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.
8. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.
9. Changes to This Policy
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.
If you have questions or requests regarding this Policy or your data, contact:
ContentPad (CPD Blackbook)
Email: support@contentpad.io