Last updated: October 20, 2026
Contents
- 1. Who we are
- 2. Scope and our role
- 3. Personal data we collect
- 4. How we use personal data and our legal bases
- 5. How AI processing works
- 6. Who we share personal data with
- 7. International data transfers
- 8. How long we keep personal data
- 9. Security
- 10. Your rights
- 11. Additional information for California residents
- 12. Cookies and similar technologies
- 13. Children
- 14. Changes to this Policy
- 15. Contact us
This Privacy Policy explains how the company that operates Avoid Content (“Avoid Content“, “we“, “us“) collects, uses, shares and protects personal data when you visit our website, create an account, or use our content generation platform and API (together, the “Service“).
If you do not agree with this Policy, please do not use the Service.
1. Who we are
The controller of your personal data is:
Avoid Content. The company’s legal name, registered address and registration number will be published here once registration is complete.
Privacy contact: support@avoidcontent.com
EU and UK representatives. If we are not established in the EU/EEA or the UK, we will appoint representatives there under Article 27 GDPR / UK GDPR:
- EU representative: to be published once registration is complete
- UK representative: to be published once registration is complete
Data Protection Officer: we have not appointed a DPO, as we are not required to do so.
2. Scope and our role
This Policy applies to personal data we process as a controller: your account, billing, security and usage data, and our website.
When you use the Service on behalf of a company or team, the content you and your team put into a workspace (topics, briefs, brand voice descriptions, drafts and articles — “Customer Content“) belongs to that customer. If Customer Content contains personal data about other people, we process it on the customer’s instructions as a processor. Business customers may request our Data Processing Agreement at support@avoidcontent.com.
If you use the Service as a Consumer (for private purposes), we process your Customer Content as a controller for the purposes described in this Policy.
Please do not include special categories of personal data (health, religion, biometric data, etc.) in Customer Content.
3. Personal data we collect
3.1 Data you give us
| Data | Examples | When |
|---|---|---|
| Account data | Email address, name, password (stored only as a one-way hash) | When you sign up |
| Workspace data | Workspace name, your role, email addresses of people you invite | When you create a workspace or invite teammates |
| Brand profile | Company name, company website, areas of expertise, company description, target location | When you set up Brand Voice |
| Billing details | Account type (individual or business), country, postal code; for businesses — company name, VAT or tax ID, company address | When you fill them in under Settings → Billing or before your first payment |
| Customer Content | Topics, notes, settings, outlines, drafts, articles, folders | When you use the Service |
| Communications | Messages you send to support or through the contact form | When you contact us |
Providing account data is required to create an account — without it we cannot provide the Service. Everything else is optional, but some features will not work without it (for example, Brand Voice without a brand profile).
3.2 Data we collect automatically
| Data | Examples | Purpose |
|---|---|---|
| Session and security data | IP address, browser user agent, session token identifiers, sign-in time | Keeping you signed in, detecting suspicious sign-ins |
| Activity log | Which article was created, edited, moved or deleted, by which user, and when | Version history, audit trail inside your workspace |
| API key data | Key name, key prefix, who created it, when it was last used (the key itself is stored only as a hash) | Authenticating API requests, letting you manage and revoke keys |
| Usage and billing records | Generation jobs, credits used, credit balance | Charging correctly, preventing abuse |
3.3 Data we receive from third parties
| Source | Data |
|---|---|
| Google (if you choose “Sign in with Google”) | Email address, name, profile picture, Google account identifier |
| Our payment processor | Payment status, transaction ID, amount, tax charged, and the country, company name and VAT or tax ID confirmed or corrected at checkout. We never receive or store your full card number. |
4. How we use personal data and our legal bases
For users in the EU/EEA and UK, we rely on the following legal bases under Article 6(1) GDPR / UK GDPR:
| Purpose | Data | Legal basis |
|---|---|---|
| Create and manage your account, authenticate you | Account data, Google sign-in data, session data | Performance of a contract — Art. 6(1)(b) |
| Provide the Service: generate, research, check and store content | Customer Content, brand profile, workspace data | Performance of a contract — Art. 6(1)(b) |
| Send invitations to people you add to a workspace | Invitee email address | Legitimate interests — Art. 6(1)(f): enabling customers to collaborate |
| Process payments, prefill checkout, apply the correct tax and keep billing records | Billing details, billing records, payment data | Performance of a contract — Art. 6(1)(b); legal obligation for tax and accounting records — Art. 6(1)(c) |
| Send service emails (email verification, password reset, security and billing notices) | Email address | Performance of a contract — Art. 6(1)(b) |
| Keep the Service secure, detect fraud and abuse, enforce our Terms | Session and security data, activity log, usage records | Legitimate interests — Art. 6(1)(f): protecting our users and the Service |
| Answer your requests to support | Communications | Performance of a contract — Art. 6(1)(b), or legitimate interests — Art. 6(1)(f) if you are not a customer |
| Comply with law and respond to lawful requests | Any relevant data | Legal obligation — Art. 6(1)(c) |
| Send marketing emails | Email address | Consent — Art. 6(1)(a). We send marketing emails only if you opt in. You can withdraw consent at any time via the unsubscribe link in every email. |
Where we rely on legitimate interests, you have the right to object (see Section 10).
