Last updated: September 2026
ContentGenPro (“we”, “our”, or “us”) operates contentgenpro.online and app.contentgenpro.online. We are committed to safeguarding your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. The Data We Collect
- Account & Identity Data: Name, email address, and account credentials when you register, purchase, or log in.
- Transaction Data: Billing details, subscription status, and purchase history. (Note: Payment card details are handled directly by PCI-DSS compliant processors such as Stripe / PayPal and are never stored on our servers.)
- Input & Usage Data: Prompts, keywords, topics, and URLs entered into the generation tool to produce content.
- Technical Data: IP address, browser type, device information, and essential cookies for session authentication.
2. Legal Basis for Processing
Under the UK GDPR, we process your personal data under the following lawful bases:
- Contractual Necessity: To provide the ContentGenPro service, manage your subscription, and deliver content packs.
- Legitimate Interests: To prevent fraud, secure our application, improve tool performance, and protect server integrity.
- Legal Obligation: To comply with UK tax, accounting, and regulatory reporting requirements.
- Consent: Where you explicitly opt in to receive marketing communications or product updates.
3. AI Data Handling & Third-Party Processors
- AI Processing: When you generate content, your inputs are passed securely via encrypted API to our LLM provider solely to generate your requested output. Your inputs are not used to train public models.
- Service Providers: We share necessary data only with trusted infrastructure providers bound by UK GDPR data processing agreements:
- Payment Processors: Stripe, PayPal, SureCart
- Cloud Hosting & Servers: Render, GoDaddy
- Transactional Email: Email delivery providers (for sending content packs)
4. International Data Transfers
When data is transferred outside the UK (e.g., to cloud servers in the EU or US), we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTA) or Standard Contractual Clauses (SCCs).
5. Data Retention
We retain account data for as long as your account remains active. Transaction records are held for 6 years in compliance with UK statutory accounting rules. Temporary generation cache logs are deleted on a regular rolling schedule.
6. Your Rights Under UK GDPR
As a UK resident, you have the right to:
- Access a copy of the personal data we hold about you.
- Request correction of inaccurate personal data.
- Request erasure of your data (“Right to be Forgotten”).
- Restrict or object to the processing of your data.
- Request data portability in a machine-readable format.
- Withdraw consent at any time.
To exercise any of these rights, contact us at support@contentgenpro.online. You also have the right to lodge a complaint with the UK supervisory authority: The Information Commissioner’s Office (ICO) at ico.org.uk.