Privacy Policy

Make My Content is operated by Prince Yadav (“we”, “us”). For data-protection purposes we are the controller of the personal data described below. You can reach us at workprince7070@gmail.com, or by post at the registered address listed on our Contact page.

We collect only what the service needs to function and to be paid for.

• Account data — your name, email address, password hash or federated-login identifier, and account role. Required to create an account.
• Creator profile (“Creator Brain”) — the niche, audience, tone, brand and format answers you give during onboarding, plus any later edits. This is the core of the product: it is stored so we do not have to ask you again.
• Content you submit — briefs, prompts, uploaded reference images and any text you type into the editor.
• Generated output — scripts, covers, carousels and thumbnails produced for you, together with their version history.
• Billing data — subscription tier, credit balance and an append-only ledger of credit movements. Card details are handled entirely by our payment processor; we never receive or store your full card number.
• Technical data — IP address, browser and device characteristics, timestamps, and error logs. Used for security, abuse prevention and debugging.

• To provide the service (performance of a contract) — running generations, storing projects, maintaining your credit balance.
• To take payment (performance of a contract) — subscriptions, credit top-ups, invoices and refunds.
• To keep the platform safe (legitimate interests) — rate limiting, detecting automated abuse of free credits, investigating fraud.
• To comply with law (legal obligation) — tax records, and responding to lawful requests.
• To send product email (consent, or legitimate interests for service notices) — you can opt out of marketing at any time; you cannot opt out of essential notices such as billing failures or security alerts.

Generating content means sending data to third-party AI providers. We want to be precise about this because it is the least obvious thing we do with your data.

• When you run a generation, we send the relevant parts of your Creator Brain, your brief, and the selected preset to an AI provider so it can produce your output. We send the minimum needed for the task.
• We contract with providers on terms that prohibit them from using your content to train their models. If we ever change providers, we apply the same requirement to the replacement.
• We do not sell your content, and we do not use your private projects to train any model of our own.
• AI output is generated, not verified. It can be inaccurate. You are responsible for reviewing anything you publish. See our Terms for the full disclaimer.

We share personal data only with the processors that make the service work, each bound by a data-processing agreement:

• AI providers, to generate your content (see clause 4).
• Our cloud hosting and database providers, which store the data at rest.
• Object storage, for generated images and uploaded references.
• Our payment processor, for subscriptions, invoices and refunds.
• Our transactional email provider, for account and billing email.
• Professional advisers, and authorities where the law requires it.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

We operate globally, so your data may be processed in a country other than your own — including the United States and the European Union. Where we move personal data out of the UK or EEA we rely on an adequacy decision, or on Standard Contractual Clauses together with any additional safeguards those clauses require.

• Account and Creator Brain data: for as long as your account is open.
• Projects and generated output: until you delete them, or until 30 days after account closure.
• Credit ledger and invoices: retained for the period tax law requires, typically 6–7 years. This ledger is append-only and cannot be edited, including by us.
• Security and error logs: up to 12 months.

When you close your account we delete or irreversibly anonymise your personal data within 30 days, except records we are legally required to keep.

Depending on where you live you may have the right to access, correct, delete, port or restrict your personal data, to object to processing based on legitimate interests, and to withdraw consent. If you are in the EEA or UK these rights come from the GDPR; if you are in California they come from the CCPA/CPRA; other regions grant comparable rights.

Email workprince7070@gmail.com to exercise any of them. We respond within 30 days. We will not charge you or degrade your service for making a request. If you are unhappy with our response you may complain to your local data-protection authority.

Passwords are hashed, never stored in readable form. All traffic runs over TLS. AI provider keys live only on our servers and are never sent to your browser — every AI request is made server-side. Access to production data is limited to the people who need it, and administrative access requires a second authentication factor.

No system is perfectly secure. If a breach affects your personal data and creates a risk to you, we will notify you and the relevant regulator within the timeframes the law sets.

We use a small number of first-party cookies: a session cookie to keep you signed in, a security cookie for administrative step-up authentication, and a preference cookie remembering your light or dark theme. These are strictly necessary or functional, so they do not require consent. We do not run third-party advertising or cross-site tracking cookies.

The service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact workprince7070@gmail.com and we will delete it.

If we make a material change we will email account holders and update the date at the top of this page before the change takes effect. Continuing to use the service after that date means you accept the revised policy.