OSContent OS

Privacy policy

Last updated 30 October 2026

This policy explains what Content OS (“we”) collects when you use the-content-os.com, how we use it and the choices you have. Questions: matt@matt-penny.com.

What we collect

  • Account details: your email address and a securely hashed password.
  • Content you create: content ideas, storyboards, checklists, packaging, inspiration you save, short links and settings. Copies of YouTube thumbnails you save to Inspiration are stored at unguessable public image URLs.
  • Connection details you give us: your YouTube Data API key and channel handle, and your Zernio API key for Instagram.
  • Stats we sync: public channel totals from YouTube (subscribers, views, video count, per-video views) and follower and view counts for your Instagram account from Zernio.
  • Short link clicks: the time, referring page, browser user agent and a one-way hash of the visitor's IP address. We do not store the IP address itself.
  • API keys you create: we store only a hash of each key, plus its name and when it was last used.

Google and YouTube data

If you choose to connect YouTube Analytics, you sign in with Google and grant Content OS read-only access to your YouTube channel and its analytics (the youtube.readonly and yt-analytics.readonly scopes). We use this access only to:

  • identify the channel you connected, so we can show its name; and
  • show you your own channel's analytics (views, watch time, average view duration, subscribers gained and lost, likes, comments, shares, top videos and traffic sources) in your dashboard, and through the API keys you create.

We store the refresh token Google issues and your channel name. We do not store the analytics themselves; they are fetched from Google each time you view them. We never post, edit or delete anything on YouTube, we do not use Google data for advertising, we do not sell it, and we do not share it with anyone except as needed to run the service (see “Service providers”). No person at Content OS reads your Google data unless you ask us to for support, or the law requires it.

Content OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Content OS uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.

How we use your data

Only to provide Content OS to you: showing your stats and content, syncing them daily, sending sign-in emails and keeping the service secure. We do not use your data to train AI models. If you use the optional AI prompt feature on a video segment, that segment's text is sent to our AI provider to generate the prompt.

Service providers

  • Supabase: database, sign-in and file storage.
  • Vercel: hosting.
  • Google / YouTube: YouTube stats and, if you connect it, YouTube Analytics.
  • Zernio: Instagram stats, using the key you provide.
  • OpenRouter: the optional AI prompt feature.

Your choices

  • Disconnect YouTube, Instagram or YouTube Analytics at any time in Settings. Disconnecting deletes the stored key or token, and for YouTube Analytics also revokes our access with Google.
  • You can also remove Content OS's access from your Google account at myaccount.google.com/connections.
  • Revoke API keys at any time on the API page.
  • To delete your account and all its data, email matt@matt-penny.com from the address you signed up with. We delete it within 30 days.

Retention and security

We keep your data while your account is open and delete it when you ask us to. Data is encrypted in transit, access to each account's data is restricted to that account, and API keys are stored only as hashes.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is significant. See also our terms.