Privacy Policy
Effective date: July 16, 2026
Last updated: July 16, 2026
Gordon respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how Gordon collects, uses, stores, processes, shares, and protects information when you visit the Gordon website, create an account, purchase a subscription, add a business, connect a WordPress website, generate or grade content, communicate with us, or otherwise use Gordon’s services.
In this Privacy Policy, “Gordon,” “we,” “us,” and “our” refer to the Gordon service available through usegordon.com. “You” and “your” refer to any visitor, account holder, customer, authorized team member, or person using Gordon on behalf of a business or organization.
By using Gordon, you acknowledge the practices described in this Privacy Policy.
1. Scope of This Privacy Policy
This Privacy Policy applies to:
- The Gordon website and customer dashboard.
- Gordon accounts and business profiles.
- Article ideas, generated articles, article editing, and featured-image generation.
- Gordon’s automatic article-writing and publishing schedules.
- Gordon’s WordPress connection and publishing features.
- Gordon’s free Article Grader and content-checking tools.
- Subscription, billing, support, notification, and account-management functions.
- Communications submitted through Gordon’s Contact page.
- Other services that link to this Privacy Policy.
This Privacy Policy does not apply to third-party websites, applications, services, or WordPress websites that Gordon does not own or control.
2. Gordon’s Role
For personal information associated with Gordon accounts, website activity, subscriptions, support requests, and service administration, Gordon generally determines why and how the information is processed.
When a customer submits information about its business, website, employees, customers, clients, patients, students, members, or other individuals for the purpose of creating content, Gordon processes that information on the customer’s instructions. The customer remains responsible for ensuring it has the authority, consent, and lawful basis required to provide that information to Gordon.
Customers should not submit sensitive or confidential personal information about another person unless the information is necessary, lawfully collected, and authorized for use with an AI content service.
3. Information We Collect
The information Gordon collects depends on how you use the service.
3.1 Account Information
When you create or manage a Gordon account, we may collect:
- Your username.
- Your first and last name.
- Your email address.
- Your account password.
- Your preferred timezone.
- Your notification preferences.
- Your account status.
- Your current subscription plan.
- Your article and business usage allowances.
- Your account creation and login history.
Gordon does not store your account password in readable form.
3.2 Business Profile Information
When you add a business to Gordon, we may collect information such as:
- Business name.
- Website address.
- Business description.
- Business email address.
- Business phone number.
- Business address.
- Locations, cities, or service areas.
- Services, products, programs, or offerings.
- Audiences or types of customers served.
- Preferred writing style and tone.
- Preferred calls to action.
- Call-to-action labels and destination links.
- Additional business context or instructions.
- Important website pages and internal links.
- WordPress categories and tags.
- Default publishing preferences.
- Featured-image preferences.
- Scheduling frequency, publication dates, and publication times.
Some of this information may be publicly available business information rather than personal information. It is treated as personal information under this policy when it identifies or can reasonably be associated with an individual.
3.3 Website Research Information
When you ask Gordon to learn from or research a website, Gordon may access publicly available pages from the website address you provide.
Gordon may collect or extract information including:
- Page titles and headings.
- Page text and descriptions.
- Services, products, programs, and offerings.
- Locations and service areas.
- Public business contact information.
- Staff names or biographies appearing publicly on the website.
- Calls to action.
- Internal links and page addresses.
- Publicly displayed images and image descriptions.
- Other information reasonably relevant to understanding the business or preparing an article.
Gordon applies limits to the pages, redirects, file types, response sizes, and website locations it may access. Gordon is designed to research relevant public pages rather than private, password-protected, or unrelated third-party content.
You are responsible for confirming that the website information Gordon discovers is accurate and appropriate before using it in an article.
3.4 WordPress Connection Information
Gordon can connect directly to your WordPress website through the WordPress REST API. No Gordon plugin needs to be installed on your WordPress website.
To create this connection, Gordon may collect:
- Your WordPress website address.
- Your WordPress username.
- A WordPress application password.
- Available WordPress categories.
