Privacy Policy

1. Introduction

Content Into Revenue ("CIR," "Company," "we," "us," or "our"), operated by Matt Johnson, respects your privacy and is committed to transparent, responsible handling of personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you:

• Visit https://contentintorevenue.com.
• Contact us or request information about our services.
• Schedule consultations or submit forms.
• Purchase or use our content marketing services.
• Access our content review or approval portals.
• Connect authorized third-party accounts.
• Otherwise interact with our business.

This Policy also explains how artificial intelligence and automation may be involved in processing information to deliver our services.

By using our website or services, you acknowledge that you have been provided this Privacy Policy. Where required by applicable law, we obtain separate consent for specific processing activities.

2. Information We Collect

Depending on how you interact with CIR, we may collect the following categories of information.

2.1 Contact and Business Information

• Name and business name.
• Email address.
• Telephone number.
• Job title and professional role.
• Company website.
• Business social media profiles.
• Industry and service information.
• Information provided through forms, consultations, or correspondence.

2.2 Account and Service Information

• Client account identifiers.
• Authorized user and reviewer details.
• Service subscriptions and account status.
• Content preferences and brand guidelines.
• Approval records, feedback, and revision requests.
• Service-related communications.
• Support requests and account activity.

2.3 Client Content and Media

When providing services, CIR may process client-authorized materials, including:

• Written content and marketing documents.
• Brand information and creative briefs.
• Photographs, graphics, audio recordings, and videos.
• Social media content and associated metadata.
• Marketing assets and performance reports.
• Files provided through connected storage systems.
• Information contained within uploaded materials.

Client Content may contain personal information about employees, customers, or other individuals. Clients are responsible for ensuring they have the necessary rights and legal basis to provide that information to CIR.

2.4 Technical and Usage Information

When you visit our website or use our systems, certain information may be collected automatically, including:

• IP address.
• Browser type and device characteristics.
• Operating system.
• Referring website.
• Pages viewed and interactions.
• Access timestamps.
• Security and diagnostic logs.
• Cookie or similar technology identifiers, where used.

The specific data collected depends on the website configuration and technologies enabled. Our website loads a third-party chat and messaging widget that may collect the technical and usage information described above, as well as the contact and message content you choose to submit through it.

2.5 Payment Information

If you purchase services, CIR or its authorized payment providers may process billing names, payment information, transaction amounts, and related account details.

Payment card information is collected and processed by a third-party payment provider. CIR does not store full payment card numbers.

2.6 Connected Platform Information

When a client authorizes integrations, CIR may receive access to information necessary to provide the requested services, potentially including:

• Account and profile information.
• Authorized media files and folders.
• Content and publishing metadata.
• Account identifiers.
• Platform permissions and authorization tokens.
• Scheduling and publishing status.
• Relevant analytics and performance information.

We seek to limit access to information reasonably necessary for the authorized service.

3. How We Use Information

We may use personal information to:

1. Respond to questions, inquiries, and consultation requests.
2. Provide and administer our Services.
3. Set up and manage customer accounts.
4. Develop content strategies and marketing assets.
5. Process authorized customer media and materials.
6. Operate AI-assisted content production workflows.
7. Present drafts for review and approval.
8. Manage permitted integrations and content distribution.
9. Provide customer support.
10. Process payments and administer subscriptions.
11. Monitor website and system performance.
12. Maintain security, detect misuse, and prevent fraud.
13. Comply with legal obligations.
14. Improve our general software, reliability, and internal operations where lawfully permitted.
15. Send marketing communications where permitted by law and applicable preferences.

We do not treat a client's authorization to create content as unrestricted authorization to publish content, disclose private files, or access unrelated accounts.

4. Artificial Intelligence and Automated Processing

CIR uses artificial intelligence and automation technologies to assist with content marketing services.

These technologies may support:

• Content research and planning.
• Marketing strategy development.
• Draft generation and editing.
• Content categorization and repurposing.
• Image and video production.
• Brand voice adaptation.
• Workflow coordination.
• Quality analysis and improvement.
• Administrative and operational tasks.

Information supplied for these purposes may be processed by authorized AI technology providers according to their applicable agreements, technical settings, and privacy commitments.

