Privacy Policy

Information we collect

• Account information — your name and email address when you’re set up with a dashboard account.
• Your website content — the text, images and files you manage through the CMS for your own site.
• Usage information — basic logs needed to operate and secure the service.
• Enquiries — details you send us through our contact or “Get started” forms.
• Google account data — only if you choose to connect your Google account to the analytics & SEO features. With your permission we access, in read-only form:
  • Google Analytics (analytics.readonly) — your website’s visitor statistics.
  • Google Search Console (webmasters.readonly) — how your site performs in Google Search.
  • Your Google account email, to show which account is connected.
• Facebook and Instagram data — only if you choose to connect your Facebook Page and the Instagram professional account linked to it. With your permission we access:
  • The list of Facebook Pages you manage, so you can choose which one is your business.
  • The name and ID of the Page you choose, and the username and ID of its linked Instagram account.
  • Permission to publish the posts you compose in Pubd to that Page and Instagram account.
  • Messages people send to that Page and Instagram account, including the sender’s name and the text of the message, so they appear in your Pubd inbox and you can reply.
  • Permission to subscribe your Page to our notifications, which is what allows a message to reach your inbox at all.

How we use your information

We use the information above to provide and improve the service: to run your dashboard, publish and host your website, respond to enquiries, and — where you’ve connected Google — to show your traffic and search performance and generate plain-language suggestions to help your site get found.

How we use Google user data (Limited Use)

Pubd’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Analytics and Search Console data only to provide the analytics and SEO features you see in your dashboard.
• We do not sell this data, and we do not use it for advertising.
• We do not transfer it to others except as needed to provide the service, with your consent, or as required by law.
• No human reads your Google data except where you give consent, for security or to resolve a problem, or where required by law.
• To produce the plain-language suggestions, summarised metrics are sent to our AI provider (Anthropic) purely to generate the on-screen insights. This data is not used to develop, improve or train generalised AI/ML models.

How we use Facebook and Instagram data

• We publish only the posts you compose and send yourself, to the accounts you tick, at the moment you press Share. We never post on your behalf otherwise.
• We show you the messages sent to your Page and Instagram account, and send the replies you write. We do not message anyone who has not messaged you first.
• We do not sell this data, and we do not use it for advertising.
• We do not transfer it to others except as needed to provide the service, with your consent, or as required by law.
• No human at Pubd reads your messages except where you ask us to, for security, or to resolve a problem you have reported.
• Your data is never used to develop, improve or train generalised AI or machine-learning models. Where you ask Pubd to draft a caption, the photos and the topic you supply are sent to our AI provider (Anthropic) purely to write that caption.

How we store and protect it

Data is held in our database (Supabase) with access controls. Where we store a Google, Facebook or Instagram connection, the access tokens are encrypted at restand are never sent to your browser. Our services run on reputable infrastructure (Vercel and Netlify). No method of storage is perfectly secure, but we take reasonable steps to protect your information.

Service providers

We share information only with the providers that help us run the service, under their own terms: Google (analytics/search data you connect), Meta (the Facebook Page and Instagram account you connect), Supabase (database & storage), Vercel and Netlify (hosting), Resend (transactional and newsletter email), and Anthropic (AI used to generate dashboard insights). We don’t sell your information to anyone.

Your choices and data deletion

• You can disconnect Google at any time from your dashboard — this deletes the stored connection and token.
• You can also revoke Pubd’s access directly at myaccount.google.com/permissions.
• You can disconnect Facebook and Instagram at any time from your dashboard — this deletes the stored tokens and stops your Page sending us any further messages.
• You can also remove Pubd’s access directly at Facebook’s Business Integrations settings.
• Disconnecting does not erase the messages already in your inbox. Those are your business’s correspondence, kept for the same reason your website enquiries are. Email us if you want them deleted and we’ll action it.
• To access or delete your account data, email us and we’ll action it.

Cookies

We use only the cookies needed to keep you signed in to the dashboard. The pubd.io marketing site does not use advertising or tracking cookies.

Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above when we do.

Contact

Questions about this policy or your data? Email hello@pubd.io.