Policy

Privacy Policy

Last updated October 25, 2026

This page explains what Stronglight Media LLC (“Stronglight Media,” “we,” “us”) collects on stronglightmedia.com and in our Content Factory tools, why we collect it, who else handles it, and the choices you have. If anything here is unclear, write to hello@stronglightmedia.com.

What you give us

• The request-access form. When you ask for Content Factory access, we save your name, email address, business or channel name, channel link, the tools and plan you’re interested in, how much you expect to make, and your message. It goes into our client list so we can reply and set you up, and we may copy it into our email and calendar to follow up.
• Email. When you write to us, we keep the conversation in our mailbox.
• Purchases. When you buy tokens, a plan or pay as you go, we receive your email address and the details of what you bought. Your card or bank details go to Stripe, not to us (see “Payments”).
• What you put into the tools. Links, article text, notes, headlines and pictures you upload. See “What happens to what you put into the tools.”
• The Desk. If you use the Desk, we store the accounts you set up there (names, X handles, Facebook pages, voice and style notes, watch lists), the story leads sent to it, and the drafts it writes, so it can work on a schedule.

What we record automatically

The tools’ usage log

Each time a tool makes a picture or a piece of writing, we record the time, the tool and the model it used, whether it worked, the code it was charged to and how many tokens it took. We also record your IP address (for IPv6 addresses, only the first part, which identifies a network, not a device), your browser’s user-agent string, the size of the request, and a short label such as the template and headline or the story’s title. We use this to charge tokens, send bills, work out our costs and stop abuse. The log doesn’t keep the text or pictures you sent. We keep each record for billing and cost-keeping, but we forget your IP address and browser string after 30 days, and the short label after 180 days.

Site analytics

Our home page counts visits without cookies. Once you scroll, tap or move the mouse, it records the page, your country (which our host works out from your connection), the website that sent you (just its name, like google.com), which link you clicked, and a visitor number. That number is a scrambled code made from your IP address, browser and the date. It changes every day and can’t be turned back into your IP address. We don’t store your IP address for analytics. If your browser sends Do Not Track or Global Privacy Control, we don’t count your visit at all.

Security

Our host, Cloudflare, handles your IP address to deliver pages and to limit how many requests one connection can make. Failed attempts to sign in to our private admin area and to Command Center are logged with the network they came from, and those records are deleted after a day.

What happens to what you put into the tools

Sent to Google

Content Factory makes pictures and writing with Google’s Gemini service. When you use a tool, we send Google what that step needs, such as:

• your instructions, headline, notes and chosen settings;
• reference pictures and graphics you upload, or pick from our photo, logo and places library;
• the text of articles you link to (our server fetches the page to read it) or paste in;
• in Post Maker, the photo you choose to “Restyle”;
• for the Desk, its leads and your settings.

Google handles this under its terms for paid use of the service, which say it isn’t used to improve Google’s products. Google may keep it for a limited time to check for misuse.

Your own photo stays on your device

With “Use my own photo” in the thumbnail tool, your photo is never sent to Google or to us. It’s cut out and placed in your browser. To do the cutting out, our own site gives your browser a free image tool; it isn’t loaded from anyone else, and your photo isn’t sent to anyone.

Pictures we keep

Every picture the tools make is saved in private storage (Cloudflare R2) that only we can open. We keep them to answer support and billing questions, check quality and look into misuse. Pictures you upload as references aren’t saved by us; they pass through to Google to make your result. We delete the pictures the tools make after 90 days. Ask us and we’ll delete yours sooner.

Writing

The scripts, articles, captions and post text the tools write aren’t kept on our servers, except the Desk’s drafts, which it keeps so you can come back to them.

Command Center

Command Center is the invite-only dashboard we give some creators, at commandcenter.stronglightmedia.com. It keeps your name, your email and a hash of your password (we can’t read your password), and whatever you save in it: tasks, lists, clients, deals, notes, time and events you add.

YouTube. If you connect it, Command Center gets read-only access through Google to your channel’s subscribers and views, your latest uploads with their titles, views, likes and comments, 120 days of daily numbers from YouTube Analytics, and your estimated revenue only if you choose to share it. It saves these every few hours so your history builds up. It never posts, comments or changes anything.

Google Calendar. If you connect it, Command Center reads the events of the calendars you pick, read-only, when you open a page. We don’t save them.

