Privacy Policy
Last updated 25 August 2026
Who we are
Ai Blog Poster is an AI writing tool for company blogs, operated from France by Abdelmounaim Belghalem. For anything on this page, write to abdelmounaim.belghalem@gmail.com.
We are the data controller for the account and usage data described below. For the article content you write, we act as a processor on your behalf: it is your material, and we only do with it what the product needs to do.
What we collect
- Account data — your email address, your name if you give one, and a hash of your password. We never store the password itself.
- Content you create — projects, briefs, articles, brand voice settings, personas, and the images you upload or pick.
- Connection tokens — the OAuth tokens for the CMS you connect, stored so we can publish on your behalf. You can disconnect a CMS at any time from the settings page, which deletes its token.
- Usage data — which pages and features you use, how many AI calls your account has made, and technical logs (IP address, browser, timestamps) kept for security and debugging.
- Billing data — which plan you are on. Card details are handled by Stripe and never reach our servers.
Why we use it
To run the product you signed up for — generating and storing your articles, publishing them to your CMS, enforcing plan quotas — which is the performance of our contract with you. To keep the service secure and to improve it, which is our legitimate interest. And to send the emails the account itself needs, such as address verification and password resets.
We do not sell your data, and we do not train AI models on your content.
Who else sees it
The product is built on a small number of services, each of which receives only what its job requires:
| Service | Purpose | Data |
|---|---|---|
| OpenAI | Generating and reviewing article drafts, outlines and alt text | The article content, briefs and instructions you submit for generation |
| PostHog (EU region) | Product analytics — understanding which features are used | Account identifier, page views and feature events |
| Resend | Transactional email — address verification, password resets | Your email address and the content of those messages |
| Stripe | Payments and subscriptions | Billing details you enter with them; we never see your card number |
| Trigger.dev | Running article generation in the background | The article and project data a generation run needs |
| Unsplash | Stock photo search inside the editor | The search terms you type, and which photo you pick |
| Your CMS (WordPress, Webflow, Shopify) | Publishing the articles you choose to publish | The article content and images, sent only when you publish |
Some of these are based outside the EU. Where that is the case, the transfer rests on the European Commission's standard contractual clauses.
Stock photos
When you search for a photo in the editor, the words you type are sent to Unsplash to run the search. Choosing a photo reports a download to Unsplash, as their API terms require. The photo itself stays on Unsplash's servers: your article embeds their URL, so readers of your published article load the image from Unsplash, and the photographer's credit travels with it.
How long we keep it
Your content stays as long as your account does. Deleting your account from the settings page removes your account, your projects and your articles. Technical logs are kept for a short period for security purposes, and billing records for as long as accounting law requires.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, object to processing based on our legitimate interest, and ask for your data in a portable format. Write to abdelmounaim.belghalem@gmail.com and we will answer within a month. If you are not satisfied, you can complain to your national supervisory authority — in France, the CNIL.
Cookies
We set the cookies the session needs to keep you signed in. Product analytics run through PostHog in its EU region; they tell us which features are used, not who you are outside this product.
Changes
If this policy changes in a way that matters, the date at the top changes with it, and we tell account holders by email.