- Available WordPress tags.
- WordPress media information.
- WordPress post IDs.
- Post status and publication information.
- Scheduled publication dates and times.
- Errors or responses returned by the WordPress REST API.
- Information needed to determine whether a previously connected post has been changed or deleted.
Gordon does not require or request your regular WordPress account password.
Your WordPress application password is encrypted by Gordon and is not displayed again after it has been saved. You can revoke the application password at any time from your WordPress user profile.
The application password provides Gordon with the permissions assigned to the associated WordPress user. You should create a dedicated WordPress user with only the permissions Gordon reasonably requires and should not connect an administrator account unless administrator access is necessary.
3.5 Content and Generation Information
When you use Gordon to create, edit, schedule, grade, or publish content, we may collect and process:
- Article topics and titles.
- Article instructions.
- Article ideas and idea-generation requests.
- Keywords and search phrases.
- Locations selected for an article.
- Selected services, products, programs, or audiences.
- Article type and intended reader intent.
- Article drafts and revisions.
- User edits.
- Article metadata.
- Excerpts and descriptions.
- URL slugs.
- Headings and formatting.
- Internal links.
- WordPress categories and tags.
- Calls to action.
- Sources used to prepare an article.
- Featured-image prompts.
- Generated featured images.
- Featured-image alt text.
- Publication status.
- Scheduled publication information.
- Generation errors and retry information.
- Article usage and generation allowances.
Generated articles and images may be stored in your Gordon account so that you can review, edit, regenerate, schedule, download, send, or publish them.
3.6 Article Grader Information
When you use Gordon’s Article Grader, we may collect:
- The public article address you submit.
- Public content retrieved from that article.
- The article title, headings, text, links, and other page information needed to perform the review.
- The resulting grade, category scores, findings, and recommendations.
- Your IP address or another technical identifier.
- The date and time of the request.
- Information required to enforce the Article Grader’s usage limits and prevent abuse.
The Article Grader evaluates content quality and readiness. It does not attempt to identify who wrote an article and does not make decisions that produce legal, employment, lending, insurance, educational, or similarly significant effects.
You should submit only publicly accessible article addresses that you are authorized to review or that you may lawfully access.
3.7 Subscription and Billing Information
When you subscribe to a paid Gordon plan, we may collect:
- Your selected plan.
- Subscription status.
- Billing period.
- Renewal date.
- Article and business allowances.
- Usage during each billing period.
- Bonus allowances or adjustments.
- Billing name and contact information.
- Billing address, where required.
- Transaction identifiers.
- Payment status.
- Invoice and receipt information.
- Refund, cancellation, or payment-failure information.
- Information required for accounting, tax, fraud prevention, and subscription administration.
Gordon uses WooCommerce and WooCommerce Subscriptions to manage plans and recurring subscriptions.
Payments are processed by the payment method and payment provider presented during checkout. Gordon does not receive or store your complete payment-card number or card security code. Payment providers may collect payment information directly and process it under their own privacy policies and legal obligations.
3.8 Communications and Support Information
When you contact Gordon or request assistance, we may collect:
- Your name.
- Your email address.
- The reason for your message.
- The contents of your message.
- Screenshots, files, examples, or technical information you provide.
- Records of our correspondence.
- Information associated with a billing or technical issue.
- Feedback, feature requests, survey responses, or testimonials you voluntarily provide.
Please do not send passwords, payment-card details, government identification numbers, or unnecessary sensitive personal information through the Contact page.
3.9 Technical and Usage Information
When you visit or use Gordon, we may automatically collect:
- IP address.
- Browser type and version.
- Device type.
- Operating system.
- Language and timezone.
- Referring page.
- Pages visited.
- Features used.
- Buttons or links selected.
- Login, logout, and session information.
- Dates and times of activity.
- Error messages.
- Server, security, and application logs.
- Cookie and session identifiers.
- General performance and diagnostic information.
We use this information to operate the service, authenticate users, maintain security, diagnose errors, enforce usage limits, and understand how Gordon is being used.
