Privacy policy

Last updated 17 September 2026

Connectwyze, of [registered address], Malaysia, operates Content Engine and is the data controller for the personal data described here. This policy explains what we collect, why, and what you can ask us to do about it. It is written to meet Malaysia's Personal Data Protection Act 2010, and the GDPR where it applies.

What we collect

• Account data: your name, email address, password (hashed by our authentication provider), and your organisation and role.
• Billing data: your plan, invoices and card details — the card itself is held by Stripe, not by us.
• Brand material you give us: website pages we crawl at your instruction, documents, product information, photographs and your own social posts.
• Connected accounts: access tokens for the social platforms you connect, the account names, published posts and their public metrics.
• Usage data: what was generated, when, what it cost in credits, and error logs.

Why we use it

To run the service you asked for (performing our contract): building your brand model, planning, writing, designing, checking, publishing, and reading back results. To take payment. To send service email — approvals, receipts, failures and usage alerts. To keep the service secure and to debug it. We do not sell personal data, and we do not use it for advertising.

Who we share it with

Only processors who help us run the service: Supabase (database and authentication), Vercel (hosting), Hetzner (our worker server), Stripe (payments), Resend (email), and the AI providers whose models generate and check content — currently Google, OpenAI, Anthropic, DeepSeek, MiniMax and OpenRouter. Content sent to these providers is processed to produce your output and is not used to train their models. We also share what you publish with the social platform you chose, at your instruction.

Where it is stored

Data is stored on servers in the European Union and in Singapore. Some processors operate elsewhere; where personal data leaves Malaysia or the EEA we rely on the provider's standard contractual clauses.

How long we keep it

For as long as your account is open. After you close it, workspace data is deleted within 90 days; invoices and ledger records are kept for seven years because tax law requires it. Disconnecting a social account deletes its tokens immediately.

Your rights

You may ask for a copy of your data, correct it, delete it, restrict or object to processing, or withdraw consent where we rely on it. Your credit ledger can be exported from the app at any time. Email support@connectwyze.com and we will answer within 30 days. You may also complain to Malaysia's Personal Data Protection Commissioner, or to your local supervisory authority in the EEA.

Children

The service is for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data.

Security

Data is encrypted in transit and at rest, access is scoped per organisation at the database level, and platform tokens are stored encrypted. No system is perfect: if a breach affects you, we will tell you and the regulator as the law requires.

Contact

support@connectwyze.com