Privacy Policy

1. Introduction

This Privacy Policy explains how Multimedia Publishing LLC ("PublisherKit," "we," "us," or "our") collects, uses, discloses, and safeguards personal data when you visit our website at publisherkit.io or use our platform and services (collectively, the "Service").

Multimedia Publishing LLC
16192 Coastal Highway
Lewes, DE 19958
United States

By using PublisherKit, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Roles and Responsibilities

PublisherKit operates in two distinct data processing roles:

• As a Data Controller: When we collect and process your personal data as a PublisherKit user (your account information, billing data, usage data, and support communications), we are the data controller and this Privacy Policy governs that processing.
• As a Data Processor: When you use PublisherKit to collect, store, and manage personal data of your readers, subscribers, or contacts, we act as a data processor on your behalf. You, as the PublisherKit user, are the data controller for your contacts' data. You are responsible for providing your own privacy notices to your contacts and for ensuring that their data is collected and processed lawfully.

3. Data We Collect

3.1 Information You Provide

• Account Data — Your name, email address, and password when you create an account.
• Billing Data — Payment method details processed securely by our payment provider, Stripe. We do not store full credit card numbers on our systems.
• Content Data — Emails, landing pages, funnels, contact lists, workflow configurations, and other content you create within the platform.
• Contact Data — Information about your readers, subscribers, and contacts that you import into or collect through the Service, including names, email addresses, and any custom fields you create.
• Support Data — Any information you provide when contacting our support team, including email correspondence and chat transcripts.
• Communication Preferences — Your preferences for receiving marketing communications from us.

3.2 Information Collected Automatically

• Usage Data — Pages visited, features used, timestamps, click patterns, and interaction data within the platform.
• Device Data — IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Log Data — Server logs recording requests, referring URLs, and system activity.
• Cookies and Similar Technologies — See Section 7 below.

3.3 Data Generated by AI Features

When you use PublisherKit's AI-powered features, additional data may be collected and processed:

• AI Conversation Data — The content of conversations between AI agents and your readers or prospects, including messages sent and received, timestamps, and conversation outcomes.
• AI Content Generation Data — Prompts, inputs, and configuration data you provide to AI content generation tools, and the resulting generated content.
• AI Performance Data — Aggregated and anonymized metrics related to AI feature usage, response quality, and conversation outcomes, used solely to improve the Service.

We do not use the content of your AI conversations or your contacts' personal data to train AI models. However, we may review AI conversation data in aggregated or anonymized form to improve AI agent instructions, prompts, and response quality within the Service. This review is conducted solely to improve the performance and accuracy of PublisherKit's AI features for all users and does not involve sharing identifiable personal data with third-party AI providers for model training purposes.

4. How We Use Your Data

4.1 To Provide and Operate the Service

• Creating and managing your account.
• Processing transactions and managing your subscription.
• Delivering the features of the platform, including email delivery, workflow execution, and AI-powered tools.
• Providing customer support.

4.2 To Improve and Develop the Service

• Analyzing usage patterns to improve features and user experience.
• Identifying and fixing technical issues.
• Developing new features and services.
• Conducting aggregated, anonymized analysis of platform performance.

4.3 To Communicate With You

• Sending transactional emails related to your account (e.g., billing confirmations, password resets, security alerts).
• Sending product updates, feature announcements, and tips for using the platform.
• Sending promotional emails about PublisherKit (you can opt out at any time via the unsubscribe link in any marketing email or by contacting us).

4.4 To Ensure Security and Compliance

• Detecting, preventing, and addressing fraud, abuse, and security threats.
• Enforcing our Terms of Service and Acceptable Use Policy.
• Complying with legal obligations.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Performance of a Contract — Processing necessary to provide the Service you have subscribed to (account management, billing, feature delivery).
• Legitimate Interests — Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and sending relevant product communications, where these interests are not overridden by your data protection rights.
• Consent — Where you have given explicit consent, such as for marketing communications or the use of non-essential cookies. You may withdraw consent at any time.
• Legal Obligation — Processing necessary to comply with applicable laws and regulations.

6. Data Sharing and Third-Party Services

We share your data only as necessary to operate the Service and as described below. We do not sell your personal data to third parties.

6.1 Service Providers (Sub-Processors)

We use trusted third-party service providers to help us operate the Service, including:

• Payment Processing — Stripe processes your payment data. See Stripe's Privacy Policy.
• Cloud Infrastructure and Platform Providers — We use third-party cloud infrastructure and platform services to host and deliver the Service, including data storage, email delivery, workflow execution, and CRM functionality.
• AI Service Providers — We use third-party AI model providers to power AI conversation agents and content generation features. AI providers process data in accordance with our data processing agreements and do not use your data to train their models.
• Analytics — We use analytics services (such as Google Analytics) to understand website traffic and usage patterns. See Google Analytics' Privacy Policy.
• Communication Tools — We use third-party services for transactional email delivery and support communications.

