Privacy Policy

Cernaro is a content intelligence, planning, drafting, scheduling, publishing, and performance platform.

Depending on the functionality available to your account, Cernaro may allow you to:

• follow websites, RSS feeds, YouTube channels, publications, and other sources;
• provide URLs, reference materials, text, documents, or other content;
• create brand personas, audience personas, instructions, and templates;
• identify, score, rank, and organize content ideas;
• generate summaries, ideas, and drafts;
• adapt content for different channels;
• review, edit, approve, schedule, and automatically publish content;
• connect social networks and other third-party services;
• retrieve publishing status and permitted performance information; and
• collaborate within a workspace.

Features may change over time and may differ depending on your account or subscription plan.

“Personal Information” means information that identifies, relates to, describes, or can reasonably be associated with an identifiable individual where applicable privacy law treats that information as personal information or personal data.

Not everything processed by Cernaro is Personal Information.

For example, a fictional brand persona, generic content template, content idea, topic ranking, or draft that does not relate to an identifiable individual may not be Personal Information.

If you include information about an identifiable person in a persona, template, instruction, source, or other material, that information may be treated as Personal Information.

3.1 Account Information

When you create or manage a Cernaro account, we may collect information such as:

• your name or display name;
• email address;
• authentication information;
• workspace or organization name;
• account role and permissions;
• time zone;
• language preferences;
• subscription plan;
• communication preferences; and
• other information you choose to provide.

We use this information to create, authenticate, secure, and administer your account and provide the Services.

3.2 Personas, Brand Information, and Templates

You may create or provide information such as:

• brand personas;
• audience personas;
• brand voice information;
• tone and writing preferences;
• editorial instructions;
• content pillars;
• writing templates;
• custom templates;
• examples;
• reference materials; and
• other instructions used to customize Cernaro.

A persona does not need to represent you or any real individual.

Cernaro does not assume that a persona describes your real identity merely because it is associated with your account.

If you intentionally include Personal Information about yourself or another person in a persona, template, instruction, or reference material, we may process that information as Customer Content.

3.3 Sources You Follow

Cernaro allows you to choose content sources that you want the Services to process.

Depending on the source, we may process:

• URLs;
• RSS feeds;
• website pages;
• article titles;
• article text or excerpts;
• publisher names;
• authorship information;
• publication dates;
• YouTube channels and videos;
• video titles and descriptions;
• source identifiers;
• publicly available metadata; and
• other information made available by the source or an authorized API.

We use this information to provide your feed, identify relevant content, rank content ideas, generate summaries and recommendations, create drafts, and provide related Cernaro functionality.

Publicly available source material may sometimes contain information about identifiable individuals.

Cernaro is not designed to use followed-source information to determine an individual’s eligibility for employment, housing, insurance, lending, healthcare, or similar high-impact decisions, or to create sensitive consumer profiles for advertising.

3.4 Customer Content

“Customer Content” means materials and information that you or an authorized user submit, upload, import, connect, create, or otherwise make available through Cernaro.

Customer Content may include:

• custom personas;
• custom templates;
• prompts and instructions;
• text;
• URLs;
• documents;
• media;
• notes;
• brand information;
• reference information;
• drafts you create or modify;
• imported content;
• scheduled content;
• comments;
• collaboration information; and
• other materials you choose to provide.

We process Customer Content to provide and operate the Services you request.

3.5 Cernaro-Generated Content

Cernaro may generate information such as:

• idea-fit scores;
• relevance scores;
• rankings;
• topic suggestions;
• summaries;
• content recommendations;
• draft text;
• captions;
• headlines;
• platform-specific versions;
• suggested schedules;
• performance summaries; and
• other outputs.

Generated outputs may combine Cernaro’s technology, templates, and systems with Customer Content and content from sources you select.

Generated content is not automatically Personal Information. It may become Personal Information if it contains information relating to an identifiable person.