The saved sign-ins Google gives Command Center are encrypted before they are stored, and we ask Google to cancel them when you disconnect. We use what comes from your Google accounts only to show it to you in your own Command Center. We don’t sell it, use it for ads or share it, and no one at Stronglight Media looks at it except where needed for support or security, or to follow the law. Command Center’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Your data, your call. On the Connections page, Download my data gives you everything Command Center keeps about you, and Erase my data disconnects your accounts and deletes it. Command Center also keeps a short security log of sign-ins and changes to your account (the time, what happened, the country and a scrambled code for the network, never your IP address) for 90 days.

Payments

Payments are handled by Stripe. You type card or bank details on Stripe’s own pages, and we never see or store your full card or account number. From Stripe we keep your email address, what you bought and Stripe’s reference numbers for you, your payments and any plan.

For monthly plans, pay as you go and codes billed monthly, your card or US bank account is saved with Stripe so it can be charged automatically, and we keep its type and last four digits so you can see which one is on file. Linking a bank account uses Stripe’s instant check, which may ask you to sign in to your bank through Stripe.

What’s kept in your own browser

• Your code. Your access code or token code is saved in your browser’s local storage so you stay logged in across the tools. Logging out removes it.
• Your history. The History page and the Post Maker’s draft are stored only in your browser (IndexedDB). We can’t see them, and they don’t follow you to another device.
• Your choices. Some settings are kept for the open tab (session storage) so a refresh doesn’t lose your work.

You can delete all of this at any time by clearing this site’s data in your browser’s settings.

Cookies. We don’t set cookies for visitors or Content Factory customers. We set a sign-in cookie for our own private admin area, and Command Center sets a sign-in cookie (it ends after 7 days without use, or 30 days at most) plus a cookie that lasts 10 minutes while you connect a Google account. Cloudflare may set a strictly necessary security cookie to protect the site from attacks.

Who else handles your information

We use a few companies to run the site. They only get what they need for their part:

• Cloudflare hosts the site and stores our database and saved pictures.
• Google runs the Gemini service the tools use, provides our email and calendar, and, if you use Command Center and connect them, gives it your YouTube and Google Calendar data. Our pages load their fonts from our own site, so Google sees nothing when you visit.
• Stripe handles payments, saved cards and bank accounts, and bills.

We don’t sell your information or share it for advertising. We may disclose it if the law requires it, to protect our rights or someone’s safety, or to a buyer if our business is ever sold, in which case this policy would still apply to it.

How long we keep things

• Client list and requests: until you ask us to delete them or we no longer need them.
• Usage log: the record of each call stays for billing; your IP address and browser string are deleted after 30 days and the label after 180. Saved pictures: deleted after 90 days.
• Command Center: until you erase it (the Connections page has Erase my data) or we delete your account. Disconnecting YouTube deletes the YouTube history we saved. Its security log is deleted after 90 days.
• Desk: leads are deleted after 30 days and drafts after 120 days.
• Analytics: deleted after 400 days; they contain no IP addresses.
• Payment records: as long as tax and accounting rules require. Stripe keeps its own records under its own policy.

Your choices

You can ask us for a copy of the information we hold about you, to correct it, or to delete it. Email hello@stronglightmedia.com from the address you used with us, and include your code if you have one so we can find your records. We’ll answer within 30 days. We may need to keep some records anyway, such as payment records the law requires, or records about fraud or a disputed charge.

Some places, such as California, the European Union and the United Kingdom, give you these rights by law. We offer them to everyone.

Children

The site and tools are for adults running a business or channel. We don’t knowingly collect information from children under 13. If you think we have, email us and we’ll delete it.

Security

The site only works over an encrypted connection, our database and picture storage are private, and only we can open them. Command Center passwords are stored only as salted hashes, the Google sign-ins it saves are encrypted before they reach our database, and its pages load nothing from other websites. No system is perfectly secure, though. Your token code works like a key: anyone who has it can use your tokens, so keep it private.

Where your information is handled

We’re based in the United States. Your information is handled in the United States and wherever Cloudflare, Google and Stripe run their services.

Agency clients

If you hire us for agency work, your written agreement with us may add to this policy. Where they differ, the agreement wins.

Changes

If we change this policy, we’ll update it here and change the date at the top. If a change matters for customers with a plan, pay as you go or a monthly bill, we’ll also tell them by email.

Contact

Stronglight Media LLC · hello@stronglightmedia.com