Privacy Policy

Last updated: April 2026

AutoCMO ("we", "us") provides an autonomous marketing service. This page explains what we collect, why, and how to control it. We aim for the minimum data needed to operate the service.

What we collect

Account info you give us (business name, description, industry, audience). Content the service generates on your behalf. OAuth tokens for the platforms you connect (Meta, Google, LinkedIn, X, TikTok, Resend, WordPress) — encrypted with Fernet at rest. Operational metrics from those platforms (impressions, clicks, spend) so the optimization loop can do its job. Server logs (IP, user agent, request path) for security and debugging.

How we use it

Solely to operate AutoCMO for you: research your market, write content, publish on your behalf, analyze metrics, and improve future campaigns. We do not sell, rent, or share data with third parties for advertising. Generated content is processed by Anthropic (Claude) and, optionally, OpenAI / Replicate / Stability for media.

Where it lives

Render's managed Postgres in the EU/US (region of your instance). OAuth tokens are encrypted at rest. Generated media files live on the same disk volume. We don't ship raw data to any third party except the LLM/media providers you've configured.

Your rights

You can disconnect any platform from the Connections page (we revoke and delete the token immediately). You can delete a business and all its content via the API or by emailing us — we delete within 30 days. EU/UK residents have GDPR rights (access, rectification, erasure, portability) — same email.

Cookies

We set one cookie: `biazmark.lang` (your language preference, 1 year). No tracking, no analytics, no ad pixels.

Changes

We'll update this page when material things change and bump the date at the top.

Contact

Reach us by email — see the project repository on GitHub.

Privacy Policy · AutoCMO