ContentChat (“we”, “us”) is an AI-assisted editor for existing websites. This policy explains what personal data we collect when you use contentchat.app and the ContentChat service, why we collect it, and the choices you have.
1. Data we collect
Account data
- Your name, email address, and profile image, provided directly or by the sign-in provider you choose (GitHub or Google).
- If you sign up with email and password, a salted hash of your password. We never store the password itself.
Connection data
- OAuth tokens and installation credentials for the services you connect (e.g. a GitHub App installation scoped to the repositories you select, or FTP/WordPress credentials you provide). These are stored encrypted and used only to read and write the site content you ask us to edit.
Site content and chat data
- The content of your connected site's files, a structural index (“schema”) of its pages, versions of files we change on your behalf (so you can undo), and the messages you exchange with the AI assistant.
- Images or other files you upload for use on your site.
Payment data
- Payments are processed by Stripe. We never see or store your card number — we store only your Stripe customer ID, plan, and subscription status.
Usage and diagnostics
- Error reports (via Sentry) and product analytics events (via PostHog), such as pages visited and features used, so we can fix bugs and improve the product.
2. How we use your data
- To operate the service: reading your site, proposing edits, and applying the changes you confirm.
- To power the AI assistant: your instructions, relevant site content, and chat history are sent to our AI providers (Anthropic, and OpenAI as a fallback) to generate responses. Under our agreements, these providers do not use API data to train their models. If you supply your own Anthropic API key, requests are made with your key under your own agreement with Anthropic.
- To bill you for paid plans, via Stripe.
- To notify you about the service (e.g. platform support you asked to be notified about).
- To debug problems and understand aggregate usage.
We do not sell your personal data, and we do not use your site content for anything other than providing the service to you.
3. Third parties we share data with
- Anthropic / OpenAI — AI processing of your instructions and relevant site content.
- Stripe — payment processing.
- GitHub / Google — authentication, and (GitHub) reading/writing your connected repositories.
- Supabase — managed Postgres database hosting.
- Sentry — error monitoring.
- PostHog — product analytics.
- Our hosting provider — running the application and storing uploads.
4. Data retention
We keep your data while your account is active. File versions and chat threads are kept so you can review and undo past edits. If you delete a connected site, its stored content, schema, versions, and chat threads are removed. If you want your entire account and its data deleted, contact us at info@alian.co and we will complete the deletion within 30 days.
5. Your rights
Depending on where you live (including under the GDPR and similar laws), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email info@alian.co.
6. Security
Connection credentials are stored encrypted, access to production systems is restricted, and all traffic is encrypted in transit (TLS). No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.
7. Cookies
We use cookies for authentication (keeping you signed in) and, where enabled, analytics. Authentication cookies are essential to the service.
8. Children
ContentChat is not directed at children under 16, and we do not knowingly collect their data.
9. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced on this page with an updated date, and — for significant changes — by email.
10. Contact
Questions about this policy or your data: info@alian.co.