A current list of our sub-processors is available at publisherkit.io/subprocessors and is updated when changes occur. If you are a user subject to GDPR, we will notify you of material changes to our sub-processor list.

6.2 Legal Requirements

We may disclose your data if required to do so by law or in response to valid legal process, such as a court order or subpoena, or to protect the rights, property, or safety of PublisherKit, our users, or others.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience.

7.1 Types of Cookies

• Strictly Necessary Cookies — Required for the platform to function (authentication, session management, security). These cannot be disabled.
• Analytics Cookies — Help us understand how visitors interact with our website and platform (e.g., page views, feature usage). These are only set with your consent.
• Marketing Cookies — Used to deliver relevant advertisements and track campaign effectiveness. These are only set with your consent.

7.2 Managing Cookies

You can manage your cookie preferences through our cookie consent banner when you first visit our site. You can also update your preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

7.3 Do Not Track

Our website does not currently respond to "Do Not Track" browser signals. However, you can control tracking through your cookie preferences as described above.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account Data — Retained for the duration of your active subscription. Upon account cancellation, personal data is deleted within 30 days, except where retention is required by law.
• Billing Data — Retained for the period required by applicable tax and financial record-keeping laws (typically 7 years for transaction records).
• Content Data and Contact Data — Retained for the duration of your active subscription. Upon account cancellation, deleted within 30 days.
• AI Conversation Data — Retained for the duration of your active subscription for your review and management. Upon account cancellation, deleted within 30 days.
• Usage and Analytics Data — Retained in aggregated, anonymized form for up to 24 months for service improvement purposes.
• Support Data — Retained for up to 24 months after your last support interaction, or longer if necessary for ongoing disputes.

9. Your Rights

9.1 Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your personal data ("right to be forgotten").
• Restriction — Request limitation of processing of your data.
• Portability — Receive your data in a structured, commonly used, machine-readable format.
• Objection — Object to the processing of your data for certain purposes, including direct marketing.
• Withdraw Consent — Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing performed before withdrawal.
• Lodge a Complaint — You have the right to lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, contact us at privacy@publisherkit.io. We will respond within 30 days.

9.2 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete — You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct — You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at privacy@publisherkit.io or by mail at the address listed in Section 1. We will verify your identity before fulfilling your request and will respond within 45 days.

9.3 Rights Under Other Jurisdictions

If you are located in another jurisdiction with applicable data protection laws (such as Brazil's LGPD, Canada's PIPEDA, or Australia's Privacy Act), you may have similar rights. Contact us at privacy@publisherkit.io to exercise your rights, and we will respond in accordance with applicable law.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit using TLS/SSL.
• Encryption of data at rest.
• Regular security assessments and monitoring.
• Access controls limiting data access to authorized personnel.
• Secure authentication mechanisms.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. If you become aware of a security vulnerability or breach, please notify us immediately at hello@publisherkit.io.

11. International Data Transfers

Your data may be transferred to, stored, and processed in countries outside your country of residence, including the United States, where our company is registered, and other countries where our service providers operate.

Where personal data is transferred from the EEA, UK, or Switzerland to a country that does not provide an adequate level of data protection, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data processing agreements with our sub-processors that include appropriate transfer mechanisms.
• Other legally recognized transfer mechanisms where applicable.

12. Children's Privacy

PublisherKit is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete such data. If you believe that a child under 16 has provided us with personal data, please contact us at privacy@publisherkit.io.

13. Your Contacts' Privacy (Data Processor Role)

When you use PublisherKit to collect and manage your readers' and subscribers' personal data, the following applies:

• You are the data controller and are responsible for providing your contacts with appropriate privacy notices.
• We process your contacts' data solely on your behalf and in accordance with your instructions.
• We do not use your contacts' data for our own marketing purposes or share it with third parties for AI model training. We may review AI conversation data in aggregated or anonymized form to improve AI feature performance across the platform.
• We will assist you in responding to data subject requests from your contacts, to the extent technically feasible.
• Upon termination of your account, your contacts' data will be deleted in accordance with the retention schedule in Section 8.
• If you require a formal Data Processing Agreement (DPA) for GDPR compliance, contact us at hello@publisherkit.io.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last updated" date.
• Sending an email notification to the address associated with your account for material changes.

We encourage you to review this page periodically. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, contact us at:

Multimedia Publishing LLC
16192 Coastal Highway
Lewes, DE 19958
United States

General inquiries: hello@publisherkit.io
Privacy and data rights: privacy@publisherkit.io