Your account data is private to the service. Content you publish on a contact card, link page, about page, or storefront is intentionally public and may be indexed or reshared.
1. Who is responsible for the data
Pubtact, operated from India, is responsible for the personal data described in this policy. Privacy questions and requests can be sent to hello@pubtact.com.
2. Data we collect
- Account data: name, email address, optional phone number and profile image, authentication method, and a securely hashed password when you use email sign-in.
- Page content: profile, contact, link, social, media, location, offer, testimonial, lead-form, and other block content you choose to create.
- Authentication data: session identifiers and, when you choose social sign-in, the provider identifier and profile information the provider returns.
- Product and analytics data: page views, interactions, saves, lead submissions, browser and device context, source URL, campaign parameters, and anonymous visitor and session identifiers.
- Payment data: plan, order and payment references, amount, currency, status, timestamps, and limited purchaser details. Full payment credentials are handled by the payment provider.
- Support and security data: messages you send, request metadata, and records needed to diagnose abuse, reliability, or security issues.
3. How we use data
- create and secure accounts, authenticate sessions, and provide the editor and dashboard;
- store, publish, render, and share the pages you create;
- count page activity and show owners useful analytics;
- receive leads and deliver the information to the page owner;
- process payments, activate entitlements, prevent duplicate or fraudulent transactions, and handle refunds;
- answer support requests, investigate misuse, maintain reliability, and comply with valid legal obligations;
- understand aggregated product usage and improve Pubtact.
4. Public pages and leads
Publishing makes the selected page content available at a public URL. Do not publish information you do not want visitors, search engines, or downstream services to access.
When a visitor submits a lead form, the page owner receives the submitted information. Page owners are independently responsible for using lead information lawfully and for providing any notice their own business requires.
5. Legal grounds and choices
Where a legal ground is required, processing may be necessary to perform our contract with you, protect legitimate interests such as security and service improvement, comply with law, or act on consent where the law requires consent. You can choose not to provide optional data, though some features may then be unavailable.
6. When data is shared
We share only the data reasonably needed with service providers that support hosting and storage, authentication, payment processing, communications, security, and product operations. We may also disclose data when required by valid legal process, to protect people or the service, or as part of a business reorganization with appropriate safeguards.
On pubtact.com we use Google Analytics to measure site traffic, including visits to pages published on a pubtact.com address. It receives page paths, referrer and campaign parameters, and coarse device and location context, and it sets its own cookies — see the Cookie Policy. The analytics shown to a page owner are counted by Pubtact directly and are not sourced from it.
We also use PostHog on pubtact.com to measure how the product is used — which steps of building and publishing a page are completed, and where people stop. It receives page paths, referrer and campaign parameters, coarse device and location context, and named product events, and it sets its own storage — see the Cookie Policy. While you are signed in, those events carry your account identifier so a journey can be followed end to end; your email address and name are not sent to it. PostHog also records a replay of the session and captures errors the site throws. What you type is masked before the recording leaves your browser — text boxes, password fields and dropdowns are replaced with asterisks — and request headers and bodies are not recorded; text already displayed on the page, including the preview of a page you are building, is captured.
We do not sell personal data or use it for third-party behavioural advertising.
7. International processing
Pubtact and its service providers may process data in countries other than yours. Where applicable law requires a transfer mechanism or additional safeguard, we will use an appropriate mechanism for the transfer.
8. Retention and deletion
Account and page data is generally retained while your account is active. You can delete your account in account settings. Active page, analytics, lead, and identity data linked to the account is then removed or marked for deletion; uploaded files may remain only for limited backup and cleanup cycles.
Session records expire after seven days. Transaction and ledger records may be retained after account deletion in de-identified form when needed for accounting, fraud prevention, disputes, refunds, or law. Support and security records are kept only as long as reasonably needed for those purposes.
9. Your privacy rights
Depending on where you live and whether a law applies to Pubtact's processing, you may have rights to access, correct, delete, restrict, object, withdraw consent, or receive a portable copy of certain data. You may also have a right to complain to a privacy authority.
Send a request from your account email to hello@pubtact.com. We may need to verify identity and will respond within the period required by applicable law. Official references include India's DPDP materials, the EU GDPR, and California privacy guidance.
10. Security
Pubtact uses safeguards including password hashing, access controls, HTTPS in production, restricted session cookies, signed payment verification, and deletion workflows. No online service can guarantee absolute security. Report a suspected vulnerability to hello@pubtact.com and do not access data beyond what is necessary to demonstrate the issue.
11. Children
Pubtact is not designed for children to use independently. If you believe a child provided personal data without appropriate authorization, contact us so we can review and remove it where required.
12. Cookies and changes
The Cookie Policy lists the browser storage currently used by Pubtact. We may update this policy when the product, providers, or legal requirements change. Material changes will receive additional notice where reasonably appropriate.