Personal data in Kontent.ai
This article lists the types of personal data handled by Kontent.ai and its flow in the system, as well as the data exchanged with third-party services. Kontent.ai uses Microsoft Azure to store all customer data.
Personal data
You can use the following information when analyzing the GDPR (General Data Protection Regulation) compliance of your projects. The regulation applies to organizations that collect and process data from EU residents, cooperate with EU-based organizations that process the data on their behalf or offer products or services to customers based in the EU. For example, you need to comply with the GDPR in the following cases:- Your company uses Kontent.ai and is based in the EU.
- You provide products or services to customers based in the EU.
.
Disclaimers- This page only covers the built-in Kontent.ai functionality. You also need to check any custom functionality in your project for personal data handling.
- This page is provided for informational purposes only and should not be relied upon as legal advice. You can use the information to identify personal data and its flow in the system, and take appropriate measures. However, we recommend consulting with a legally qualified professional to verify that your project complies with the GDPR.
Kontent.ai users
A Kontent.ai user represents any person who signed up for a Kontent.ai account.| Data | Source | Purpose / Description |
| Address | Provided by the user when entering payment information | FastSpring – used for invoices and reports |
| Browser | Extracted from the user’s browser |
|
| Business type | Provided by the user during sign-up | |
| Business role | Provided by the user during sign-up | |
| Content | Provided by the user when using Kontent.ai | Any content typed in by the user includes user information in comments, older versions, workflows, and so on. |
| Customer content | Provided by customers, may contain personal data based on the use case | Fastly – Content Delivery Network for transferring the content to the user |
| Device type | Extracted from the user’s browser | Azure Application Insights – debugging and problem analysis |
| Email address | Provided by the user during sign-up Provided by another user when inviting the user |
|
| Events and activity tracking | Logged by the system when a user performs an action | |
| Geolocation data | Extracted from network communication with the user |
|
| IP address | Extracted from network communication with the user |
|
| Name | Provided by the user during sign-up Provided by the user on the user profile page Provided by another user when inviting the user |
|
| Operating system | Extracted from the user’s browser |
|
| Password | Provided by the user during sign-up | Auth0 – authenticating the user during sign-in |
| Payer ID | Payer ID | FastSpring – used for invoices and reports |
| Phone number | Provided by the user during sign-up |
|
| Subscription plan | Assigned by the system during sign-up Managed by the user | FastSpring – used for invoices and reports |
| User creation date | System-generated during sign-up | Azure Application Insights – debugging and problem analysis |
| User ID | System-generated during sign-up | |
| User role | Configured by another user with required permissions | Determines what the user can access in Kontent.ai |
Third-party services
Amplitude
Provider: Amplitude Inc., having its registered office at 100 First Street, 6th Floor, San Francisco, CA 94105, United States of America Amplitude is an event tracking, growth, and product analytics tool. Kontent.ai uses Amplitude to see how users interact with Kontent.ai (on an anonymous basis) to gather insights and improve the product. More about Amplitude.
Data we send:
- Business role
- Business type
- Domain of the email address
- Events and activity tracking (data acquired thereby)
- User ID
Atlassian
Provider: Atlassian, having its registered office at Level 6, 341 George Street, Sydney, Australia We utilize Atlassian products internally for notes and requirement management. Some mentions about specific customers and their issues may be present in Jira and Confluence, but never any customer data or customer content. More about Atlassian and the GDPR.
Data we send:
- Business role
- Business type
- Name
- Email address
- Internal notes referring to customers
Auth0 by Okta
Provider: Auth0 by Okta, having its registered office at 10800 NE 8th Street, Suite 600, Bellevue, WA 98004, United States of America Auth0 is an identity management platform. Kontent.ai uses Auth0 to manage user sign-ups and sign-ins. More about Auth0 and the GDPR.
Data we send:
- User ID
- Email address
Continero Corp s.r.o.