You may choose to connect Cernaro with social networks, publishing platforms, analytics services, or other third-party services.

Depending on the platform and permissions you authorize, Cernaro may receive or process:

• account identifiers;
• usernames, page names, or organization names;
• profile information;
• page, profile, or channel identifiers;
• authorization scopes;
• access or refresh tokens;
• post identifiers;
• publishing permissions;
• information made available by the relevant API;
• publishing status;
• permitted engagement information;
• permitted analytics; and
• other information authorized by you.

Where a third-party platform supports delegated authorization such as OAuth, Cernaro does not need or request your password for that platform.

Authorization tokens are used to perform the actions permitted by the permissions you grant.

You may disconnect supported accounts through Cernaro or through controls offered by the relevant third-party platform. Inside Cernaro, publishing, reminder, and calendar connections are managed from the Calendar page’s Connections panel, and source/feed connections from the Feed.

Cernaro may allow you to schedule or automatically publish content through connected accounts.

When you enable publishing features, Cernaro may act according to settings you configure, including:

• the connected account to use;
• channels or destinations;
• approved content;
• publication dates and times;
• publishing schedules;
• recurring rules;
• automatic publishing preferences; and
• other settings you enable.

Cernaro treats these configurations as your instructions.

You may modify your settings or disconnect a supported account.

Disconnecting an account prevents Cernaro from continuing to use the applicable authorization once the disconnection or revocation becomes effective.

Disconnecting Cernaro does not automatically remove content that has already been published to a third-party platform. Previously published content remains subject to the terms, privacy policies, retention practices, and controls of that platform.

Cernaro may use Google API Services, including YouTube API Services.

Where applicable, Cernaro’s access to and use of information received through Google or YouTube APIs is subject to the applicable Google API Services User Data Policy, YouTube Terms of Service, YouTube Developer Policies, and other applicable Google requirements. See also the Google Privacy Policy.

If you authorize Cernaro to access information associated with a Google or YouTube account, you can revoke that authorization using the controls provided by Google at Google security settings and, where available, through Cernaro.

Cernaro does not use YouTube API Services to obtain or store your Google or YouTube password.

Where applicable Google or YouTube requirements impose specific requirements concerning authorization, retention, refresh, revocation, or deletion of information, Cernaro will follow those applicable requirements.

Cernaro uses artificial intelligence, automated systems, ranking systems, and related technologies to provide features such as:

• reading and organizing source content;
• summarization;
• content classification;
• relevance scoring;
• idea ranking;
• content recommendations;
• idea generation;
• draft generation;
• rewriting;
• channel adaptation; and
• performance-related recommendations.

To provide these features, Cernaro may process:

• Customer Content;
• followed-source information;
• prompts;
• templates;
• personas;
• brand information;
• prior drafts;
• generated outputs;
• request metadata; and
• related technical information.

Cernaro uses a third-party AI provider to help deliver these features. That provider is DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.). All of Cernaro’s AI features — including ranking and scoring — use this one provider. See Service Providers below for what it receives.

Cernaro does not train its own models on Customer Content, does not sell Customer Content, and does not send Customer Content to advertising systems.

Cernaro’s use of third-party AI providers is governed by those providers’ commercial API terms. Cernaro does not authorise the use of Customer Content to train generalized third-party models, and selects providers and settings on that basis. Because these protections rest on the provider’s terms rather than on Cernaro’s systems alone, we do not state them as a guarantee.

Information provided to third-party AI providers is limited to information reasonably necessary to provide the applicable feature.

Cernaro may use aggregated, de-identified, or non-personal technical information to evaluate and improve how the Services operate.

Human Control

Cernaro’s AI features are assistive.

Cernaro does not use its content-generation features to make decisions about individuals that determine employment, lending, insurance, housing, healthcare, legal eligibility, or similarly significant matters.

Users remain responsible for reviewing generated content and determining whether it is accurate, appropriate, lawful, and suitable before relying on or publishing it.

