Privacy Policy

The controller responsible for this website and for personal data processed through a direct publyc account is:

publyc
Inh. Leon Sandner
Marsstraße 20
80335 Munich
Germany

E-Mail: hello@publyc.app

Where an agency or organization uses publyc for its own clients, that customer generally determines why the client data is processed and publyc processes it on the customer's behalf.

This Privacy Policy applies to both the publyc consumer product and publyc agency workspaces. It explains how we handle personal data when you visit our website, create an account, contact us, connect LinkedIn or WhatsApp, upload material, or use publyc's AI-assisted features. publyc is designed for GDPR-compliant use.

• Website data: IP address, browser and device information, requested pages, timestamps, technical logs, and necessary cookie or session data.
• Account data: name, email address, authentication and session data, account status, workspace membership, and settings.
• Communication data: messages, support emails, uploaded files, images, audio, transcripts, call notes, and feedback.
• LinkedIn data: profile information, profile URLs, posts, drafts, publishing choices and status, analytics, and connection data.
• Product data: content ideas, personas, preferences, strategy, saved context, generated outputs, edits, and usage history.
• Billing data: plan information, billing contact details, invoices, payment status, and payment processor references. We do not store full payment card numbers ourselves.

• To provide accounts, agency workspaces, support, security, and the features you request. The legal basis is Art. 6(1)(b) GDPR where processing is necessary for our contract with you.
• To generate, edit, schedule, publish, and analyze LinkedIn content based on your instructions and connected accounts. The legal basis is Art. 6(1)(b) GDPR.
• To keep publyc secure, prevent abuse, debug errors, and improve the service. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.
• To send product and account communications, and marketing where permitted. The legal basis is Art. 6(1)(b), Art. 6(1)(f), or your consent under Art. 6(1)(a) GDPR, depending on the message.
• To meet legal, tax, accounting, and regulatory obligations. The legal basis is Art. 6(1)(c) GDPR.

publyc uses AI systems to understand instructions, summarize context, draft and edit content, interpret analytics, transcribe material, and operate the conversational product experience. We process the content and context needed to provide those features.

publyc does not use customer data to train AI models. Specialist AI and transcription providers may process limited data where needed to provide a requested feature. We do not sell customer data.

publyc never asks for or stores your LinkedIn password. You connect directly through LinkedIn, publishing uses LinkedIn's official API, and connection credentials are encrypted. You can disconnect LinkedIn at any time.

If you use publyc through WhatsApp or another messaging service, your messages are also processed by the relevant messaging providers under their own terms and privacy information.

Customer data stored in publyc's databases and file storage is hosted on EU servers. Access to customer material is restricted to the relevant account or agency workspace. These permissions are reinforced by database-level row security.

We use technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. No internet-based service can guarantee perfect security, but we work continuously to keep publyc secure.

Specialist providers help us operate hosting, database and storage, authentication, AI, transcription, messaging, email, analytics, support, security, and payments. They process only the data needed for their services and, where required, work under data processing terms.

We may also disclose data where required by law, to protect our rights or users, to prevent abuse, or in connection with a business transfer.

Some specialist providers may process limited personal data outside the European Economic Area. Where this happens, we rely on safeguards permitted by GDPR, such as EU adequacy decisions or Standard Contractual Clauses.

We keep personal data for as long as needed to provide publyc, maintain account history and security, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose.

Your publyc account data and customer material are fully exportable on request in a structured, readable format. You can also ask us to delete your account or specific personal data, unless we are legally required or permitted to keep it. Contact hello@publyc.app.

Under GDPR, you may have the right to request access, rectification, erasure, restriction, portability, and information about your personal data. You may also object to processing based on legitimate interests and withdraw consent at any time with effect for the future.

To exercise your rights, contact hello@publyc.app. You also have the right to lodge a complaint with a data protection supervisory authority. We may update this Privacy Policy as publyc, our providers, or legal requirements change. The version published here is the current version.