Privacy Policy

Last Updated: February 17, 2026

1. Introduction

PublishPuffin operates the PublishPuffin platform. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2. Information We Collect

Account Information: Business name, email, domain, contact person, billing information.

Service Configuration: Brand voice profiles, regional knowledge base data, content preferences, WordPress credentials (encrypted), social media tokens (encrypted).

Usage Data: Pipeline execution logs, performance metrics, console usage analytics, error logs.

Website Visitors: Standard web analytics (Google Analytics 4), contact form submissions, cookies.

3. How We Use Information

Service delivery, service improvement, operational communications, support, and anonymized analytics.

4. Data Security

All data encrypted at rest (AES-256 via AWS) and in transit (TLS 1.2+). Tenant data isolated via schema-per-tenant architecture. API credentials stored in AWS Secrets Manager. Access limited to least-privilege IAM roles.

5. Your Rights

Depending on your jurisdiction, you may request access, correction, deletion, export, restriction, or object to data processing. Contact privacy@publishpuffin.com.

6. Data Retention

Tenant configuration: duration of service plus 30 days. Published content: permanent on your WordPress site. LLM logs: 30 days plus 7-year archive. Backups: 365 days.

7. International Data Transfers

Data is processed and stored in the United States (AWS us-east-2, Ohio).

Contact

For privacy inquiries: privacy@publishpuffin.com