When you use Cernaro, we may automatically receive information such as:

• IP address;
• browser type and version;
• device type;
• operating system;
• approximate location derived from IP address;
• access date and time;
• login information;
• referring URL;
• pages and features accessed;
• session information;
• application events;
• error and crash information;
• authentication events;
• security events; and
• similar technical information.

We use this information to operate, secure, maintain, monitor, troubleshoot, measure, and improve the Services.

If you purchase a paid Cernaro subscription, we may process information such as:

• customer name;
• workspace or organization name;
• billing information;
• billing email;
• subscription plan;
• transaction identifiers;
• invoices;
• tax-related information;
• payment status; and
• payment history.

Payment-card information may be collected directly by our payment processor rather than by Cernaro.

Where payments are processed by an external payment provider, Cernaro does not intentionally store complete payment-card numbers.

If you contact Cernaro, we may process information including:

• your name;
• email address;
• organization;
• account information;
• your message;
• attachments;
• support history; and
• information reasonably necessary to investigate or respond to your request.

We use this information to provide assistance, investigate problems, communicate with you, secure the Services, and improve Cernaro.

We may send communications relating to the operation of your account, including:

• account verification;
• security notifications;
• billing communications;
• publishing notifications;
• service notices;
• important product changes; and
• legal notices.

These communications may be necessary to provide the Services.

Where permitted by applicable law, we may also send marketing communications such as product updates, educational material, promotions, and announcements.

Where consent is required by law, we will obtain the required consent.

Marketing emails will provide an available method to unsubscribe.

Unsubscribing from marketing does not prevent Cernaro from sending communications reasonably necessary to operate your account or provide the Services.

Cernaro may use cookies, local storage, scripts, pixels, tags, SDKs, and similar technologies.

Necessary Technologies

These may be used for:

• authentication;
• login;
• session management;
• security;
• fraud prevention;
• remembering essential settings; and
• functionality required to provide Cernaro.

Functional Technologies

These may help remember preferences and provide features you request.

Analytics Technologies

Cernaro does not currently use a third-party website-analytics or product-analytics service. No analytics vendor, tag manager, or session-recording tool is loaded by our websites or application.

Where enabled by the operator, Cernaro may send anonymous page-performance measurements (such as load-timing scores) to a performance-monitoring endpoint. These measurements contain no account identifier, no content, and no cookie.

Advertising Technologies

Cernaro does not currently run advertising, attribution, conversion-tracking, or retargeting technology on its websites. No advertising pixel, tag, or advertising identifier is placed by us, and no advertising provider receives your browsing activity from our websites.

Meta, LinkedIn, X, and similar platforms appear in Cernaro only as destinations you may choose to connect and publish to — not as advertising partners.

If Cernaro later introduces analytics or advertising technology, we will update this Privacy Policy and, where applicable law requires consent before a non-essential technology is activated, request that consent first.

Cernaro does not sell Personal Information for money.

Cernaro also does not share Personal Information with advertising providers for cross-context behavioural advertising, and does not engage in targeted advertising as defined by applicable privacy laws. No advertising or attribution technology is in use (see the section above), so no browsing activity is disclosed to an advertising provider.

Certain privacy laws define some advertising-related disclosures as “sharing,” “sale,” targeted advertising, or a similar regulated activity even where Personal Information is not exchanged for money. If Cernaro ever introduces processing of that kind, we will update this Privacy Policy and provide the notices and opt-out choices required by applicable law before doing so.

We may use information to:

• provide and operate the Services;
• create and administer accounts;
• authenticate users;
• manage workspaces;
• personalize Cernaro;
• provide content feeds;
• process Customer Content;
• identify and rank content ideas;
• generate and manage drafts;
• provide AI-assisted features;
• connect third-party platforms;
• schedule and publish content;
• retrieve permitted performance and publishing information;
• process subscriptions and payments;
• provide customer support;
• communicate with users;
• monitor and improve performance;
• troubleshoot problems;
• analyze acquisition and product usage;
• prevent fraud and abuse;
• protect Cernaro and its users;
• enforce applicable agreements;
• improve and develop the Services;
• comply with applicable law;
• establish, exercise, or defend legal claims; and
• market Cernaro where permitted by law.