3.10 Information From Other Sources
We may receive information from:
- Publicly available business websites.
- Your connected WordPress website.
- Payment and subscription providers.
- Hosting, security, email, and infrastructure providers.
- A person who creates or manages a Gordon account on behalf of your business.
- A business owner or administrator who invites or authorizes you to use Gordon.
- Legal, fraud-prevention, or security sources where permitted by law.
4. How We Use Information
Gordon may use information to:
- Create and manage your account.
- Authenticate users and maintain login sessions.
- Create and maintain business profiles.
- Learn from public information on a business website.
- Generate article ideas.
- Generate articles and article metadata.
- Generate featured images and image descriptions.
- Grade publicly available articles.
- Personalize articles using your services, locations, calls to action, and writing preferences.
- Identify relevant internal pages and links.
- Save and display article drafts.
- Allow you to edit or regenerate content.
- Send content to your WordPress website.
- Save articles as WordPress drafts.
- Publish articles immediately.
- Schedule articles for future publication.
- Operate automatic article-generation schedules.
- Detect publishing failures and WordPress connection problems.
- Track monthly usage and plan allowances.
- Process subscriptions, renewals, cancellations, and refunds.
- Send invoices, receipts, and account notices.
- Send publishing alerts, connection alerts, usage warnings, and automatic-publishing summaries.
- Respond to support requests and technical issues.
- Diagnose errors and improve reliability.
- Prevent fraud, misuse, unauthorized access, scraping, spam, and abuse.
- Protect Gordon, our users, connected websites, and service providers.
- Measure and improve Gordon’s features, performance, and user experience.
- Create aggregated or de-identified statistics.
- Enforce our Terms of Service.
- Meet accounting, tax, legal, regulatory, and contractual requirements.
- Investigate and respond to complaints, disputes, or legal claims.
We will not use personal information for a materially different purpose without providing appropriate notice and obtaining consent where required.
5. AI Processing
Gordon uses artificial intelligence to generate article ideas, articles, metadata, featured images, article grades, recommendations, and related outputs.
To provide these features, relevant information may be sent to third-party AI service providers. Depending on the feature, this information may include:
- Business profile details.
- Article topics and instructions.
- Relevant extracts from public website pages.
- Existing article text.
- User edits or requested revisions.
- Image-generation instructions.
- Public content submitted to the Article Grader.
- Other context necessary to complete the requested generation.
Gordon does not intentionally include your Gordon account password, payment-card information, or WordPress application password in AI prompts.
Third-party AI providers process information under the commercial service terms and privacy commitments applicable to Gordon’s use of their services. Their systems may temporarily retain prompts or outputs for service operation, security, abuse prevention, or legal compliance.
Gordon does not sell customer content as a dataset and does not use customer content to train a Gordon-owned, general-purpose AI model.
AI-generated content may contain errors, omissions, or inaccurate inferences. You are responsible for reviewing articles, images, business claims, contact information, and publishing details before approving or publishing them.
6. Consent and Other Grounds for Processing
Gordon collects, uses, and discloses personal information with consent or as otherwise permitted or required by law.
Consent may be provided when you:
- Create an account.
- Submit information to Gordon.
- Connect a WordPress website.
- Request an article, image, grade, or recommendation.
- Select a publishing or scheduling action.
- Purchase or renew a subscription.
- Enable a notification.
- Accept cookies or optional analytics where consent is required.
- Contact Gordon.
Where applicable law requires another legal basis, Gordon may process information because:
- Processing is necessary to provide a service or perform a contract with you.
- Processing is necessary to comply with a legal obligation.
- Processing is necessary for Gordon’s legitimate interests, including security, service operation, fraud prevention, support, and product improvement.
- You have provided consent.
- Processing is necessary to establish, exercise, or defend a legal claim.
You may withdraw consent to optional processing at any time. Withdrawing consent does not affect processing that occurred before the withdrawal and may prevent Gordon from providing features that require the information.
7. How We Share Information
Gordon does not sell or rent personal information.
We may disclose information in the following circumstances.
