Privacy Policy

Last updated: July 14, 2026

Content Architect (“we”, “us”) is operated by Ironact, Inc. This policy explains what information we collect, how we use it, and the choices you have. By using our website and services you agree to this policy.

Information we collect

  • Account data, name, email, and brand details you provide when you sign up or onboard.
  • Usage data, pages viewed, features used, and actions taken in the product, collected via analytics.
  • Device & log data, IP address, browser type, and cookies/identifiers.
  • Content you submit, e.g. Instagram handles or brand context entered into our tools, used to generate results.

How we use information

  • Provide, operate, and improve the service.
  • Generate analyses, creatives, and recommendations you request.
  • Measure and improve our marketing and advertising performance.
  • Communicate with you about your account and support.
  • Detect, prevent, and address security or technical issues.

Analytics & advertising

We use third-party tools to understand how the site is used and to measure advertising:

  • Meta Pixel (Meta Platforms), measures conversions and helps us optimize and attribute ads shown on Facebook and Instagram.
  • Google Analytics (Google), website usage measurement.
  • PostHog, product analytics.

These tools may set cookies and collect identifiers. You can control cookies through your browser settings, and opt out of interest-based ads via your Meta ad preferences and Google ad settings.

Google account data (Gmail)

If you connect a Google account, you grant Content Architect the gmail.send scope. We use this access only to send outreach and transactional emails on your behalf from your connected mailbox, as part of the campaigns you operate in the product. We do not read, store, or analyze the contents of your inbox, and we request no inbox-read scopes.

We store the OAuth refresh token needed to send on your behalf, encrypted at rest, plus the connected email address. You can disconnect at any time from your account settings or by revoking access at your Google Account permissions, which immediately ends our ability to send.

Content Architect’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to third parties except as necessary to provide or improve the sending feature, comply with law, or as part of a merger or acquisition.

Amazon 판매자 및 Fulfillment 데이터

Amazon Seller Central 계정을 연결하면 Amazon은 판매자 식별자와 사용자가 승인한 Selling Partner API 역할에 한해 사용할 수 있는 OAuth 권한을 Content Architect에 전달합니다. 이 권한은 팀의 승인된 구성원이 결정한 캠페인 기프트를 FBA 재고에서 Multi-Channel Fulfillment로 발송하고 배송 및 tracking 상태를 확인하는 데만 사용합니다. Amazon 구매자 주문, 메시지, 금융 데이터 또는 광고 데이터에는 접근하지 않습니다.

Amazon OAuth refresh token은 암호화하여 저장합니다. 판매자 식별자는 연동 계정을 구분하기 위한 운영 식별자로 저장하며 tenant isolation과 데이터베이스 접근 통제로 보호합니다. 수명이 짧은 access token은 서버에서만 사용하며 저장하지 않습니다. 크리에이터의 이름, 배송 주소, 선택한 seller SKU 및 수량은 판매자가 승인한 기프트를 발송하는 데 필요한 경우에만 Amazon에 전달합니다. 배송 주소는 암호화하여 저장하며 발송 목록 화면에 표시하지 않습니다.

Amazon 판매자 데이터를 판매하거나 광고에 사용하지 않으며, Amazon 자격 증명 또는 발송 데이터를 analytics 업체나 AI model provider에 제공하지 않습니다. 서비스 호스팅과 보안에 필요한 infrastructure provider에 적절한 기밀 유지 및 보안 의무 아래 제공하거나 법률상 요구되는 경우에만 공유합니다.

브랜드 관리자는 설정에서 언제든 Amazon 연결을 해제할 수 있으며, 이 경우 저장된 Amazon 권한이 삭제되고 API 접근이 종료됩니다. Seller Central에서도 권한을 철회할 수 있습니다. 확인된 삭제 요청이나 계정 종료 시 법률, 사기 방지 및 재무 기록 의무에 필요한 범위를 제외하고 관련 Amazon 연동 및 Fulfillment 데이터를 삭제하거나 비식별화합니다. 요청은 다음 주소로 보내주세요: privacy@ironact.net.

Sharing

We do not sell your personal information. We share data only with service providers that help us run the service (e.g. hosting, analytics, payments) under appropriate confidentiality obligations, or where required by law.

Data retention

We keep personal information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the email below.

Contact

Questions about this policy or your data? Email privacy@ironact.net.