Client Content Protection

CIR's intended data-handling principles are:

• Client information is processed for authorized business purposes.
• Access to client content is limited based on operational need.
• Customer information is not intentionally disclosed to unrelated customers.
• Client information is not sold as a standalone data product.
• Identifiable confidential client content is not used to train general-purpose AI models without appropriate authorization.
• Third-party AI processing is subject to applicable vendor agreements and configurations.

These commitments are subject to verification that CIR's actual vendor settings, subprocessors, and production workflows support them.

Human Oversight

CIR's standard content workflow incorporates human review and approval before publication.

Automation may prepare, transform, or organize content, but content approval alone does not provide unrestricted authority to publish material.

We do not represent that all AI-assisted outputs have been independently fact-checked unless that verification has actually occurred.

5. Third-Party Service Providers

CIR may use third-party technology and service providers to operate the website and deliver contracted services.

Depending on the services and integrations enabled, these may include:

• Website hosting and cloud infrastructure providers.
• Data storage and database services.
• Authentication and access management providers.
• Artificial intelligence service providers.
• Automation and workflow platforms.
• Email and communication providers.
• Payment processors.
• Marketing and customer relationship management systems.
• Cloud media storage providers.
• Social media and content distribution platforms.
• Video editing, graphics, and content production applications.
• Website analytics and performance monitoring services.
• Chat and messaging widgets used to collect inquiries.

Examples of technologies used or contemplated in CIR's service architecture include Google Drive, GoHighLevel, Vercel, Supabase, and authorized AI or automation platforms.

This list does not establish that every provider receives personal information or is currently active.

Service providers may process information only within the scope of their applicable contractual arrangements and technical access.

We may also disclose information when required by law, in connection with a legitimate business transaction subject to appropriate safeguards, or when necessary to protect rights, safety, or security.

We do not authorize service providers to use confidential client materials for unrelated marketing or other independent purposes merely because they support CIR's services.

6. Customer-Controlled Information

When CIR processes personal information solely on behalf of a business customer, that customer may determine the purposes and means of the underlying processing.

In those circumstances, CIR generally acts as a service provider or processor, subject to the applicable customer agreement.

Requests concerning personal information controlled by a CIR customer may need to be directed to that customer.

CIR will provide reasonable assistance to business customers in fulfilling applicable privacy obligations.

CIR may act independently as a business or controller with respect to information collected for its own sales, account administration, website operations, billing, and lawful business purposes.

7. Cookies and Tracking Technologies

Our website may use cookies or similar technologies for:

• Essential site functionality.
• Session management and authentication.
• Security and fraud prevention.
• Website performance measurement.
• Analytics and service improvement.
• Marketing measurement, if enabled.

Our website loads a third-party chat and messaging widget (the LeadConnector chat widget) that may set or read cookies and similar identifiers to operate the widget, recognize returning visitors, and support session continuity. The widget provider processes this information according to its own privacy policy and settings.

Some cookies are necessary for requested functionality, while others may be optional.

Where legally required, CIR will obtain appropriate consent before using nonessential cookies or tracking technologies.

You may manage certain cookies through your browser settings or any cookie preference controls available on our website.

Because the embedded chat widget may engage in cross-context behavioral tracking recognized under California law, we provide a "Your Privacy Choices" / "Do Not Sell or Share My Personal Information" opt-out link in the footer of every page and honor recognized opt-out preference signals such as Global Privacy Control where applicable.

9. Data Security and Customer Separation

CIR uses or intends to maintain technical and organizational measures designed to protect customer information.

Depending on the production environment, these measures may include:

• Authentication and access controls.
• Role-based user permissions.
• Separation of customer data and workspaces.
• Secure transmission of information.
• Credential and authorization-token protections.
• Access logging and operational monitoring.
• Backups and recovery procedures.
• Restricted administrative access.
• Security maintenance and software updates.
• Procedures for responding to suspected security incidents.

No internet-connected system can be guaranteed completely secure.

If a security incident triggers legal notification requirements, CIR will provide notifications as required by applicable law and relevant agreements.

Clients should use secure authentication practices and promptly report suspected account compromise.

10. Data Retention

CIR retains personal information only for as long as reasonably necessary for the purposes described in this Policy, taking account of applicable legal obligations and legitimate operational requirements.

Retention depends on the category of data, its purpose, the applicable agreement, and legal requirements.

