Privacy Policy

Contropix ("we", "us", "our") operates this platform. This policy explains what information we collect when you use the platform - as an account holder, as a member of an Organization, or as a visitor to a Link-Tree or Landing Page hosted on the platform - and how we use, share and protect it.

We collect only what the platform needs to work. We do not run advertising, we do not use analytics or tracking services, and we do not sell information about you. This policy takes effect on October 12, 2026 and forms part of our Terms of Use.

Account and profile

When you register we ask for your email address and a password. Your password is stored only as a cryptographic hash; we cannot read it. To complete your profile you add a display name and at least one channel - the link to your account on YouTube, Instagram, TikTok or another platform - and you may add more channels, a profile image, a short bio and other links.

Two-step sign-in

Every sign-in is confirmed with a one-time code that we email to you, or - if you set one up - with a code from an authenticator app. You can also ask for a sign-in link by email instead of typing your password; we store the link only as a hash, and it works once, for 15 minutes. For an authenticator app we store its secret encrypted, and the recovery codes we give you only as hashes. We also record when a code was used and how many wrong codes were entered, so we can stop repeated guessing.

Organizations and teams

We store the name of each Organization you create, its members, their roles and any function titles, and the email addresses of the people you invite. Invitations are sent to those addresses by email.

Content you create

Everything you add to the services is stored so we can show it back to you, your team and - where you publish it - the public: Link-Tree links, bio, image and any contact buttons; Landing Page text, media and settings; the Brand Kit logo, colour and font; and in the Production Workspace, projects, briefs, scripts, video details and stage notes with their earlier versions, tasks, uploaded assets and every earlier version of them, AI-generated thumbnails, approval decisions, comments and mentions.

Billing and credits

Paid plans and credit packs are handled by Polar, our payment provider. Polar collects your payment details directly; we never receive your full card number. From Polar we receive and store the subscription's plan and status, identifiers for your Polar customer and subscription, credit-pack purchases, and invoice records (amount, currency, status, issue date and a link to the invoice). We also keep a record of the AI credits each Organization receives, spends and gets back.

Messages you send us

If you write to us, by email or through the contact form, your message and contact details are delivered to our mailbox, where we keep them for as long as needed to answer you. The platform itself does not store contact-form messages.

When you use the platform, our servers record a limited amount of technical information:

• Request logs: the address requested, the time, the outcome and response time, a request identifier, your IP address, and - for signed-in requests - your user and Organization identifiers. We use these logs to operate, secure and debug the platform.
• Session records: when you sign in we create a session that records your browser's user-agent string and the session's creation and expiry times, so you can stay signed in and so sessions can be revoked.
• Rate-limit counters: for sign-in, sign-up, sign-in codes, password resets and the contact form we count attempts per IP address for a short window, to slow down abuse.
• Preferences: your language (English or Arabic), your theme (dark, light or system), whether you receive notification emails, and the Organization you last viewed.

We do not collect precise location, biometric, health or financial information, and we do not use advertising identifiers. Aggregate service metrics (such as request counts and response times) contain no personal information.

The platform sets only first-party cookies, all of which are needed for it to work or to remember your preferences:

• access_token and refresh_token - keep you signed in. They are httpOnly (not readable by scripts) and expire automatically; the refresh token is replaced each time it is used. If you untick "Keep me signed in", the refresh token is deleted when you close the browser.
• two_factor_challenge - links the password step of a sign-in to its code step. It is httpOnly and lasts only until the code is entered or expires.
• org_id - remembers which Organization you are viewing in the dashboard.
• locale and theme - remember your language and theme. Your theme choice is also kept in your browser's local storage.

While you sign in, the email address you type is kept in that browser tab's session storage, so the sign-in, registration and password-reset pages don't start empty. It is removed when you sign in or close the tab, and it never leaves your browser.

We do not use third-party, analytics or advertising cookies. You can delete cookies in your browser at any time; deleting the authentication cookies signs you out.

We use the information described above to:

• create and secure your account, confirm each sign-in and keep your sessions valid;
• run your Organizations - memberships, roles, invitations and the content each member is allowed to see;
• provide the services: host your Link-Tree and published Landing Pages, store and version your production assets and documents, generate AI thumbnails when a member asks for one, and route tasks, approvals, comments and mentions to the right members through in-app notifications;
• show your YouTube channel's public details - its latest uploads and public statistics such as subscribers and views - on your Link-Tree and Landing Page, by fetching them through the YouTube Data API;
• show the Instagram and TikTok posts you feature on your Link-Tree and Landing Page: for a TikTok post we fetch its cover image, caption and author name from TikTok's public embed service, and an Instagram post is shown with Instagram's own embed;
• send emails: sign-in codes and sign-in links, password-reset links, Organization invitations, security notices (for example when an authenticator app is turned on or off), billing notices to the Owner, and - unless you switch them off in your settings - notification emails about assignments, mentions and review decisions. We do not send marketing email;
• bill paid plans and credit packs through Polar and show the Owner the Organization's subscription, credits and invoices;
• keep the platform secure and reliable - detecting abuse, rate-limiting sensitive requests, monitoring availability and keeping backups;
• respond to your requests and comply with legal obligations.