7.1 Service Providers
We may provide information to companies that help us operate Gordon, including providers of:
- Website and application hosting.
- Database and file storage.
- Website backups.
- Artificial intelligence and language-model services.
- Image-generation services.
- Payment processing.
- Subscription and checkout services.
- Transactional email delivery.
- Customer support.
- Website analytics and performance measurement.
- Error monitoring and diagnostics.
- Security, fraud prevention, and abuse detection.
- Domain, network, and content-delivery services.
- Accounting, legal, insurance, and professional services.
These providers may process information only as necessary to perform services for Gordon or as otherwise permitted by their agreements and applicable law.
7.2 Your Connected WordPress Website
When you choose to send, schedule, or publish content, Gordon transmits the selected information to your connected WordPress website.
This information may include:
- Article title.
- Article content and formatting.
- Excerpt.
- URL slug.
- Category.
- Tags.
- Featured image.
- Image alt text.
- Post status.
- Publication date and time.
- Other WordPress post information required to complete your instruction.
Once information is sent to your WordPress website, it is also governed by the privacy, security, backup, hosting, user-access, and retention practices applicable to that website.
7.3 At Your Direction
We may disclose information when you ask or authorize us to do so, including when you connect a service, publish content, request support involving another provider, or instruct us to share information with another person.
7.4 Legal and Safety Reasons
We may disclose information when we reasonably believe disclosure is necessary to:
- Comply with a law, regulation, court order, subpoena, or lawful government request.
- Protect the rights, safety, property, or security of Gordon, our users, or another person.
- Investigate fraud, abuse, unauthorized access, security incidents, or violations of our Terms of Service.
- Establish, exercise, or defend legal rights.
- Respond to an emergency involving a risk of serious harm.
7.5 Business Transactions
If Gordon is involved in a proposed or completed merger, acquisition, financing, reorganization, sale of assets, insolvency, or transfer of all or part of the business, information may be disclosed to advisers, prospective parties, or a successor organization.
Any recipient will be required to handle personal information in accordance with applicable law and the commitments associated with the transaction.
7.6 Aggregated or De-identified Information
We may use or share information that has been aggregated or de-identified so that it can no longer reasonably identify an individual. For example, we may use aggregated information to understand overall article volume, feature usage, performance, or error rates.
8. Cookies and Similar Technologies
Gordon uses cookies, local storage, session identifiers, and similar technologies.
These technologies may be used to:
- Keep you logged in.
- Authenticate your account.
- Protect forms and account actions.
- Maintain security.
- Remember account or interface preferences.
- Operate WooCommerce checkout and subscription functions.
- Remember items or selections during checkout.
- Enforce Article Grader and service usage limits.
- Prevent duplicate, automated, or abusive requests.
- Diagnose errors.
- Measure website and feature usage.
- Improve website performance.
Some cookies are necessary for Gordon to function and cannot be disabled through Gordon without affecting the service.
Where optional analytics or similar technologies are used and consent is legally required, Gordon will request consent before activating them.
You can control cookies through your browser settings. Blocking necessary cookies may prevent you from logging in, subscribing, using checkout, maintaining a session, or accessing other Gordon features.
Third-party payment providers and other integrated services may place their own cookies when you interact with their features. Those cookies are governed by the third party’s privacy policy.
9. Communications
9.1 Service Communications
Gordon may send communications necessary to operate your account or provide requested services, including:
- Account verification and security notices.
- Password-reset messages.
- Subscription confirmations.
- Billing and payment notices.
- Receipts and invoices.
- Renewal, cancellation, or payment-failure notices.
- Article-generation status messages.
- Publishing-failure notices.
- WordPress connection alerts.
- Article-limit warnings.
- Automatic-publishing summaries.
- Important changes to Gordon or its legal terms.
You may not be able to opt out of communications that are necessary to administer your account, protect security, or complete a requested transaction.
9.2 Optional and Marketing Communications
Where permitted by law, Gordon may send product updates, educational content, promotions, or other optional communications.
