Data & Security

Compliance, data storage, and account deletion

Is my data secure?

All traffic is encrypted with TLS and data is stored encrypted at rest. Isolation between organizations is enforced by Row Level Security policies in the database rather than in application code, which means even a faulty query cannot return another organization’s rows. Backups run regularly and access rights are restricted by role.

How is KVKK compliance ensured?

We run on KVKK-compliant infrastructure and keep our data processing inventory current. The privacy notice and explicit consent flows are presented during registration. A defined process covers deletion, correction and data portability requests; send yours to hello@youcontent360.com and it is answered within the period the regulation sets. The current notice is always at /legal/kvkk.

How do I delete my account?

Use the 'Delete Account' option on the Settings → Profile page. It permanently removes your data and organization associations; it cannot be undone, which is why you are asked to confirm first. Export any articles you want to keep beforehand. If you are the organization's only administrator, deletion covers the organization's content too.

Where is my data stored?

Your data sits in encrypted databases on Supabase infrastructure, with access scoped per organization. We do not state a hosting-region commitment here without verified information, and we would rather leave the question open than answer it with an unverified claim. If your contract needs the region, request it at hello@youcontent360.com and we will confirm in writing.

Can I export my content data?

Yes. Articles export in five formats: raw HTML, clean HTML, plain text, DOCX and Markdown. Export is open on every plan and spends no content credits, so moving content into your own publishing workflow never leaves you locked into the tool. The DOCX option suits editorial review and approval processes.

Do you share data with third parties?

No. We do not share your content or project data with third parties for marketing or analytics, and we do not train models served to other customers on your data. Infrastructure providers required to run the service are separate and act only as processors. Sharing happens solely with authorised authorities where the law requires it.

Still have questions?

Our team is happy to help. Reach us by email and we will respond within business hours.