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our AI checks evaluate content, not people.
5. How AI processing works
To research, generate and check content, we send the relevant parts of your request — such as the topic, content settings, brand profile, research materials and drafts — to third-party AI model providers and search data providers. This content may include personal data only if you choose to include it (for example, in notes you paste). We do not send your account credentials, payment data or session data to these providers.
- We use AI model providers under commercial terms that do not allow them to use your content to train their models. They may retain it for a limited period to provide the service and to detect misuse.
- We do not use your Customer Content to train or fine-tune AI models, and we do not allow our AI providers to do so. If this ever changes, we will tell you in advance and ask for your separate consent (opt-in).
- The AI providers we use may change as models evolve. See Section 6 for how we inform you about them.
AI-generated output may be inaccurate. See our Terms of Service.
6. Who we share personal data with
We do not sell your personal data. We do not currently share it for cross-context behavioral advertising (see Sections 11.2 and 12.2).
We share personal data only with:
6.1 Service providers (processors) that act on our instructions and under contracts that require them to protect your data and use it only to provide services to us:
| Category of provider | What they do for us | Data they receive | Location |
|---|---|---|---|
| AI model providers | Research, generation, editing and quality checks of content | Content of your requests: topics, settings, brand profile, research materials, drafts | United States and other countries |
| Search and SEO data providers | Keyword research, search results and competitor analysis | Topics, keywords, domains | United States, the EU/EEA or other countries |
| Cloud hosting and infrastructure providers | Hosting the Service, storing data, backups | All data we store | United States, the EU/EEA or other countries (see Section 7) |
| Email delivery providers | Sending service emails (verification, password reset, notices) | Email address, name, email content | United States |
| Payment providers | Processing payments, taxes, refunds and chargebacks, preventing payment fraud | Billing and payment data, country, VAT / tax ID for business purchases | United Kingdom, United States or other countries |
Where our payment provider acts as merchant of record (reseller), it sells tokens to you and processes your billing data as an independent controller under its own privacy policy. The reseller is named on the checkout page.
We may replace or add providers within these categories. If we add a new category of recipients, we will update this Policy before the change takes effect. A current list of our service providers is available on request — contact us at support@avoidcontent.com.
6.2 Other members of your workspace. Content, activity history and your name/email are visible to members of the workspaces you belong to.
6.3 Legal and safety. Authorities, courts or advisors when required by law, or to protect the rights, property or safety of our users, the public or us.
6.4 Business transfers. A buyer or successor in the event of a merger, acquisition or sale of assets. We will notify you before your data becomes subject to a different privacy policy.
7. International data transfers
We and our service providers may process personal data outside the EU/EEA and the UK, including in the United States. The country where we are established will be published here once registration is complete.
When we transfer personal data out of the EU/EEA or the UK, we rely on an adequacy decision (including, where the recipient is certified, the EU-U.S. Data Privacy Framework and its UK Extension), or on Standard Contractual Clauses approved by the European Commission together with the UK International Data Transfer Addendum. The mechanism used for each provider is available on request, and you can request a copy of the relevant safeguards by contacting us.
8. How long we keep personal data
| Data | Retention period |
|---|---|
| Account data, brand profile, workspace data, billing details | While your account is active. Deleted within 30 days after your account is closed |
| Customer Content | While your account is active. Items moved to Trash are permanently deleted after 30 days |
| Session data (IP address, user agent) | 90 days after the session expires |
| Security logs (sign-ins, creation and revocation of API keys) | 1 year |
| Activity log | While the workspace exists |
| Email verification and password reset tokens | Until used or expired (verification links expire after 24 hours) |
| Billing records | As long as required by applicable tax and accounting law |
| Support communications | 2 years after the request is closed |
| Marketing email list | Until you unsubscribe, or after 24 months without any interaction with our emails |
| Backups | Overwritten within 35 days |
We may keep data longer where needed to resolve disputes, enforce our Terms, or comply with law. After the retention period, we delete or anonymize the data.
9. Security
We protect personal data with technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, hashed session and verification tokens, and role-based access within workspaces.