You may unsubscribe using the unsubscribe method included in the message or by contacting Gordon. Unsubscribing from marketing messages does not stop necessary account, billing, security, or service communications.
10. Data Retention
Gordon retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining security, resolving disputes, enforcing agreements, and meeting legal, accounting, and tax obligations.
Retention depends on factors including:
- Whether your account remains active.
- Whether the information is needed to provide a feature you use.
- The sensitivity of the information.
- The reason the information was collected.
- Whether an issue, investigation, dispute, or legal hold is ongoing.
- Applicable limitation periods.
- Legal, tax, and accounting requirements.
- Backup and disaster-recovery schedules.
In general:
- Account and business-profile information is retained while your account is active and for a reasonable period after closure where required for administration, security, dispute resolution, or legal compliance.
- Articles, ideas, images, schedules, and related records are retained while available in your account or until they are deleted in accordance with Gordon’s systems and retention practices.
- WordPress connection information is retained while the connection is active or until the business or account is deleted, subject to temporary backup retention.
- Billing, invoice, transaction, and subscription records may be retained for the period required by tax, accounting, fraud-prevention, and legal obligations.
- Support communications may be retained to resolve the request, document decisions, improve support, and address later disputes.
- Security, access, and error logs are retained for a limited period appropriate to security, troubleshooting, and abuse prevention.
- Backup copies are removed or overwritten through Gordon’s regular backup lifecycle.
- Aggregated or de-identified information may be retained for longer because it does not reasonably identify an individual.
Deleting information from active systems may not immediately remove temporary copies from encrypted or access-restricted backups. Backup copies will not be restored except for disaster recovery, security, or service-continuity purposes.
11. Security
Gordon uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, collection, use, disclosure, alteration, loss, or destruction.
Depending on the information and system involved, safeguards may include:
- Encrypted website connections.
- Password hashing.
- Encryption of WordPress application passwords.
- Authentication and authorization controls.
- Account and ownership checks.
- Restricted administrative access.
- Private storage for generated images.
- Measures intended to prevent private files from being publicly indexed.
- Input validation and request limits.
- Logging, monitoring, and error detection.
- Security updates and maintenance.
- Backups and recovery procedures.
- Limiting service-provider access to information needed for their functions.
No website, transmission method, storage system, or security control is completely secure. Gordon cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.
You are responsible for:
- Choosing a strong, unique Gordon password.
- Keeping your account credentials confidential.
- Protecting access to your email account.
- Using an appropriately restricted WordPress user.
- Keeping your WordPress website and plugins secure.
- Revoking application passwords that are no longer needed.
- Reviewing users who have access to your Gordon and WordPress accounts.
- Informing Gordon promptly if you suspect unauthorized account access.
If Gordon identifies a breach of security safeguards involving personal information, we will investigate and take steps required by applicable law. This may include notifying affected individuals, regulators, or other organizations where the breach creates a legally recognized risk of significant harm.
12. Your Privacy Choices and Rights
Subject to applicable law, you may have the right to:
- Ask whether Gordon holds personal information about you.
- Request access to personal information Gordon holds about you.
- Request correction of inaccurate or incomplete information.
- Update account and business information.
- Request deletion of personal information.
- Withdraw consent to optional processing.
- Object to or request limits on certain processing.
- Request information about how your information has been used or disclosed.
- Request a portable copy of certain information where legally required and technically available.
- Unsubscribe from marketing communications.
- Change notification preferences.
- Disconnect a WordPress website.
- Revoke a WordPress application password.
- Close your Gordon account.
- Make a complaint about Gordon’s privacy practices.
Some account and business-profile information can be updated directly through Gordon.
To make a formal privacy request, visit Gordon’s Contact page, select “Other” as the reason, and begin your message with “Privacy Request.” Provide your account email address and enough detail for Gordon to understand the request.
Gordon may request additional information to verify your identity and protect your account before completing a privacy request.
We may be unable to provide or delete certain information where:
- Retention is required by law.
- The information is required to complete a transaction.
- The information is needed for security, fraud prevention, or legal claims.
