Privacy and GDPR compliance overview

MyContentLab is engineered with privacy-by-design, adhering strictly to the UK General Data Protection Regulation (UK GDPR), EU GDPR, and global data protection standards.

Core data protection principles

┌────────────────────────────────────────────────────────────────────────┐
│                        DATA PRIVACY ARCHITECTURE                       │
├──────────────────────────┬──────────────────────────┬──────────────────┤
│   DATA MINIMIZATION      │   TENANT ISOLATION       │   AI ISOLATION   │
│  • Only sync required    │  • Strict per-org silos  │  • No training   │
│    operational metrics   │  • Zero cross-visibility │    on private    │
│  • 24-month retention    │  • Encrypted at rest     │    client video  │
└──────────────────────────┴──────────────────────────┴──────────────────┘

1. Data minimization and purpose limitation

We only request and store data points necessary to calculate marketing performance, render dashboards, and power creative analysis tools.

2. Multi-tenant cryptographic isolation

All client workspaces, connected channel OAuth tokens, and reports are partitioned with database-level tenant isolation. Data from Organization A is strictly inaccessible to Organization B.

3. AI safety and confidentiality guarantee

• Your private creative video uploads, proprietary hook libraries, and client marketing scripts are never used to train foundation AI models.
• All AI processing occurs in stateless, private inference environments.

4. Public social data retention policy

Public social listening mentions and web citations follow a rolling 24-month retention cycle, after which historic mention records are permanently expunged. We also automatically honor author removal and opt-out requests.

Next steps

Data subject rights

• Exporting your data — Request full JSON/CSV data archives.
• Account deletion & right to erasure — Self-service data destruction.