No method of transmission or storage is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant authorities as required by law.
10. Your rights
Wherever you live, you have the right to:
- Access — get a copy of your personal data;
- Rectification — correct inaccurate or incomplete data;
- Erasure — ask us to delete your data;
- Restriction — ask us to limit how we use your data;
- Data portability — receive the data you gave us in a structured, machine-readable format;
- Withdraw consent — at any time, where we rely on consent, without affecting processing before withdrawal.
Right to object. You have the right to object at any time to processing based on our legitimate interests, on grounds relating to your particular situation, and to object to direct marketing at any time.
How to exercise your rights. Email support@avoidcontent.com from the email address linked to your account. You can update most account data yourself in Settings. You can delete your account in Settings, where available, or by emailing us.
We respond within one month. If a request is complex or we receive many requests, we may extend this by two further months and will tell you why within the first month. We may ask you to verify your identity.
Your local law may give you additional rights. Residents of California — see Section 11.
Complaints. If you are in the EU/EEA or the UK, you can lodge a complaint with a supervisory authority:
- in the EU/EEA — the data protection authority in the country where you live or work, or where an alleged infringement took place;
- in the UK — the Information Commissioner’s Office (ICO), ico.org.uk.
We would appreciate the chance to address your concerns first.
11. Additional information for California residents
This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA“).
11.1 Personal information we collected in the last 12 months
| CCPA category | Examples | Source | Business purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Name, email address, IP address, account ID | You; Google sign-in; automatically | Providing the Service, security, communications | Cloud hosting, email delivery and payment processors |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, email, billing address, company name, VAT or tax ID, payment transaction details | You; payment processor | Payments, billing, tax | Payment processors, cloud hosting |
| Commercial information | Credits purchased, usage history | Automatically | Billing, fraud prevention | Payment processors, cloud hosting |
| Internet or network activity | User agent, sign-in activity, activity within the Service | Automatically | Security, audit trail | Cloud hosting |
| Professional information | Company name, company website, areas of expertise | You | Brand Voice feature | AI model providers, cloud hosting |
| Sensitive personal information | Account log-in in combination with password | You | Authentication only | Cloud hosting |
We do not collect precise geolocation, government identifiers or biometric data.
11.2 Sale, sharing and sensitive personal information. We do not currently sell or share (for cross-context behavioral advertising) personal information, and have not done so in the last 12 months. If this changes, we will update this section in advance and give you a way to opt out. We have no actual knowledge of selling or sharing personal information of consumers under 16. We use sensitive personal information only for purposes permitted by the CCPA (authenticating you and securing your account) and not to infer characteristics about you.
11.3 Your rights. You have the right to:
- Know the categories and specific pieces of personal information we collected, its sources, purposes and the categories of third parties we disclosed it to;
- Delete personal information we collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of sale or sharing and limit the use of sensitive personal information — we do not sell or share personal information or use sensitive personal information beyond permitted purposes, so there is nothing to opt out of;
- Not be retaliated against for exercising your privacy rights under the CCPA, including when you are an applicant, employee or independent contractor.
11.4 How to submit a request. Email support@avoidcontent.com with the subject “California privacy request”. We verify your identity by matching the request to the email address and details of your account. You may use an authorized agent; we will ask for proof that the agent is authorized and may ask you to verify your identity directly with us.
We respond within 45 days. If we need more time, we may extend this once by an additional 45 days and will notify you of the extension within the first 45 days.
12. Cookies and similar technologies
12.1 Web application. We use only cookies that are strictly necessary for the Service to work:
| Name | Purpose | Duration |
|---|---|---|
| access_token | Keeps you signed in | 15 minutes |
| refresh_token | Renews your session securely | Up to 30 days |
We also store your light/dark theme preference (theme-storage) in your browser’s local storage. It never leaves your device.
Strictly necessary cookies do not require consent, and the Service cannot work without them.
12.2 Marketing website. We may use the following on our marketing website:
- Analytics without cookies — aggregated statistics about visits that do not identify you;
- Analytics cookies (for example, Google Analytics) — to understand how visitors use the website;
- Advertising cookies and pixels (for example, Google Ads, LinkedIn, Meta) — to measure and improve our advertising.
In the EU/EEA and the UK, we set analytics and advertising cookies only with your consent, which you can give, refuse or withdraw at any time in our cookie settings. The cookies we currently use are listed in our cookie settings.
13. Children
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to this Policy
We may update this Policy. We will change the “Last updated” date and, for material changes, notify account holders by email or in the Service before the changes take effect.
15. Contact us
Avoid Content
Legal name and registered address: to be published once registration is complete.
Email: support@avoidcontent.com