Privacy Policy

1. Introduction

Contea ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform ("Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and company name when you register
• Client Data: Information about your clients including business names, industries, and branding materials
• Content: Posts, images, videos, and other content you create or upload
• Payment Information: Billing details and payment method information for paid subscriptions
• Communications: Information you provide when contacting our support team

2.2 Information from Third-Party Platforms

When you connect social media accounts, we collect:

• Profile information (name, username, profile picture)
• OAuth tokens for authorized access
• Page and account information for connected platforms
• Post performance and analytics data

2.3 Automatically Collected Information

• Device information (browser type, operating system)
• Log data (IP address, access times, pages viewed)
• Usage data (features used, actions taken)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process and publish content to connected social media platforms
• Generate AI-powered content suggestions and topics
• Send service-related communications and updates
• Process payments and billing
• Analyze usage and improve user experience
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Contract: Processing necessary to fulfill our service agreement with you
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing necessary to comply with applicable laws

5. Data Recipients

We may share your information with the following categories of recipients:

• Social Media Platforms (Meta/Facebook, Instagram, LinkedIn, TikTok, YouTube): To publish content on your behalf to connected accounts
• Cloud Hosting & Database Provider (Supabase, Inc., USA): To operate and store Service data – transfers covered by EU Standard Contractual Clauses
• AI Service Providers (OpenAI, Inc., USA / Anthropic, PBC, USA): To process content generation requests – transfers covered by EU Standard Contractual Clauses
• Payment Processor (Stripe, Inc., USA): To process payments and billing – transfers covered by EU Standard Contractual Clauses
• Email Service Provider (Resend, Inc.): To send transactional emails
• Legal Authorities & Regulators: When required by law or to protect our rights
• Business Successors: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and audits
• Access controls and monitoring
• Secure storage of OAuth tokens and credentials

7. Data Retention

We retain your personal data only for as long as necessary for the stated purposes. Specific retention periods by data category:

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@contea.io.

9. Cookies and Tracking Technologies

We use the following categories of cookies:

You can manage cookies via the banner on first visit or through your browser settings. Disabling strictly necessary cookies may impair Service functionality.

10. Automated Processing and Profiling

The Service uses AI to analyse inputs you provide (topics, client instructions, profile settings) in order to generate content suggestions. This activity may involve automated processing of personal data within the meaning of Art. 22 GDPR.

• Automated processing takes place: Yes – AI models process your inputs to generate content suggestions
• Profiling takes place: To a limited extent – the system tailors suggestions based on your client settings and instructions
• Decisions with legal effects: No – all generated content is a suggestion only; the final publication decision always rests with the user
• Logic used: Third-party language models (OpenAI / Anthropic) process your instructions and client context
• Right to review: You have the right to request human review of any automated processing that affects you

11. Data Protection Officer (DPO)

By Urban s.r.o. has not appointed a Data Protection Officer (DPO) because, following our assessment, we do not meet the criteria for mandatory appointment under Art. 37 GDPR (we are not a public authority, do not carry out large-scale processing of special categories of data, or systematic large-scale monitoring of individuals). For all data-protection enquiries please contact us at: info@contea.io

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other lawful transfer mechanisms

13. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete that information promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service or by email. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

By Urban s.r.o.
Company ID: 19440987
Registered address: Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic
Registered at: Regional Court in Brno, file no. C 134618
Email: info@contea.io
Website: https://contea.io

For users in the EEA, you have the right to lodge a complaint with your local data protection authority (in the Czech Republic: Office for Personal Data Protection, uoou.cz) if you believe your rights have been violated.