Privacy Policy

Overview

Content Broker is operated by Serpscript LLC ("we", "us") from the United States. This policy explains what personal data we collect when you use the Service, what we do with it, who it's shared with, and the choices you have. We collect only what we need to deliver the Service.

What we collect

• Account data: your email address. We use Amazon Cognito (AWS) to authenticate accounts. We do not store your password ourselves; Cognito does, hashed.
• Order data: the content briefs you submit — title, target keyword, tone, audience, language, optional notes. The generated articles, the associated metadata, your credit balance, and your purchase history.
• Payment data:when you buy a credit pack, the transaction is handled by Stripe, our payment processor. We receive the order confirmation (credits purchased, transaction reference) but we never see or store your card number, CVV, or full billing details. Stripe's privacy policy applies to that data: stripe.com/privacy.
• Technical data: standard server logs (timestamps, IP addresses, user agents) retained for security and abuse-prevention purposes.

We do not use third-party analytics, advertising trackers, or marketing pixels.

How we use it

• To authenticate you and authorize access to your account.
• To run the generation pipeline on the briefs you submit.
• To process credit purchases and apply refunds.
• To send transactional email related to your account (password reset, order failure notifications, support replies).
• To investigate fraud, abuse, or violations of our Terms of Service.

We do not sell your personal data. We do not use your briefs or generated articles to train any machine-learning model of our own.

Third parties

The Service relies on the following providers, each with its own privacy practices:

• Amazon Web Services — application hosting (AWS Amplify), authentication (Cognito), database (DynamoDB), background workers (Lambda). Data is processed in the us-west-2 region (Oregon, USA). See aws.amazon.com/privacy.
• Anthropic— large language model provider. When you place an order, the brief you submit is sent to Anthropic's API so the pipeline can generate the article. Anthropic's API privacy practices govern that processing: anthropic.com/legal/privacy. Anthropic does not train on data submitted via its commercial API by default.
• Stripe — payment processor for credit-pack purchases. Handles checkout, card processing, and chargebacks. Privacy: stripe.com/privacy.

Cookies

We use only essential cookies needed to keep you signed in (session cookies set by Cognito and our authentication layer). We do not set marketing or analytics cookies. If this changes in the future, we will update this policy and obtain consent where required by law.

Data retention

We retain your account, orders, and articles for as long as your account is active so you can re-download or revise previously generated content. If you request account deletion, we remove your personal data within 30 days, except where retention is required by law (for example, transaction records retained by us and by Stripe for accounting and chargeback purposes).

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to processing, or to lodge a complaint with a supervisory authority. To exercise any of these rights, email support@contentbroker.net. We will respond within 30 days.

California residents have specific rights under the CCPA, including the right to know what categories of personal information we collect, the right to delete it, and the right not to be discriminated against for exercising those rights.

Security

We protect your data with industry-standard measures: TLS for all data in transit, encrypted storage on AWS DynamoDB, scoped IAM roles, and least-privilege access. No system is perfectly secure; if we ever experience a breach affecting your personal data, we will notify affected users without undue delay.

International transfers

We process data in the United States (AWS us-west-2and Anthropic's commercial API infrastructure). If you access the Service from outside the United States, your information is transferred to and processed in the United States. By using the Service, you consent to this transfer.

Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, contact support@contentbroker.net and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Effective" date at the top of this page; substantial changes that affect your rights will additionally be communicated by email.

Contact

For any privacy question or request, email support@contentbroker.net.