GDPR Compliance

ContentZero is operated by Mike McCabe. For GDPR purposes, ContentZero acts as the data controller for personal data collected through contentzero.life.

Contact: [email protected]

We process personal data under the following legal bases:

Contract performance — Processing your account data, subscription details, and site configurations to deliver the ContentZero service you signed up for.

Legitimate interests — Analytics to improve the product, fraud prevention, and security monitoring.

Legal obligation — Retaining billing records as required by applicable tax and financial regulations.

Account data: Name and email address provided via Manus OAuth at sign-up.

Site configuration data: Website URLs, keywords, and niche descriptions you enter to configure content generation.

Generated content: AI-produced articles associated with your account and sites.

Billing data: Subscription status and payment method metadata processed by Stripe. We never store full card numbers.

Usage data: Feature interactions, page views, and error logs for product improvement. No cross-site tracking.

If you are located in the EU/EEA, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your account and data
• Portability — Export your data in a machine-readable format
• Objection — Object to processing based on legitimate interests
• Restriction — Request restricted processing in certain circumstances

To exercise any of these rights, email [email protected]. We respond within 30 days.

Account and content data is retained for the duration of your subscription plus 90 days after cancellation, after which it is permanently deleted. Billing records are retained for 7 years as required by law. You can request immediate deletion by contacting us.

ContentZero uses infrastructure hosted in the United States. Data transfers from the EU/EEA are covered by Standard Contractual Clauses (SCCs) with our sub-processors, including Stripe and our cloud hosting provider.

We use the following sub-processors to deliver the service:

• Stripe — Payment processing
• OpenAI — AI content generation (no data used for model training per our agreement)
• Manus — Authentication (OAuth provider)

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In Ireland, this is the Data Protection Commission.