ContentPlay

Privacy Policy

Last updated 2 October 2026

ContentPlay is a content-planning and review platform run by Strength System (“we”, “us”). This policy explains what information we collect when you use ContentPlay, why, who we share it with, and the choices you have. If anything here is unclear, email james@strengthsystem.com.

Who this applies to

Anyone with a ContentPlay account. Accounts are created by invitation as part of a coaching or mentorship program; there is no public sign-up. ContentPlay is for adults running a business and is not intended for anyone under 18.

What we collect

Account details: your name, email address and a password. Passwords are stored in a hashed form we cannot read.
What you create: ideas, scripts, storyboards, captions, calls to action, positioning notes, check-in answers, to-dos, and the feedback exchanged with your mentor.
Files you upload: videos, carousel images and cover screenshots.
Social profile links you choose to add (Instagram, TikTok, Facebook).
Instagram data, only if you connect your account: see the Instagram section below.
Publicly available post data: where your program includes it, we may read public information about posts on the Instagram profile you have given us (captions, play, like and comment counts, and the public video) to show how your content performed and to help repurpose it.
Technical information: the essential cookie that keeps you signed in, your light or dark mode preference stored in your browser, and standard server logs (such as IP address and browser type) kept by our hosting providers for security and troubleshooting.

We do not use advertising or tracking cookies, and we do not run third-party analytics.

How we use it

To provide the service: storing your work, moving it through review, and showing it to you and your mentor.
To give you feedback and drafts, including AI-assisted drafts (see below).
To show how your posted content performed.
To keep the service secure, fix problems and prevent misuse.
To contact you about your account or the service.

We do not sell your personal information, we do not share it for advertising, and we do not use your content to train AI models.

Who can see your content

You and the mentor running your program. Other mentees cannot see your ideas, scripts, videos, positioning or feedback. A small number of Strength System staff may access data when needed to run or support the service.

Instagram

Connecting Instagram is optional. If you connect, you log in with Instagram and approve access yourself; we never see your Instagram password. We request permission only to read your profile and media, and to read insights. We receive:

your Instagram username, account ID and follower count;
your posts and reels, with their captions, links and dates;
insights for those posts, such as plays, reach, likes, comments, saves and shares.

We use this only to show you and your mentor how your content is performing and to inform coaching. We do not post, comment, message or change anything on your account, and we do not share this data with anyone outside the service providers listed below. The access token is stored securely on our servers and is never sent to your browser.

You can disconnect at any time in ContentPlay under Settings, which deletes the stored access token, or by removing ContentPlay in Instagram under Settings → Apps and websites. To have Instagram data we already hold deleted, see “Deleting your data”.

AI features

Some features use AI to draft feedback, hooks, cover lines, content plans and carousel layouts, and to transcribe videos. To do this, the relevant text or audio is sent to our AI providers (Anthropic and OpenAI) for processing. AI output is always a draft: a person reviews it before anything is saved or sent.

Service providers

We share information only with the providers that help us run ContentPlay, and only as needed for that purpose:

Supabase — database, sign-in and file storage.
Vercel — website hosting.
Anthropic and OpenAI — AI drafting and transcription.
Apify — reading publicly available Instagram post data.
Meta (Instagram) — when you connect your Instagram account.

We may also disclose information if required by law, or to protect the rights, safety or property of our users or ourselves. If the business is sold or merged, your information may transfer to the new owner under the same commitments.

Where your information is stored

Strength System is based in Australia. Our service providers may store and process information in other countries, including the United States. Where information is transferred internationally, we rely on our providers’ contractual safeguards (such as standard contractual clauses) to protect it.

How long we keep it

We keep your information for as long as your account is active. When your account is closed we delete your account and content within 30 days, except where we must keep something to meet a legal obligation. Backups held by our providers are overwritten on their normal cycle.

Security

Data is encrypted in transit, access is restricted by account so that each mentee can reach only their own work, and uploaded files are private and served through expiring links. No system is perfectly secure; if a breach affecting your information occurs, we will notify you and the relevant authorities as the law requires.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, export it, or delete it. Depending on your location you may also have the right to object to or restrict certain uses, to withdraw consent, and to complain to your privacy regulator. This includes rights under the Australian Privacy Act, the EU and UK GDPR, and US state laws such as the CCPA. We will not treat you differently for using any of these rights.

For users in the EU or UK, our legal bases are: performing our agreement with you (providing the service), your consent (connecting Instagram, which you can withdraw by disconnecting), and our legitimate interests (keeping the service secure and working).

To use any of these rights, email james@strengthsystem.com. We respond within 30 days.

Deleting your data

To delete your account and everything in it, or only the Instagram data we hold, email james@strengthsystem.com from the address on your account with the subject “Delete my data”. We will confirm when it is done, within 30 days. Disconnecting Instagram in Settings removes our access immediately.

Changes to this policy

If we make a material change we will update the date above and tell you in the app or by email before it takes effect.

Contact

Strength System · james@strengthsystem.com