Provider: Cyrilská 7, 602 00 Brno-střed-Trnitá, Czech Republic Continero Corp s.r.o. is an external contractor that outsources people for Kontent.ai, contributing to product development. Data we send:- External contractors with active participation in Kontent.ai project can have access to all personal data mentioned on this page
Fastly
Provider: 475 Brannan St. #300 San Francisco, CA 94107, United States of America Fastly is a provider of Content Delivery Network (CDN). Kontent.ai utilizes Fastly CDN to distribute content to users. Note that personal data is only processed in case it is contained in customer-provided content. Data we send:- Customer content
FastSpring
Provider: Bright Market, LLC dba FastSpring. 801 Garden St. #201, Santa Barbara, CA 93101, United States of America FastSpring is our payment gateway for card payments. Kontent.ai never stores or processes any card information. The data is provided to FastSpring directly. More about FastSpring data processing.
Data FastSpring processes:
- Payment information
Gong.io
Provider: Gong.io Ltd., San Francisco Office, 201 Spear St. 13th Floor, San Francisco, CA 94105, United States of America Gong.io is a revenue intelligence platform. Kontent.ai uses Gong.io to improve the quality of our services. The recordings will be kept no longer than strictly necessary and, at maximum for one month after their collection. You can revoke your consent at any time during or after the recorded call, and you have the right to access the recording and request its deletion at any time, as described in our privacy policy in the section "Your rights under GDPR". More about Gong.io data processing.
Data we send:
- Sales call recordings
Hotjar
Provider: Hotjar Limited, a private limited liability company, having its registered office at Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta Hotjar is an online behavior and feedback tool. Kontent.ai uses Hotjar to see how users work with the service (on an anonymous basis) and optimize the user experience. More about Hotjar and the GDPR.
Data we send:
- Events and activity tracking (data acquired thereby)
Intercom
Provider: Intercom R&D Unlimited Company, having its registered office at 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Republic of Ireland Intercom is a customer messaging platform. Kontent.ai uses Intercom as a platform for placing support requests, sending targeted messages to Kontent.ai users, and managing conversations with leads and customers. More about Intercom and the GDPR.
Data we send:
- Business role
- Business type
- Email address
- Events and activity tracking (data acquired thereby)
- Name (First name, Last name)
- Phone number
- User ID
Microsoft
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, United States of America Microsoft is a provider of the Kontent.ai product and related infrastructure. More about Microsoft Azure Privacy.
Data we send and receive:
- All personal data mentioned on this page
NeverBounce
Provider: NeverBounce LLC, 805 Broadway St Suite 900, Vancouver, WA 98660 US NeverBounce is an email validation service. Kontent.ai uses NeverBounce to validate email addresses for optimizing the customer database and cleaning up invalid records, such as incorrect or temporary emails. More about NeverBounce Privacy Policy and its EU Privacy Policy.
Data we send:
- Email address
Pardot
Provider: Salesforce Pardot, having its registered office at The Landmark at One Market, Suite 300, San Francisco, CA 94105, United States of America Pardot is a complex B2B marketing automation solution that features CRM integration, email marketing, lead nurturing, lead scoring, and ROI reporting. Kontent.ai uses Pardot to help marketing and sales teams work together to generate and qualify leads, shorten sales cycles, and track marketing ROI. Pardot also enables Kontent.ai to see how users work with the service and optimizes the user experience. More about Pardot and the GDPR.
Data we send:
- Business role
- Business type
- Email address
- Events and activity tracking (data acquired thereby)
- Name (First name, Last name)
- Country
- State
- Company
- Phone number
- User ID
reCAPTCHA
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America reCAPTCHA collects various types of data to distinguish between humans and bots and to prevent abuse. The data collected may include:- Behavioral Patterns
- Browser Fingerprinting
- Cookies
- IP address
- User-Agent String
SendGrid
Provider: SendGrid, Inc., having its registered office at 1801 California Street, Suite 500, Denver, Colorado 80202, United States of America SendGrid is a cloud-based email delivery platform. Kontent.ai uses SendGrid to send service notifications to Kontent.ai users. For example, notifications about subscriptions, content assignment changes, new comments, and others. More about SendGrid and the GDPR.
Data we send:
- Email address
VWO
Provider: Wingify, 1104, KLJ Tower, North, Netaji Subhash Place, Pitampura, Delhi, 110034, India VWO is an AB testing tool we utilize on our website to create more relevant experiences for web visitors. VWO is not used in Kontent.ai application. More about VWO Privacy Policy.
Data we send:
- Limited website visitor data