When a member generates a thumbnail in the Production Workspace, we send our AI provider what it needs to design it: the description and style the member chose, the video's title, its brief and the opening of its script, and the labels of any images the member attached. When OpenAI draws the image, the attached images themselves are sent as well. We do not send names, email addresses or other account details.

Depending on how the platform is configured, OpenAI or DeepSeek writes the design and OpenAI or DeepSeek draws the image. They process this information to return the result. We keep the generated thumbnail, the instructions sent to the image model and the credits spent, with the project.

A Link-Tree and a published Landing Page are public. Anyone with the address can view them without an account, and search engines may index them. Whatever you place on them - including your profile image, bio, links, contact buttons, media, your channel's latest videos and statistics, the follower figures you type, the posts you feature, and the names and titles of team members you add - becomes visible to those visitors.

Visitors to public pages are not asked to sign in and no tracking cookies are set for them; their requests appear in our request logs like any other visit. On a page with featured posts, TikTok cover images load from TikTok's servers, and an Instagram post loads from Instagram only when the visitor chooses to show it - Instagram may then set its own cookies, under Instagram's privacy policy. Content inside the dashboard and the Production Workspace is never public; it is visible only to the members of the Organization it belongs to, according to their roles.

We share information only in these situations:

• Members of your Organizations see your name, profile image and the content you add there, according to their roles.
• Service providers that process information on our behalf and only for the purposes above: Polar (payments and invoicing), Resend (sending email), Hostinger (our mailbox, which receives messages you send us), OpenAI and DeepSeek (AI thumbnails, as described above), Vercel (hosting the website) and Namecheap (the servers that run the platform, its database and your uploaded files). To show your channel's details we send the identifier of your linked YouTube channel to Google's YouTube Data API, and to show a featured TikTok post we send its link to TikTok's embed service; nothing else about you is sent.
• Our platform team can see account and Organization records - names, email addresses, profile images, memberships, plans and the names of published pages - to provide support, handle billing and keep the platform secure. The tools they use for this do not show the content inside an Organization's dashboard or Production Workspace.
• Legal reasons: when required by law, a court order or a public authority, or when necessary to protect the rights, safety or property of users, the public or us.
• A business transfer: if the platform is acquired or merged, information may be transferred to the new operator under this policy.
• With your consent, for anything not listed here.

We do not sell personal information and we do not share it with advertisers.

We keep information for as long as it is needed for the purpose it was collected for:

• Account, profile, Organization and content data, including generated thumbnails and the credit record - for as long as the account or Organization exists. Deleting an Organization removes its content, including uploaded files and earlier versions; deleting an account removes it and the personal Organization it owns.
• Sessions - an access token is valid for 15 minutes and a refresh token for 30 days (12 hours without use if you untick "Keep me signed in"); sessions are revoked immediately when you sign out or reset your password.
• Sign-in codes - valid for 10 minutes, and each one can be used once. After five wrong codes, code entry pauses for 15 minutes.
• Sign-in links - valid for 15 minutes and once; asking for a new one, or resetting your password, deletes the old one.
• Authenticator app and recovery codes - until you turn the app off or create new recovery codes.
• Password-reset links - valid for one hour, or until used.
• Invitations - valid for seven days.
• Rate-limit counters - at most one hour.
• Request logs - 30 days.
• Backups - 7 days; information deleted from the platform disappears from backups when they rotate.
• Invoice records - for as long as tax and accounting law require.

Information travels between your browser and the platform over encrypted connections. Passwords are stored as salted hashes, every sign-in is confirmed with a second step, authentication uses short-lived tokens in httpOnly cookies backed by server-side sessions that can be revoked, and every request is checked against your membership and role so that one Organization can never see another's data. Files that are not published are only ever delivered through authenticated requests. We monitor the platform's health and keep backups so that we can recover from failures.

No system is completely secure, and we cannot guarantee that information will never be accessed without authorisation. If you discover a security problem, please tell us at info@contropix.com.

You are in control of most of your information from the dashboard:

• edit your display name, channels, bio, image and social links in account settings, and change your password;
• set up or turn off an authenticator app for signing in, and create new recovery codes;
• choose your language and theme, and switch notification emails on or off;
• leave an Organization, or - as its Owner - manage its members and delete it;
• unpublish or delete your public pages and any content you added.

Depending on where you live, you may have legal rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to complain to a data-protection authority. To exercise these rights, or to ask us to delete your account, contact us at info@contropix.com or through the contact page. We will respond within the time required by applicable law and may ask you to confirm your identity first.

The platform is hosted in the United States. Our service providers may process information in other countries - OpenAI in the United States and DeepSeek in China, for example. Where information is transferred across borders, we rely on the safeguards required by applicable law, such as approved contractual terms with those providers.

The platform is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, please contact us and we will remove it.

We may update this policy as the platform changes. The date at the top shows when it last changed. For material changes we will notify you through the platform or by email before they take effect.

Privacy questions and requests can be sent to Contropix at info@contropix.com or through the contact page.