Last updated: September 8, 2025

This Privacy Policy explains how The Content Machine LLC d/b/a NitroContent (“Nitro”, “we”, “us”) collects, uses, discloses, and protects personal information when you use our website and Services.

1. Controller & contact

Controller: The Content Machine LLC (Delaware)
Address: 1111B S GOVERNORS AVE STE 26068, Dover, DE 19904
Privacy contact email: [email protected]

2. What we collect

We may collect the following categories of personal information:

- Identity & contact: name, email address, phone number, billing/shipping address when provided.

- Account & billing metadata: account username, subscription plan, billing history (payments handled by third-party processors; Nitro does not store full card numbers).

- Content you upload: images, videos, captions, and any metadata included in those files.

- Technical & usage data: IP address, device identifiers, browser and device type, cookies and tracking identifiers, pages visited, session logs.

- Marketing preferences: opt-in preferences for promotional emails and communications.

We do not intentionally collect sensitive categories of personal data (e.g., health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or sexual orientation).

3. How we use the data

We use personal data to:

- Provide, operate, and improve the Services, including delivering edits and posting content per your instructions.

- Manage billing, fraud prevention, and collections.

- Provide customer support and account management.

- Communicate with you, including transactional messages and, if you opt in, marketing communications.

- Comply with legal obligations and respond to lawful requests (e.g., subpoenas, court orders, copyright complaints).

- We do not sell personal information for money. If our practices change in a way that constitutes a “sale” or “sharing” under applicable law, we will update this Policy and provide applicable opt-out mechanisms.

4. Legal bases for processing (EU/UK)

If you are in the EU/UK, our legal bases for processing personal data include: (a) performance of a contract with you (providing the Services); (b) compliance with legal obligations; (c) your consent (e.g., for non-essential cookies and marketing communications); and (d) our legitimate interests (e.g., fraud prevention, service improvement), balanced against your rights.

5. Cookies, tracking & advertising

We use cookies, pixels, and similar technologies (including analytics, advertising pixels, and session-recording tools) to operate and improve our Services and to support marketing. For users in jurisdictions requiring prior consent (such as the EU/UK), we will obtain consent for non-essential cookies before they are set, and you may control cookie preferences through our cookie banner or browser settings.

6. Sharing and disclosure

We may disclose personal data to service providers who perform services on our behalf (e.g., payment processors, hosting, and analytics) under contractual restrictions. We may also disclose personal data to comply with legal obligations, to respond to lawful requests, or in connection with a merger, acquisition, sale of assets, financing, or similar transaction. We will not otherwise share personal data except with your consent.

7. Data retention — generic, protective policy

-We retain personal data as long as necessary to provide the Services and for business, legal, tax, and fraud-prevention purposes. Specific practices include:

- Account data and transactional records will be retained for as long as your account is active and for a period of up to seven (7) years after account termination to meet legal, tax, and fraud-prevention requirements, unless a different retention period is required by law.

- Uploaded content may be retained for as long as your account is active and for a reasonable period after termination to allow recovery, dispute resolution, and legal compliance; archived or backup copies may be retained for up to seven (7) years.

- Anonymized or aggregated data (that does not identify you) may be retained indefinitely for analytics and business-improvement purposes.

If you request deletion, we will make reasonable efforts to delete your personal data from active systems, but backups and logs may persist for a limited time as required for legal and business reasons. If you require a different retention plan for regulatory reasons, please contact us at [email protected] and we will evaluate requests in accordance with applicable law.

8. Your rights

EU/UK residents: you may have the right to access, rectify, erase, restrict processing, object to processing, and request portability of your personal data. Requests will be handled in accordance with applicable law, and we will generally respond within one month.

California residents (CCPA/CPRA): you have the right to know, access, delete, correct, and opt out of the sale or sharing of personal information. Although Nitro does not sell personal information for money, California residents may exercise opt-out rights using our designated mechanism.

To exercise rights, contact [email protected]. We may require verification before fulfilling requests.

9. Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect personal data. Examples of safeguards and practices we use or rely on include:

TLS/HTTPS to protect data in transit.

Use of reputable third-party services for authentication and membership management (e.g., Clerk) and for site management (e.g., GHL).

Access controls and role-based permissions for Nitro staff.

Regular review of security practices and prompt patching of known vulnerabilities.

No system is completely secure. While we take steps to protect personal data, we cannot guarantee absolute security. If a security incident affecting personal data occurs, we will notify affected users and regulators as required by law.

10. Children

Our Services are not directed to children under 18. We do not knowingly collect personal information from children under 18; if we learn that we have collected such information, we will delete it promptly.

11. International transfers

If you are located outside the United States, your personal data may be transferred to, stored, and processed in the U.S. or other countries. We will take steps required by applicable law to safeguard transfers (for example, contractual safeguards). If you require specific transfer mechanisms, contact us at [email protected].

12. Copyright & takedowns

If you believe your copyrighted work has been posted without authorization, contact us at [email protected] with sufficient information for us to act. We will respond to valid notices and take action as required by law.

13. Changes to this Policy

We may change this Privacy Policy. If changes are material we will notify account holders by email or site notice before the changes take effect.

14. Contact

Privacy & Data Requests: [email protected]
Address: 1111B S GOVERNORS AVE STE 26068, Dover, DE 19904