- Disclosure would reveal another person’s personal information.
- The request is subject to a lawful exception.
- The information has been de-identified.
- The information is retained temporarily in a protected backup.
If Gordon refuses all or part of a request, we will explain the reason where required by law.
13. Information About Other People
You may have the ability to provide information about employees, customers, clients, patients, students, members, contractors, or other people through a business profile, article instruction, website, support request, or generated article.
You must ensure that:
- You have authority to provide the information.
- The information was collected lawfully.
- Providing it to Gordon is consistent with the notice and consent given to the individual.
- The information is relevant and reasonably necessary.
- Sensitive information is not included unless legally authorized and genuinely required.
- Generated content does not disclose private information without permission.
Gordon is not intended to store customer lists, patient records, student records, employee files, financial records, government identification numbers, medical records, or other databases of sensitive personal information.
14. Public and Published Content
Information you publish to a WordPress website may become publicly available and may be:
- Viewed by anyone.
- Indexed by search engines.
- Stored by web archives.
- Shared on social media.
- Copied or republished by third parties.
- Used by search engines or AI systems.
- Retained by website backups or caching providers.
Gordon cannot control information after it has been published to your website or otherwise made public.
Deleting an article from Gordon does not delete a version already published to WordPress. Deleting a WordPress post may not remove copies held by search engines, archives, caches, backups, or third parties.
15. International Processing
Gordon and its service providers may process or store information in Canada, the United States, or other countries where service providers operate.
Privacy and data-protection laws in those countries may differ from the laws in your location. Information processed outside Canada may be accessible to courts, law-enforcement agencies, national-security authorities, or regulators in that jurisdiction where legally authorized.
Where required, Gordon uses contractual, organizational, or technical measures intended to protect information transferred to a service provider in another country.
16. Children’s Privacy
Gordon is designed for businesses, business owners, professionals, agencies, and other commercial users. It is not directed to children under 18.
Gordon does not knowingly permit children under 18 to create accounts or purchase subscriptions.
If you believe a child has provided personal information to Gordon without appropriate authorization, submit a message through Gordon’s Contact page so the information can be reviewed and removed where appropriate.
Businesses that provide services to children must not submit identifying information about a child to Gordon unless they have the legal authority and consent required to do so.
17. Third-Party Websites and Services
Gordon may contain links to WordPress websites, payment providers, public business websites, source pages, or other third-party services.
Gordon is not responsible for the privacy, security, availability, content, or practices of a third party. You should review the third party’s privacy policy before providing information or using its services.
The inclusion of a link does not mean Gordon controls or endorses the third party’s privacy practices.
18. Changes to This Privacy Policy
Gordon may update this Privacy Policy to reflect:
- New or changed features.
- Changes to information practices.
- Changes to service providers.
- Security or operational developments.
- Legal or regulatory requirements.
- Improvements in how the policy explains Gordon’s practices.
The updated policy will be posted on Gordon with a revised “Last updated” date.
Where a change materially affects how personal information is collected, used, or disclosed, Gordon will provide additional notice or request consent where required by law.
Your continued use of Gordon after an updated Privacy Policy becomes effective means that the updated policy applies to your subsequent use of the service, subject to any consent requirements under applicable law.
19. Contacting Gordon About Privacy
Gordon has designated the Gordon Privacy Officer as the person responsible for overseeing this Privacy Policy and Gordon’s personal-information practices.
For questions, access requests, correction requests, deletion requests, consent withdrawals, or concerns about Gordon’s privacy practices, contact us at:
Email: hello@usegordon.com
Please use the subject line “Privacy Request” and include:
- Your name.
- The email address associated with your Gordon account.
- The business connected to the request, where applicable.
- A clear description of your question or request.
- Any details reasonably needed to locate the relevant information.
You may also contact us through the Contact page available on Gordon’s website.
Gordon will review privacy questions and concerns fairly and will respond within a reasonable period.
We encourage you to contact Gordon first so we have an opportunity to understand and address your concern. You may also have the right to seek guidance from the privacy authority responsible for your location.