Privacy Policy

This Privacy Policy explains how SAKHANDA CO LTD, UIC 208597599, 13 Dimitar Petkov Blvd., 1309 Sofia, Bulgaria ("we", "us") processes personal data when you use Contenter (the "Service") at contenter.net. We are the data controller for the processing described here.

1. Data we collect

Account data: name, email address, password (stored as a one-way hash), interface language and plan.

Content data: source material you submit (text, links, documents, audio), brand voice examples, generated content, images and version history.

Billing data: subscription status and plan, processed by Stripe. We store only a reference to your Stripe customer and the last four digits of your card — never full card numbers.

Technical data: IP address, browser information, request URLs and timestamps in server logs; error reports; reCAPTCHA signals on public forms.

Integration data: Telegram channel identifiers you connect and the delivery status of scheduled posts.

2. Why we process it and on what legal basis

To provide the Service under our contract with you (Art. 6(1)(b) GDPR): account management, content generation, publishing, billing and support.

For our legitimate interests (Art. 6(1)(f) GDPR): securing the Service, preventing abuse, monitoring errors and improving features.

To comply with legal obligations (Art. 6(1)(c) GDPR): accounting and tax records.

With your consent where required (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. AI processing

To generate content, your source material and prompts are sent to third-party AI model providers (currently OpenAI; we may also use Anthropic). We use their business APIs, which per their terms do not use API data to train their models. Audio files you upload are transcribed by the same providers.

4. Processors and recipients

We share data only with processors necessary to run the Service: Stripe (payments), OpenAI / Anthropic (AI processing), Resend (transactional email), DigitalOcean (hosting, Frankfurt, EU), Telegram (publishing to channels you connect) and Google reCAPTCHA (bot protection on public forms). Each processor is bound by its own data processing terms.

Some processors are located outside the EEA (for example in the United States). Transfers rely on the European Commission's adequacy decisions or Standard Contractual Clauses.

5. Cookies and analytics

The Service uses cookies necessary for it to function: session, authentication and CSRF-protection cookies, and your language preference. Google reCAPTCHA may set its own cookies on pages where it runs.

We use Google Analytics to understand how the Service is used (pages visited, approximate region, device type). Google Analytics sets its own cookies and processes data under Google's terms. You can opt out with the Google Analytics Opt-out Browser Add-on or by blocking analytics cookies in your browser. We do not use advertising cookies.

6. Retention

Account and content data are kept while your account is active and deleted or anonymised within 30 days of account deletion. Server logs are kept up to 14 days, AI request logs up to 30 days. Billing records are kept for the period required by Bulgarian accounting law (currently up to 10 years).

7. Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, restrict or object to its processing, receive it in a portable format and withdraw consent. To exercise these rights, contact us at webfaba@gmail.com. We respond within one month.

You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (cpdp.bg), or the authority in your EU country of residence.

8. Security

Data is encrypted in transit (TLS), passwords are hashed, access to production systems is restricted and protected by key-based authentication, and we keep regular backups. No system is perfectly secure; we will notify you and the supervisory authority of personal data breaches as required by law.

9. Children

The Service is not directed at children under 16, and we do not knowingly process their data. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy. For material changes we will notify you in the Service or by email before they take effect. The date above shows when this Policy was last revised.

11. Contact

For any privacy questions or requests: SAKHANDA CO LTD, UIC 208597599, 13 Dimitar Petkov Blvd., 1309 Sofia, Bulgaria. Email: webfaba@gmail.com.