Where a privacy law such as the UK GDPR requires us to identify a lawful basis for processing Personal Information, the basis depends on the activity.

Contract

We may process Personal Information where necessary to provide requested Services, including:

• creating and administering your account;
• providing Cernaro functionality;
• processing Customer Content;
• maintaining integrations;
• carrying out publishing instructions;
• administering subscriptions; and
• providing support.

Legitimate Interests

We may process Personal Information where necessary for legitimate business interests such as:

• operating and improving Cernaro;
• securing accounts and infrastructure;
• preventing fraud and misuse;
• troubleshooting;
• understanding product usage;
• communicating with users;
• protecting legal rights; and
• operating our business.

Where required, we consider the effect of such processing on individuals before relying on legitimate interests.

Consent

We may rely on consent where required, including for certain:

• marketing activities;
• optional tracking technologies;
• advertising technologies;
• connected accounts; and
• voluntary features.

Where processing relies on consent, you may withdraw that consent.

Legal Obligations

We may process information where necessary to comply with applicable legal, tax, accounting, regulatory, court, or law-enforcement requirements.

Cernaro may act in different roles depending on the processing involved.

Cernaro as Controller

Cernaro generally determines the purposes and means of processing information relating to:

• account administration;
• subscriptions;
• the Cernaro website;
• Cernaro’s own analytics;
• security;
• service operations;
• communications;
• support; and
• Cernaro marketing.

Cernaro as Processor or Service Provider

Where a business customer determines which Customer Content, personas, templates, sources, connected accounts, or other information is processed through its workspace, Cernaro may process that information on behalf of the customer.

In those circumstances, the customer may act as the controller or business and Cernaro may act as a processor or service provider.

Customers are responsible for determining whether they have the rights and lawful authority necessary to provide information to Cernaro.

Additional data-processing terms may be made available where required.

Cernaro uses third-party service providers to help operate the Services.

These providers may assist with:

• cloud hosting and compute;
• databases and storage;
• authentication;
• transactional email;
• payment processing;
• artificial intelligence and transcript processing; and
• security.

Service providers may receive information reasonably necessary to perform their functions.

Providers that may receive Customer Content

The following categories of provider may receive content you create or select, rather than only account or billing details:

• AI provider. Cernaro uses one third-party AI provider, DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), to generate, rank, score and edit content. Content you submit to Cernaro’s AI features is transmitted to DeepSeek for model inference. Depending on the feature, a request may include the draft, the persona and brand information that shapes it, reference material you have added, and the title, summary, excerpt, source text or video transcript of a source you follow. Ranking and scoring go to the same provider and receive source titles, summaries, and excerpts. DeepSeek states in its privacy policy that personal data it processes to provide its services may be processed and stored on servers located in the People’s Republic of China. See International Processing below.
• Transcript processing. See the section below.
• Publishing destinations. Where you connect an account and schedule a post, the post text — and, on platforms that support it, any image you attach — is sent to that platform.
• Calendar mirroring. If you connect Google Calendar, Cernaro creates events containing the post title and a short preview of the post body.

Cernaro also uses providers that receive account or billing details rather than Customer Content — including an email provider for sign-in links and notifications, and Lemon Squeezy as the payment provider and merchant of record, which receives the billing name and email needed to complete a purchase.

Where required by applicable law, service providers are subject to appropriate contractual or confidentiality requirements.

Source and transcript processing

To obtain a transcript for a video source you follow, Cernaro requests captions from the video platform. Where you have connected a YouTube account and have permission to access a video’s captions, Cernaro may use that connection to retrieve them.

