• Cheat sheets
  • Documentation
  • API reference
  • Product updates
  • Sign in
Kontent.ai Learn
  • Try Kontent.ai
  • Plan
  • Set up
  • Model
  • Develop
  • Create
Copyright © 2025 Kontent.ai. All rights reserved.
  • Web
  • Privacy policy
  • Cookies policy
  • Consent settings
  • Security
  • GDPR
  • Docs
  • Collections
  • Custom apps
  • Custom elements
  • Environments
  • Keyboard shortcuts
  • Mission Control
  • Projects
    • Audit log
    • Data encryption
    • Multifactor authentication
    • Personal data in Kontent.ai
    • Secure access
    • Security controls
    • Single sign-on
    • Third-party vendors
  • Task management
  • Terminology

Personal data in Kontent.ai

Kontent.ai team
10 minutes
Security
Download PDF
This article lists the third-party vendors that are integrated with and support the Kontent.ai platform. These vendors process personal data as part of delivering core product features and services to our customers.

Personal data

The overview below serves as a basis for assessing compliance with privacy regulations, such as GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), APP (Australian Privacy Principles), and others.

GDPR

GDPR applies to organizations that collect and process data from EU residents, cooperate with EU-based organizations that process the data on their behalf, or offer products or services to customers based in the EU. For example, you need to comply with the GDPR in the following cases:
  • Your company uses Kontent.ai and is based in the EU.
  • You provide products or services to customers based in the EU.
For more information about the GDPR, see the Official Journal of the European Union.

Kontent.ai users

A Kontent.ai user represents any person who signed up for a Kontent.ai account.
DataSourcePurpose / Description
AddressProvided by the user when entering payment informationFastSpring – used for invoices and reports
BrowserExtracted from the user’s browser
  • Microsoft Azure – debugging and problem analysis
  • reCaptcha – distinguishing between humans and robots
Business typeProvided by the user during sign-up
  • Amplitude – tracking and analysis
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • Salesforce Pardot – user segmentation
Business roleProvided by the user during sign-up
  • Amplitude – tracking and analysis
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • Salesforce Pardot – user segmentation
ContentProvided by the user when using Kontent.aiAny content typed in by the user includes user information in comments, older versions, workflows, and so on.
Customer contentProvided by customers, may contain personal data based on the use case
  • DeepL – for translations 
  • ElasticSearch – for searching the content 
  • Fastly – Content Delivery Network for transferring the content to the user
  • Microsoft Azure – for data storage
Device typeExtracted from the user’s browserMicrosoft Azure – debugging and problem analysis
Email addressProvided by the user during sign-up
Provided by another user when inviting the user
  • Amplitude – tracking and analysis (domain only)
  • Auth0 – authenticating the user during sign-in
  • Microsoft Azure – data storage and debugging and problem analysis
  • FastSpring – used for invoices and reports
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • Invitations – used to invite new users to Kontent.ai projects
  • SendGrid – sending service and subscription notifications
  • User profile – managing user profile information
Events and activity trackingLogged by the system when a user performs an action
  • Amplitude – tracking and analysis
  • Auth0 – authentication activity tracking
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • Microsoft Azure – debugging and problem analysis
  • Sentry – user activity logging
Geolocation dataExtracted from network communication with the user
  • IP-API – matching IP addresses with locations
  • Microsoft Azure – debugging and problem analysis
  • reCaptcha – distinguishing between humans and robots
IP addressExtracted from network communication with the user
  • IP-API – matching IP addresses with locations
  • Microsoft Azure – debugging and problem analysis
  • reCaptcha – distinguishing between humans and robots
NameProvided by the user during sign-up
Provided by the user on the user profile page
Provided by another user when inviting the user
  • Auth0 – authentication purposes
  • FastSpring – used for invoices and reports
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • User profile – managing user profile information
Operating system (OS)Extracted from the user’s browser, includes OS name, version, and platform
  • Microsoft Azure – debugging and problem analysis
  • reCaptcha – distinguishing between humans and robots
PasswordProvided by the user during sign-upAuth0 – authenticating the user during sign-in
Payer IDPayer IDFastSpring – used for invoices and reports
Phone numberProvided by the user during sign-up
  • Account recovery and verification.
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
Subscription planAssigned by the system during sign-up
Managed by the user
FastSpring – used for invoices and reports
User creation date and other account-related metadataSystem-generated during sign-up or collected during account useMicrosoft Azure – debugging and problem analysis
User IDSystem-generated during sign-up
  • Amplitude – tracking and analysis
  • Auth0 – authenticating the user during sign-in
  • Microsoft Azure – debugging and problem analysis
  • Intercom – used for support requests within Kontent.ai and other communication with Kontent.ai
  • Unique identification in the product
User roleConfigured by another user with required permissionsDetermines what the user can access in Kontent.ai

