Security

Your data is yours.
Here's how we protect it.

We handle content — not your customer list, your CRM, your passwords, or anything your business runs on. Here's exactly what we access and how we protect it.

How your data is protected.

The only data we need is your business information, your brand voice preferences, and the content we create for you. That's it. Here's how we protect all of it.

Encryption at rest
AES-256
All stored data is encrypted using AES-256, the same standard used by banks and the federal government.
Encryption in transit
TLS 1.2+
All data transmitted between you and our systems is encrypted over TLS 1.2 or higher.
Data isolation
Row-Level Security
Your account data is isolated from every other customer using row-level security. No cross-client data access is possible.
Infrastructure
US-based hosting
All data is stored and processed on US-based servers with independent infrastructure audits.
Authentication
Google OAuth + JWT
Account access uses Google OAuth with JWT-based sessions. We never store account passwords.
Content history
Retained, not shared
Everything we write for you stays in your account. It is never used to train models or shared with other clients.

What we don't access. Ever.

We only need what's required to research and write content for your business. A lot of things that might come to mind — we don't touch them.

Your CRM or contact list Your customer's personal data Social media passwords Email subscriber lists Payment or banking info Analytics or tracking data Website admin access Google or Meta ad accounts

What we actually collect.

To do the work, we collect your business name, website, a description of what you do, your target market, and any content preferences or topics you want us to avoid. That's the complete list.

We do not embed tracking scripts in the content we publish to your site. We do not generate fake reviews or testimonials. We do not access any system that belongs to your customers.

Compliance responsibility.

We provide brand guardrails that enforce the restrictions you set during onboarding — topics you want avoided, claims you can't make, tone limits your industry requires. You're responsible for reviewing published content before it goes live in regulated contexts.

Our guardrails reduce the surface area for mistakes. Your final review is the last line before publishing — especially for financial, legal, and healthcare content.

Security questions?

Reach out directly. We respond to all security inquiries within one business day.

[email protected]