When information is no longer reasonably necessary, CIR will delete, de-identify, or securely dispose of it, subject to lawful exceptions and technical limitations.

Deletion from live systems may not result in immediate removal from protected backups or third-party systems. Those records will be addressed according to applicable retention schedules and processor agreements.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include the right to:

• Request access to information held about you.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Obtain certain information in a portable format.
• Opt out of qualifying sales or sharing.
• Limit certain uses of sensitive personal information.
• Withdraw consent where processing relies on consent.
• Opt out of marketing communications.
• Appeal a privacy-rights decision where applicable.
• Exercise privacy rights without unlawful discrimination or retaliation.

Not every right applies to every individual or processing activity.

You may submit a request using:

We may request information reasonably necessary to verify your identity or authority before responding to certain requests.

We will respond within applicable legal deadlines and explain when an exception applies.

Where authorized agents are permitted under applicable law, they may submit requests on an individual's behalf subject to reasonable authorization and verification requirements.

12. California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), when those laws apply to CIR and the relevant processing.

Applicable rights may include:

• Knowing the categories and specific pieces of personal information collected.
• Understanding the sources and purposes of collection.
• Knowing the categories of recipients to whom information is disclosed.
• Requesting deletion or correction.
• Opting out of qualifying sales or sharing.
• Limiting certain uses of sensitive personal information.
• Receiving equal treatment for exercising statutory privacy rights.

The categories of personal information CIR may collect are described in Section 2. The purposes of processing are described in Section 3, and the categories of recipients are described in Section 5.

CIR does not intentionally collect sensitive personal information unless necessary for an authorized purpose. Information voluntarily uploaded by clients may contain sensitive information, and its processing is subject to the relevant client agreement and applicable legal requirements.

CCPA Applicability and Operational Disclosures: CIR is based in San Diego, California and may be subject to the CCPA depending on its annual data-processing thresholds. Because this site embeds a third-party chat and messaging widget that may engage in cross-context behavioral tracking, CIR provides a "Your Privacy Choices" / "Do Not Sell or Share My Personal Information" opt-out link in the footer of every page and honors recognized opt-out preference signals such as Global Privacy Control.

When required, CIR will honor recognized opt-out preference signals, including Global Privacy Control, in accordance with applicable law.

If CIR is not currently subject to particular CCPA obligations, it may still choose to honor reasonable privacy requests voluntarily.

13. Marketing Communications

We may send business communications regarding inquiries, consultations, requested resources, service updates, and relevant offers.

Where required, we will obtain appropriate consent before sending marketing communications.

You may unsubscribe from promotional emails using the instructions included in those messages or by contacting us directly.

Service-related communications, including important account, billing, legal, or security notifications, may still be sent when necessary.

We do not sell marketing contact lists as a standalone commercial product.

14. Social Media and External Websites

Our website and Services may contain links to third-party sites, social media platforms, or external applications.

Those services operate under their own terms and privacy policies.

CIR does not control independent third-party privacy practices.

If you connect a social media or cloud storage account to CIR, the information available to CIR will depend on the authorization permissions granted and the relevant platform's configuration.

Clients may revoke certain permissions through the applicable third-party service, although revocation may affect functionality or require additional steps to disconnect an integration fully.

15. Children's Privacy

CIR's website and Services are intended for businesses and adults.

We do not knowingly solicit or collect personal information directly from children under 13 through our public website.

If we learn that we have collected such information without an appropriate legal basis or required parental consent, we will take steps required by law.

Clients should not provide children's personal information for content production unless legally authorized and necessary for the contracted service.

16. International Data Processing

CIR operates from the United States and may use service providers that process or store information in other jurisdictions.

Where personal information is transferred internationally, CIR will implement legally required protections applicable to the relevant processing and jurisdiction.

Individuals outside the United States may have additional privacy rights.

[If CIR actively markets to individuals in the European Economic Area, United Kingdom, or other regulated jurisdictions, additional disclosures regarding legal bases, international transfers, and local rights may be necessary.]

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technologies, legal obligations, or information-handling practices.

The current version will be posted on our website with its effective date.

If changes materially affect the processing of personal information, we will provide additional notice or seek consent when required by law.

18. Contact Us

For questions regarding privacy, data security, or personal information requests, contact:

We welcome questions about how information is handled within our Services.