Third-party services used by Kontent.ai platform

This section lists third-party services used by Kontent.ai platform and the data shared with them. For clarity, “Provider” refers to the legal entity responsible for the service, and “Data location” specifies where your data is physically stored.

Amplitude

Provider: Amplitude Inc., having its registered office at 100 First Street, 6th Floor, San Francisco, CA 94105, United States of America Amplitude is an event tracking, growth, and product analytics tool. Kontent.ai uses Amplitude to see how users interact with Kontent.ai (on an anonymous basis) to gather insights and improve the product. More about Amplitude. Data location: United States of America Data we send:
  • Business role
  • Business type
  • Domain of the email address
  • Events and activity tracking (data acquired thereby)
  • User ID

Auth0 by Okta

Provider: Auth0 by Okta, having its registered office at 10800 NE 8th Street, Suite 600, Bellevue, WA 98004, United States of America Auth0 is an identity management platform. Kontent.ai uses Auth0 to manage user sign-ups and sign-ins. More about Auth0 and GDPR. Data location: United States of America Data we send:
  • User ID
Data we receive:
  • Email address

Condens

Provider: Condens Insights GmbH, having its registered office at Sandstrasse 37, 80335 Munich, Germany Condens is a provider of a platform used for external research. More about Condens and GDPR. Data location: European Union Data we send:
  • Recorded videos and/or transcripts of research interviews with users

Continero

Provider: Continero Corp s.r.o., having its registered office at třída Kpt. Jaroše 1922/3, 602 00 Brno, Czech Republic Continero is an external contractor that outsources people for Kontent.ai, contributing to product development. More about Continero. Data location: Czechia Data we send:
  • External contractors with active participation in Kontent.ai projects can have access to all personal data mentioned on this page

DeepL

Provider: DeepL SE, having its registered office at Maarweg 165, 50825 Cologne, Germany DeepL Translator is a neural machine translation service. Kontent.ai uses DeepL for semi-automatic AI-powered translation. More about DeepL Privacy. Data location: Germany Data we send:
  • Customer content

ElasticSearch

Provider: Elastic N.V., having its registered office at Keizersgracht 281, 1016 ED Amsterdam, the Netherlands ElasticSearch is a search engine. Kontent.ai uses ElasticSearch to provide search capability within the Kontent.ai platform. More about Elastic Privacy. Data location: United States of America Data we send:
  • Customer content

Fastly

Provider: Fastly, Inc., having its registered office at 475 Brannan St., Suite 300, San Francisco, CA 94107, United States of America Fastly is a provider of Content Delivery Network (CDN). Kontent.ai utilizes Fastly CDN to distribute content to users. Note that personal data is only processed in case it is contained in customer-provided content. More about Fastly Privacy and Trust. Data location: worldwide, based on end-user location Data we send:
  • Customer content

