Privacy Policy

AUTONOMOUSc CMS is operated by Autonomous Computing AB. This page explains what data we collect, why we collect it, and which third-party services help deliver the product.

What we collect

• Account and sign-in data: email address, optional name, sign-in verification codes, browser session information, and API key labels.
• Essential browser storage: sign-in session cookies, theme preference, A/B session stickiness, and the privacy-consent flag used to remember your choice.
• Security and anti-abuse data: request metadata such as IP address, user agent, request identifiers, and Turnstile verification results when sign-in abuse protection is enabled.
• Billing and usage data: account balance, balance activity, Stripe checkout metadata, billing portal activity, and feature-level AI usage.
• Website content and metadata: the text, SEO context, page settings, schedules, and other content you store or generate in the CMS.
• Connected search data: Google Search Console property data, if you choose to connect it for SEO workflows.

How we use it

• Operate the service: keep Studio working, store content, publish updates, and let you manage websites, collections, pages, and fields.
• Authenticate you: send magic-link emails, keep your browser signed in, verify device access, and let you revoke or create API keys when needed.
• Protect accounts: detect abusive sign-in activity, rate-limit risky requests, and keep audit trails for security-sensitive actions.
• Process purchases: sell top-ups, reconcile payment events, and maintain account balances.
• Run AI features: send the prompts and content required to generate or revise text, draft challenger variants, and support SEO workflows.
• Improve SEO workflows: use the context and search data you provide to schedule work, evaluate results, and present history inside the product.

Services we rely on

We use third-party processors only where they are needed to run the service.

• Cloudflare: hosts the Workers runtime, serves the website and Studio, provides storage and networking, and supports security controls.
• Resend: sends magic-link and verification emails.
• Stripe: processes payments, checkout sessions, and billing-portal actions.
• OpenAI: processes prompts and content for AI-assisted writing and SEO tasks.
• Google Search Console: provides search-performance data only if you connect a property.

Retention

• Sign-in codes: short-lived and designed to expire quickly after issue.
• Browser consent and session data: kept in your browser until it expires or you clear it.
• Account, content, and usage history: kept while your account remains active and as needed to provide the product history you rely on.
• Billing records: kept for accounting, fraud prevention, and compliance purposes.

Your choices

• You can sign out of the browser session at any time.
• You can clear cookies and local storage in your browser, although some product features depend on them.
• You can revoke API keys and disconnect connected services you no longer want to use.
• You can avoid optional features like billing top-ups, Search Console connections, or AI-assisted writing if they are not needed.

Contact

For privacy questions or data requests related to AUTONOMOUSc CMS, contact ops@autonomousc.com.