Privacy Policy

This policy explains what we collect, why we collect it, and what we do not collect. It covers c3content.agency and the service provided through it.

1. What we collect

When you create an account: your name, email address and phone number. If you sign in with Google or another provider, we receive your name, email address and profile picture from that provider. We never receive your password for those services.

When you apply: the link to your long-form, the approximate size of your archive, the tier you are interested in, and anything you write in the notes field.

When you subscribe: Stripe collects and processes your payment details. We never see or store your card number. We keep a Stripe customer reference, your plan, its status and its renewal date.

When you visit: we record page views, clicks on links and buttons, and a periodic signal while the tab is open. Each record contains the page path, the referring site, the time, and a random session identifier. It does not contain your IP address, your device, your browser, or anything that identifies you personally.

That session identifier is generated in your browser, is not derived from your IP address, your device or your account, exists only for as long as the tab is open, and is discarded when you close it. Its sole purpose is to join your own page views together so we can tell whether a visit lasted ten seconds or ten minutes. It cannot be used to recognise you on a later visit, and it is never linked to your account even when you are signed in.

The material you send us: the video and audio you ask us to work from, and the clips we produce from it.

2. What we do not do

• We do not sell your personal information. We never have.
• We do not use advertising or third-party tracking cookies.
• We do not build advertising profiles or share data with ad networks.
• We do not store your IP address against your page views.

3. Cookies

We set cookies for one purpose: keeping you signed in. They hold your session so that you do not have to log in on every visit, and they are refreshed as you browse. Removing them signs you out. There are no analytics or advertising cookies on this site, which is why you are not being asked to accept a banner.

4. Why we are allowed to hold it

We process your account and application details in order to perform our contract with you, or to take steps at your request before entering one. We keep billing records because the law requires it. We count page views on the basis of our legitimate interest in knowing whether the site works, which is why that counting is anonymous.

5. Who else touches it

We use a small number of processors, each for one job:

• Supabase hosts the database and handles authentication.
• Stripe processes payments and holds the card details we never see.
• Vercel hosts and serves the website.

Notifications about new applications are sent to our own internal Discord workspace, which only we can see. We do not otherwise disclose your information, except where the law compels us to.

6. How long we keep it

Account and application records are kept while your account exists, and for up to twelve months after you close it in case you return. Billing records are kept for seven years because tax law requires it. Anonymous visit counts are kept for twelve months. Source material and delivered clips are kept for the duration of your subscription and for ninety days after it ends, then deleted.

7. Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@c3content.agency and we will respond within thirty days.

If you are in the UK or the EU you also have the right to object to processing carried out on the basis of legitimate interest, the right to data portability, and the right to complain to your national data protection authority. If you are in California you have the right to know what is collected and the right to deletion, and we confirm again that we do not sell or share personal information as those terms are defined by the CCPA.

8. Security

Data is encrypted in transit and at rest. Access to the database is restricted at the row level, so an authenticated user can read their own records and nothing else. Payment credentials never reach our servers.

9. Children

The service is for businesses and creators and is not directed at children under 13. We do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

10. International transfers

Our processors operate in the United States. If you are outside the United States your information will be transferred there, protected by the standard contractual clauses those processors have in place.

11. Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top always reflects the current version.