FastSpring

Provider: Bright Market, LLC dba FastSpring, having its registered office at 801 Garden St. #201, Santa Barbara, CA 93101, United States of America FastSpring is our payment gateway for card payments. Kontent.ai never stores or processes any card information. The data is provided to FastSpring directly. More about FastSpring data processing. Data location: United States of America Data FastSpring processes:
  • Payment information

Fivetran

Provider: Fivetran, Inc., having its registered office at 1221 Broadway, Floor 20, Oakland, CA 94612, United States of America Fivetran is Kontent.ai’s managed data pipeline provider, used to automate data integration. More about Fivetran Privacy. Data location: United States of America Data Fivetran processes:
  • Data from integrated third-party sources (for example, SaaS platforms and databases)
  • Metadata related to data pipelines and sync operations
  • Operational logs and performance metrics

Intercom

Provider: Intercom R&D Unlimited Company, having its registered office at 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Republic of Ireland Intercom is a customer messaging platform. Kontent.ai uses Intercom as a platform for placing support requests, sending targeted messages to Kontent.ai users, and managing conversations with leads and customers. More about Intercom and the GDPR. Data location: United States of America Data we send:
  • Business role
  • Business type
  • Email address
  • Events and activity tracking (data acquired thereby)
  • Name (First name, Last name)
  • Phone number
  • User ID

Kingswaysoft 

Provider: KingswaySoft Inc., having its registered office at 233 Speers Road, Suite 12, Oakville, ON L6K 0J5, Canada Kingswaysoft is an integration tool that facilitates data connectivity and automation between systems. More about Kingswaysoft Privacy. Data we send:
  • N/A, the tool runs on-premises

Metabase 

Provider: Metabase Inc., 9740 Campo Rd. Suite 1029, Spring Valley, CA 91977, United States of America Metabase helps with reporting, analytics, and exploration of the product data. More about Metabase Privacy. Data we send:
  • N/A, the tool runs on-premises

Microsoft

Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, United States of America Microsoft is a provider of the Kontent.ai product and related infrastructure. More about Microsoft Azure Privacy. Data location: European Union and other regions, depending on the data center selected during project setup Data we send and receive:
  • All personal data mentioned on this page

reCAPTCHA and Google Tag Manager

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America reCAPTCHA collects various types of data to distinguish between humans and bots and to prevent abuse. Google Tag Manager is used for setting up and managing tags on the kontent.ai website. More about Google Privacy. Data location: United States of America The data collected may include:
  • Behavioral patterns
  • Browser fingerprinting
  • Cookies
  • IP address
  • User-agent string

SendGrid

Provider: SendGrid, Inc., having its registered office at 1801 California Street, Suite 500, Denver, Colorado 80202, United States of America SendGrid is a cloud-based email delivery platform. Kontent.ai uses SendGrid to send service notifications to Kontent.ai users. For example, notifications about subscriptions, content assignment changes, new comments, and others. More about SendGrid and the GDPR. Data location: United States of America Data we send:
  • Email address

Sentry

Provider: Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105-2250, USA We utilize Sentry for application monitoring. More about Sentry Privacy. Data location: United States of America Data we send:
  • Browser
  • Email address
  • Error events, logs, session replays
  • Device type
  • Geolocation data
  • IP address
  • Operating system
  • User ID
Disclaimers
  • This page only covers the built-in Kontent.ai functionality. You also need to check any custom functionality in your project for personal data handling.
  • There may be other uses of personal data in Kontent.ai, for example, contact information if you engage with our Sales or Marketing Teams, cookies if you access the kontent.ai website, and others. Refer to our Privacy Policy page for these use cases and for more information.
  • This page is for informational purposes only and should not be relied upon as legal advice. You can use it to identify personal data flows and take measures, but consult a legal professional to ensure your project complies with privacy regulations, including GDPR.
  • To learn about vendors outside Kontent.ai platform that support business operations, visit our Third-party vendors page.
  • Personal data
  • Third-party services used by Kontent.ai platform