Privacy policy
Last updated: 10 June 2026
Content Maturity is operated by Contentious Ltd ("we", "us"), a company registered in England and Wales, company number 10289406, registered office 86-90 Paul Street, London, EC2A 4NE. We are the data controller for the personal data described here. For anything about this policy or your data, contact us at hello@contentmaturity.com.
What we collect
- Account details. We use Clerk, our authentication provider, to handle sign-in. Through it we hold your name, email address and a user identifier.
- Organisation name. The organisation name you enter, used to group your analyses and your team's combined results.
- Assessment responses. The maturity scores you select and any free-text comments you write to explain them. Free-text comments may contain personal data you choose to include, so please don't include more than you need to.
- Results and derived data. Calculated scores, per-area and per-organisation aggregates, and AI-generated written summaries of team results.
- Email activity. A record of the results and invitation emails we send (recipient, subject, status) so we can support delivery.
- Usage analytics. Privacy-friendly, aggregate usage statistics via Umami, which we self-host without tracking cookies. It does not collect personally identifying information.
How we use it, and our lawful basis
- To provide the service – run your analysis, calculate and show results, and let your organisation see combined team results (performance of a contract and our legitimate interests).
- To email the results and team invitations you request (performance of a contract).
- To generate written analysis of team results using AI (legitimate interests – see sub-processors).
- To understand and improve how the product is used, in aggregate (legitimate interests).
Who sees your answers
Your individual responses contribute to your organisation's combined results. If colleagues in your organisation also complete an analysis, the team view shows averaged scores and your written comments attributed by first name to other members and admins of that organisation. Results are never shared outside your organisation, except where you explicitly enable a password-protected shared-results link. Be candid, but assume a colleague may read your words.
Sub-processors
We share the minimum personal data necessary with these providers, who process it on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication and account management | United States |
| Postmark | Sending results and invitation emails | United States |
| Anthropic | Generating AI written summaries of team results | United States |
| Railway | Application hosting and database | European Union (EU West) |
| Umami (self-hosted) | Aggregate usage analytics | Our infrastructure |
Your account and assessment data are hosted in the European Union (EU West). When team results are summarised, the relevant scores and free-text comments are sent to Anthropic's API to produce the written analysis. Anthropic does not use data submitted through its API to train its models. Where providers are outside the UK and EU, transfers are covered by appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses.
Cookies
A session cookie set by Clerk keeps you signed in; this is essential to the service. Our usage analytics (Umami) is configured to work without cookies. We don't use advertising or third-party tracking cookies.
Retention
We keep your account and assessment data for as long as your account is active. You can ask us to delete your account and personal data at any time. Where a user is deleted, organisation-level aggregate results may be retained so a team's combined results stay intact. Email-delivery logs are kept for up to 24 months.
Your rights
Under UK GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent where processing relies on it. Email hello@contentmaturity.com and we'll respond within one month. You can also complain to the Information Commissioner's Office (ICO).
Children
The service is intended for use by organisations. It is not directed at children and is not intended for anyone under 16.
Changes
We may update this policy. We'll change the date above and, for material changes, let you know by email or in the app.
Contact
Contentious Ltd, 86-90 Paul Street, London, EC2A 4NE – hello@contentmaturity.com.