Privacy policy

Content Bureau is operated by James Wood, a sole trader based in the United Kingdom, from contentbureau.online. Contact: jameswood@contentbureau.online.

• Your email address, so magic-link sign-in works.
• The brand and campaign briefs you submit, so the tool can generate ad copy.
• The generated ad concepts and variants tied to your account.
• OAuth access tokens if you explicitly connect an advertising account (Meta, TikTok, LinkedIn), so the tool can launch and read metrics on your instruction.
• Basic server logs (IP address, timestamps) held short-term for security and abuse prevention.

Solely to run the service for you. Briefs are used to generate variants; OAuth tokens are used to launch and report on the campaigns you asked us to. Nothing is used for advertising, profiling or analytics beyond what you can see in your own account.

Data is stored on Supabase (EU region) under Row-Level Security, meaning each user can only read and write their own rows. Access tokens are stored encrypted at rest. Content Bureau does not resell, syndicate, or share your data with third parties, other than the advertising platforms you personally connect and the language-model provider (Anthropic) used to generate the ad copy from your brief.

Data is retained for as long as your account exists. When you delete a brand, brief or variant, the row is removed from the database immediately. When you close your account, all data tied to your user is removed within 30 days.

You have the right to access, correct, export, restrict processing of, or delete your personal data. Email jameswood@contentbureau.online and we will action the request within 30 days. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Content Bureau sets one first-party session cookie (via Supabase Auth) so you stay signed in. There are no third-party analytics, tracking or advertising cookies.

If we materially change this policy we will update the date above and email registered users before it takes effect.