Privacy Policy

Last updated: April 2026

1. Introduction

Content Intelligence ("we", "us", "our") is an AI-powered SEO and content intelligence platform operated by YallaPublish, accessible at content.yallapublish.com. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored as a bcrypt hash — we never store plaintext passwords). If you sign in with Google, we receive your name, email, and profile picture from Google.

Project Data

You provide website URLs, target keywords, content items, competitor URLs, and project configuration. This data is stored to deliver our SEO analysis and content intelligence services.

Google API Data

If you connect your Google account, we access data from Google Search Console (search queries, clicks, impressions, page performance) and Google Analytics 4 (sessions, users, conversions, traffic sources). This data is used solely to provide analytics within your dashboard. Access tokens are encrypted at rest using AES-256-GCM.

Social Media Data

If you connect social media accounts, we access public profile information and post metrics to provide social analytics and scheduling features.

Usage Data

We collect usage data including pages visited, features used, and actions taken within the platform. This helps us improve the service and diagnose issues.

3. How We Use Your Data

  • Provide SEO analysis, keyword tracking, and content recommendations
  • Generate AI-powered content suggestions and optimization briefs
  • Track keyword rankings and monitor SERP changes
  • Schedule and manage social media posts
  • Send transactional emails (account verification, billing receipts, team invites)
  • Process payments and manage subscriptions
  • Improve our platform and fix issues

4. Third-Party Services

We use the following third-party services to operate our platform:

  • Google APIs (Search Console, Analytics 4) — for search performance and traffic data
  • OpenAI — for AI-powered content generation and analysis
  • Stripe — for payment processing and subscription management
  • Resend — for transactional email delivery

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Google API Services User Data Policy

Content Intelligence's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of Google user data to providing and improving the user-facing features that you see within the Content Intelligence dashboard. We do not use Google data for advertising, do not sell it to third parties, and do not use it for purposes unrelated to the core functionality of the app.

6. Data Storage & Security

  • All data is stored on a secured virtual private server
  • Passwords are hashed with bcrypt before storage
  • Google OAuth tokens are encrypted with AES-256-GCM
  • API keys are encrypted before storage in the database
  • All connections use HTTPS/TLS encryption in transit
  • Database access is restricted to the application server only

7. Your Rights

You have the right to:

  • Access — View all data associated with your account through the dashboard
  • Export — Export your data in CSV format from any module
  • Delete — Request deletion of your account and all associated data by contacting us
  • Disconnect — Revoke Google or social media connections at any time from project settings

8. Cookies

We use essential session cookies for authentication (powered by NextAuth.js). These cookies are strictly necessary for the service to function and cannot be disabled. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (projects, content, analytics, connections) will be permanently removed within 30 days. Backup copies may persist for up to 90 days before being purged.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification at least 30 days before they take effect. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at m.hosny81@gmail.com.