ContentMate is a social media management tool developed in Germany. Privacy requirements are considered in the development and operation of the platform. This page explains how ContentMate handles your data, which rights you have, and how you can exercise them.
Server Location and Data Storage
Core application, database, and media data is stored on ContentMate infrastructure at Hetzner in Germany. Individual features nevertheless use external providers, in particular connected social-media platforms, Stripe for payments, Brevo for transactional email, and -- after your consent -- Google Analytics and Plausible for analytics on public pages. Processing outside the European Economic Area therefore cannot be ruled out categorically. The binding details about recipients, legal bases, and safeguards are provided in the Privacy Policy.
| Aspect | Details |
|---|---|
| Core application data | Germany (Hetzner) |
| External providers | Only where required for the selected feature or after consent |
| Possible third-country processing | Depends on the provider; see the Privacy Policy |
| Encryption | Data transmissions are encrypted (HTTPS/TLS) |
| Password storage | Passwords are not stored in plain text, only as a cryptographic hash |
| Data processing agreement | Available on request in accordance with Art. 28 GDPR |
What Data Does ContentMate Store?
ContentMate stores only the data required to operate the platform:
Account Data
- Name, email address, and password hash
- Language setting and theme color
- Subscription tier and billing period
Workspace and Usage Data
- Workspace names, member lists, and role assignments
- Scheduled and published social media posts
- Uploaded media files (images, videos)
- Messages and comments from the Unified Inbox
Connected Social Media Accounts
When you connect Facebook, Instagram, or TikTok accounts, ContentMate stores only the access tokens required for functionality. ContentMate has no access to your passwords for the respective platforms. Authentication takes place through the secure OAuth process directly with the platforms.
Payment Data
Payment information (credit card data, bank details) is not stored by ContentMate. All payment processing is handled by the certified payment service provider Stripe. ContentMate stores only a reference number to assign your subscription.
Your Rights Under the GDPR
As a ContentMate user, you have the following rights, which you can exercise at any time:
| Right | GDPR Article | Description |
|---|---|---|
| Right of access | Art. 15 | Receive a copy of data stored about you |
| Right to erasure | Art. 17 | Request deletion of your account and personal data |
| Right to rectification | Art. 16 | Correct inaccurate personal data |
| Right to data portability | Art. 20 | Receive your data in a machine-readable format (JSON) |
| Right to object | Art. 21 | Object to the processing of your data |
Export Data (Art. 15 GDPR)
You can download a copy of data stored about you as a JSON file. To do this, go to the Danger Zone section in your profile settings and click Export data.
The export includes:
- Personal data (name, email, language setting)
- Subscription information
- Owned workspaces with posts, media files, and conversations
- Workspace memberships and roles
- Overview of connected social media accounts (without access tokens)
Delete Account (Art. 17 GDPR)
You can permanently delete your account at any time. For security, deletion requires your current password. To do this, go to the Danger Zone section in your profile settings.
What Happens During Deletion
- Personal data is permanently removed (name, email, profile picture)
- Owned workspaces are deleted, including all posts, media, and conversations
- Media files (images, videos) are permanently deleted from the server
- Connections to Facebook, Instagram, and TikTok are disconnected
- Memberships in other users' workspaces are removed
- Active subscriptions are automatically canceled
- Billing records subject to retention duties may be kept to the extent required by law
Your social media profiles and posts on Facebook, Instagram, and TikTok are not affected by deletion. Only the connection and the data stored in ContentMate are removed.
Recommendation
Export your data before deleting your account. After deletion, recovery is not possible.
Connected Accounts and Permissions
When connecting your social media accounts, ContentMate requests only the permissions required for the respective feature:
| Platform | Permissions | Purpose |
|---|---|---|
| Page management, read/send messages | Post scheduling, Inbox, Analytics | |
| Business profile, media, messages | Post scheduling, Inbox, Analytics | |
| TikTok | Profile, publish videos | Post scheduling, video metrics |
You can disconnect any account at any time in the workspace settings. All associated access tokens are deleted immediately. You can also revoke permissions directly in the settings of the respective platform (Facebook, Instagram, TikTok).
Cookies and Tracking
Optional analytics remain disabled unless you consent. If you accept the Analytics category, ContentMate uses Google Analytics 4 and Plausible on public marketing and help pages. Google Analytics may set analytics cookies; Plausible is used without cookies. Authenticated/private paths and OAuth callback routes are not sent to these services as page views. You can change your choice at any time through Cookie Settings in the footer. See the Privacy Policy for details.
Data Processing Agreement
If you use ContentMate for business purposes and need a data processing agreement under Art. 28 GDPR, you can request it using the contact details listed in the Legal Notice.
Frequently Asked Questions
Is ContentMate GDPR-compliant?
ContentMate implements technical and organizational privacy controls, including encrypted transport, hashed passwords, consent-gated analytics, and filters for private routes. The Privacy Policy explains which external providers may process data and which legal framework applies. A data processing agreement can be requested.
Are My Social Media Passwords Stored?
No. ContentMate uses only the OAuth process to connect with social media platforms. Your password is never transmitted to ContentMate. You authenticate directly with Facebook, Instagram, or TikTok, and ContentMate receives only a time-limited access token.
Can I Restore My Account After Deletion?
No. Account deletion is final. You can register again afterward with the same email address, but previous data cannot be restored.
Why Is Billing Data Retained?
Some billing records may be subject to statutory retention duties. The Privacy Policy explains which data is affected and how long it may be stored.
Are My Social Media Accounts Also Deleted When I Delete My Account?
No. Your Facebook, Instagram, and TikTok profiles and posts on the respective platforms are not affected by deleting your ContentMate account. Only the connection and the data stored in ContentMate are removed.
Can Workspace Members See My Personal Data?
Workspace members see only your name and your role within the workspace. Your email address, password, subscription details, and other personal account settings are not visible to other members.
Where Can I Find the Privacy Policy and Legal Notice?
The Privacy Policy and Legal Notice are accessible through the links in the application footer.
More Information
- Privacy Policy -- Legal information about data processing
- Legal Notice -- Controller and contact details
- Profile & Settings -- Manage personal data, export data, and delete your account
- Pricing & Subscription -- Manage subscription and payments