security privacy
Where your data is stored
EU-hosted by default. Encrypted credentials. Per-organisation isolation.
Primary storage
- Database: in the EU (Frankfurt). Your data is isolated per organisation — other accounts can't see it.
- Files (cover images, data exports): same region, with signed URLs that expire.
Connector credentials
Your WordPress, Sanity, and Framer credentials are encrypted at rest with industry-standard AES-256 encryption. They are never returned to the browser, never logged, and the master key is rotated regularly.
What leaves the EU
Some processing — AI generation, web research, keyword data, image generation, and payments — happens through trusted providers, some of which are based in the US under Standard Contractual Clauses (SCCs). The full sub-processor list lives in our Privacy Policy.
What we never do
- Sell or share your data with advertisers.
- Train any model on your content.
- Read your content for any purpose other than running the service.
Data minimisation
We collect only what we need:
- Email and (optional) full name at signup
- Site credentials at connection
- Keywords, articles, and brand profiles you create
- Audit log entries (login, write actions, deletions)
Anything else is opt-in. See the Privacy Policy for the full breakdown.