security privacy

Where your data is stored

EU-hosted by default. Encrypted credentials. Per-organisation isolation.

Primary storage

  • Database: in the EU (Frankfurt). Your data is isolated per organisation — other accounts can't see it.
  • Files (cover images, data exports): same region, with signed URLs that expire.

Connector credentials

Your WordPress, Sanity, and Framer credentials are encrypted at rest with industry-standard AES-256 encryption. They are never returned to the browser, never logged, and the master key is rotated regularly.

What leaves the EU

Some processing — AI generation, web research, keyword data, image generation, and payments — happens through trusted providers, some of which are based in the US under Standard Contractual Clauses (SCCs). The full sub-processor list lives in our Privacy Policy.

What we never do

  • Sell or share your data with advertisers.
  • Train any model on your content.
  • Read your content for any purpose other than running the service.

Data minimisation

We collect only what we need:

  • Email and (optional) full name at signup
  • Site credentials at connection
  • Keywords, articles, and brand profiles you create
  • Audit log entries (login, write actions, deletions)

Anything else is opt-in. See the Privacy Policy for the full breakdown.