Earlier versions supported an optional Supadata transcript fallback that sent the video identifier to that provider. Cernaro no longer sends new transcript requests to Supadata. Transcripts previously obtained through that integration may remain cached and be reused.

When Cernaro fetches a website, feed, or video you have chosen to follow, the request is made by Cernaro’s servers and is visible to that site or platform as ordinary web traffic from us.

Internal operational notifications

Cernaro may use Slack as an internal operational notification service — for example to raise a posting reminder or flag a failed publication. This is Cernaro’s own operator-controlled workspace and is not a social account you connect.

Where this is enabled, the message contains the title of the scheduled post, the platform it was intended for, and the scheduled time — and, if a publication failed, a short extract of the error reported by that platform. It does not contain the body of the post, your account details, or any access token.

Third-party platforms connected to Cernaro operate independently.

Their handling of information is governed by their own:

• terms;
• privacy policies;
• API rules;
• developer requirements; and
• user controls.

Cernaro does not control independent processing performed by third-party platforms.

You should review the policies and terms of third-party services you connect to Cernaro.

Cernaro may disclose information where reasonably necessary to:

• comply with applicable law;
• respond to a valid court order or legal process;
• respond to lawful governmental requests;
• investigate fraud, abuse, or security incidents;
• enforce agreements;
• protect Cernaro’s rights or property;
• protect users or others; or
• establish, exercise, or defend legal claims.

Where legally permitted and appropriate, Cernaro may seek to notify an affected customer before disclosing Customer Content in response to a governmental request.

If Cernaro becomes involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction.

Any processing of Personal Information following such a transaction remains subject to applicable law.

Cernaro and its service providers may process information in countries other than the country in which you live.

This may include the United States and other countries in which service providers maintain infrastructure.

In particular, content submitted to Cernaro’s AI features is transmitted to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) for model inference. DeepSeek states in its privacy policy that personal data it processes to provide its services may be processed and stored on servers located in the People’s Republic of China. Using Cernaro’s AI features therefore involves processing of that content outside your country of residence, and outside the United Kingdom and European Economic Area.

Where applicable law requires specific safeguards for an international transfer, Cernaro will use a lawful transfer mechanism appropriate to the circumstances.

Cernaro retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as otherwise required by law.

Account and Customer Content

Account information and Customer Content may be retained while your account remains active.

After account deletion, Cernaro will begin deleting associated information unless continued retention is reasonably necessary for:

• billing;
• security;
• fraud prevention;
• dispute resolution;
• legal claims; or
• legal obligations.

Deleted information may remain temporarily in restricted backups until those backups are overwritten or deleted.

Connected Accounts

Authorization tokens are retained only while reasonably necessary to provide the applicable integration.

After an account is disconnected, authorization information may be revoked, deleted, expired, or otherwise disabled as appropriate.

Publishing Information

Cernaro may retain publishing history and related records while necessary to provide account history, diagnose publishing issues, maintain security, or comply with legal obligations.

Logs

Security, diagnostic, and operational logs may be retained for a reasonable period for security, fraud prevention, reliability, troubleshooting, and incident investigation.

Billing Information

Invoices, transaction information, and related financial records may be retained for periods required by applicable accounting, tax, or other laws.

Marketing Preferences

If you unsubscribe from marketing, Cernaro may retain limited information necessary to remember and respect your opt-out request.

Deleting information from Cernaro does not automatically remove content that has already been published to a third-party platform.

Cernaro uses reasonable technical and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, loss, misuse, and destruction.

Measures may include:

• authentication controls;
• access restrictions;
• encrypted communications;
• secure storage practices;
• administrative-access restrictions;
• secrets management;
• security logging;
• monitoring;
• backups; and
• security controls used by our service providers.

No online service can guarantee absolute security.

You are responsible for protecting your credentials and the devices used to access your account.

If you believe your Cernaro account has been compromised, contact us promptly at admin@cernaro.com.

