BOFU ContentPrivacy policy
This explains what BOFU Content collects, why, and who else touches it. It is written to be read, not to be survived.
Who we are
BOFU Content is operated by FunnelStrategist LLC (“we”, “us”). You can reach us at support@bofucontent.us about anything on this page.
What we collect
Information you give us
- Account details — your email address and a password, which we store only as a salted hash and cannot read.
- Project details — your product name, website address, description, and any competitors you enter.
- Billing details — handled entirely by our payment processor. We store only the customer and subscription identifiers it gives us, plus your plan status. We never see or store your card number.
Information we generate for you
- Keyword research, content plans, publishing schedules, and the articles the service writes.
- Screenshots of publicly accessible product pages referenced in your articles.
- Records of external API calls made on your behalf, so spending can be attributed and shown to you.
Information we read from your website
To research your market we fetch publicly available pages from the website you give us — the same pages any visitor or search engine can read. We use the text to understand your product, your customers and your competitors. We do not attempt to access anything behind a login.
Credentials you connect
Some features only work if you hand us keys to systems you own. This is the most sensitive data we hold, so it deserves its own section.
- CMS credentials (WordPress application passwords, Ghost admin keys, Webflow, Shopify, Framer tokens, webhook URLs) — used solely to publish and update your articles.
- Email credentials (SMTP and IMAP for your own mailbox) — used solely to send backlink outreach that you approved, and to detect replies so follow-ups stop.
- Google Search Console — a read-only authorisation. We can read your search performance data. We cannot change anything in your Search Console, and we never request write access.
These credentials are stored per project, used only to perform the actions you asked for, and never shared with anyone. You can remove any of them at any time from the Integrations page, which deletes the stored credential.
How we use what we collect
- To run keyword research, write articles, and publish them where you told us to.
- To send outreach from your mailbox, at your instruction and under your approval settings.
- To read your Search Console data and suggest improvements to pages you already have.
- To operate accounts, enforce plan limits, take payment, and provide support.
- To keep the service working and secure.
Who else processes your data
We use a small number of subprocessors. Each receives only what its job requires.
| Category | What it does for you |
|---|---|
| Cloud infrastructure | Hosting, database, file storage, and the browser used to capture screenshots |
| AI language model providers | Write articles and perform keyword and relevance analysis |
| Search data providers | Supply search volume, difficulty and search-results data |
| Payment processing | Takes payment and manages subscriptions |
| Google Analytics, Google Ads and Meta Pixel | Optional visit analytics and paid-trial advertising measurement, based on your cookie choices |
| Google Search Console | Supplies your own search performance data, read-only, and only after you authorise it |
| AI answer engines | Optional — check whether AI assistants cite your brand |
We name our current subprocessors to customers on request. Write to support@bofucontent.us and we will send the list, along with a data processing agreement if you need one.
What we do not do
- We do not send your project content, connected credentials, passwords, or payment-card details to advertising or analytics services.
- We do not use your content or your site's content to train our own models, and our AI providers are engaged under API terms that exclude training on submitted data.
- We do not send email from your mailbox except where you have approved it or explicitly enabled automatic sending.
- Google analytics and Google/Meta advertising measurement are optional and controlled by your cookie choices.
Cookies and similar technology
The application stores a session token so you stay signed in. We also store your cookie choices for up to 180 days across bofucontent.us and app.bofucontent.us. These choices can be changed using the Cookie choices button on any page.
If you allow Analytics, Google Analytics receives page visits and confirmed paid-trial purchases. If you allow Advertising measurement, Google Ads and Meta receive ad attribution and confirmed paid-trial conversions, including a transaction identifier, amount and currency. These tags can also receive browser/device information and your IP address as part of those requests. We remove checkout-session, email and authentication parameters from the page addresses supplied to these tags.
Google and Meta tags do not load before you consent to an optional category. We keep Google ad personalization disabled and Meta automatic advanced matching off and respect Global Privacy Control by disabling advertising measurement. With your permission, first-party Google and Meta cookies link an ad visit on the marketing site to a paid trial in the app. Browser storage remembers reported transaction IDs to help prevent duplicate reporting. Meta may use consented activity to measure and optimize advertising under its privacy policy. Rejecting optional tracking does not prevent you from using the service.
Google processes this information under its applicable terms and privacy policy. You can learn more about how Google uses information from sites that use its services.
How long we keep things
Account and project data is kept while your account is open. Deleting a project removes its keywords, articles, calendar, connected credentials and background tasks. Closing your account removes your personal data, except records we must keep for tax and accounting purposes, which our payment processor retains under its own obligations.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Depending on where you live you may also have the right to object to certain processing or to lodge a complaint with a data protection authority. Write to support@bofucontent.us and we will respond within 30 days.
Security
Data is encrypted in transit. Passwords are stored only as hashes. Connected credentials are stored so that only the running service can use them, and access to production systems is limited to people who need it. No system is perfectly secure, and we will tell affected users promptly if a breach occurs.
Children
The service is for businesses and is not directed at anyone under 18.
Changes
If we change this policy we will update the date above, and for material changes we will tell account holders by email.