Cernaro maintains processes for responding to suspected security incidents.

Where applicable law requires notification of a Personal Information breach to affected individuals, customers, regulators, or other parties, Cernaro will provide the required notification within the applicable legal timeframe.

Depending on where you live and applicable law, you may have rights relating to your Personal Information.

These may include the right to:

• request access;
• receive a copy;
• correct inaccurate information;
• request deletion;
• withdraw consent;
• object to certain processing;
• request restriction of certain processing;
• receive certain information in portable form;
• opt out of certain qualifying targeted advertising or sharing;
• submit a privacy complaint; and
• lodge a complaint with the competent data-protection or privacy authority under applicable law.

Requests can be sent to admin@cernaro.com.

We may request information reasonably necessary to verify your identity or authority before responding.

We will not discriminate against you for exercising a legally protected privacy right.

Where applicable U.S. state privacy laws grant additional rights, Cernaro will honor those rights where legally required.

Depending on the law and circumstances, these may include rights concerning:

• access;
• correction;
• deletion;
• portability;
• targeted advertising;
• sale or sharing;
• certain profiling; and
• sensitive Personal Information.

Cernaro does not sell Personal Information for money.

Where applicable law requires Cernaro to recognize qualifying browser-based privacy preference signals, Cernaro will do so as required.

Where UK data-protection law applies, users in the United Kingdom may have rights including:

• access;
• rectification;
• erasure;
• restriction;
• portability;
• objection; and
• withdrawal of consent.

Users may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

Nothing in this Privacy Policy limits rights granted by applicable UK data-protection or consumer law.

Where Canadian privacy law applies, Cernaro handles Personal Information in accordance with applicable requirements regarding matters such as:

• accountability;
• identifying purposes;
• meaningful consent;
• limiting collection;
• limiting use and retention;
• accuracy;
• safeguards;
• openness;
• individual access; and
• complaint handling.

Canadian users may contact Cernaro to request access to or correction of Personal Information or to raise a privacy concern.

Where Australian privacy law applies to Cernaro, Cernaro will handle Personal Information in accordance with applicable requirements.

Nothing in this Privacy Policy is intended to exclude consumer or privacy rights that cannot lawfully be excluded.

Cernaro is not designed for the storage or processing of highly sensitive Personal Information.

Please do not intentionally submit information such as:

• medical or health records;
• biometric identifiers;
• government-issued identification numbers;
• the main account password for a third-party service;
• complete financial-account credentials;
• precise geolocation information;
• criminal records;
• highly sensitive employment records; or
• other special-category or sensitive Personal Information

unless Cernaro has expressly introduced functionality designed for that purpose.

Credentials a connection asks you for

This does not apply to an app-specific password or similar scoped credential that a supported integration explicitly asks you to provide. Not every Cernaro integration uses OAuth — connecting Bluesky, for example, requires a Bluesky app password rather than your main account password.

Where an integration requires such a credential, Cernaro processes it only to establish and operate the connection you requested, stores it encrypted, and disables or removes it when you disconnect the account. Please continue to use an app-specific credential wherever the third-party platform offers one, rather than your main account password.

Cernaro is intended for users who are 18 years of age or older.

We do not knowingly offer the Services to children.

If you believe that a child has improperly provided Personal Information to Cernaro, contact us at admin@cernaro.com.

Cernaro may contain links to or information from websites, publications, videos, social networks, or other services operated by third parties.

Cernaro is not responsible for the independent privacy practices of those third parties.

We may update this Privacy Policy to reflect changes to Cernaro, our technology, our practices, or applicable law.

When we update this Policy, we will change the “Last Updated” date above.

If a material change significantly affects how we use Personal Information, we will provide additional notice where required by applicable law.

Questions about this Privacy Policy, privacy requests, account issues, legal matters, or other inquiries may be sent to:

Cernaro Inc.
admin@cernaro.com

You can also contact us through the website.