Last updated: August 20, 2026
PubCue™ AI, a product of Johns Technology Arts, LLC ("Company," "we," "us," or "our"), operates the PubCue AI platform ("the Service"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website at pubcue.com and related services. By using the Service, you consent to the practices described in this policy. This policy applies to all users of the Service, including visitors, free trial users, and paid subscribers.
We collect the following categories of information:
Account Information: Name, email address, password (hashed), profile photo, timezone, and organization details provided during registration.
Payment Information: Billing name, address, and payment method details. Payment processing is handled by Stripe, Inc. We do not store your full credit card number on our servers.
Usage Data: Pages visited, features used, scheduling patterns, content creation activity, IP address, browser type and version, device information, operating system, and referral URLs.
User Content: Posts, media files (images, videos), drafts, templates, hashtag sets, link-in-bio pages, persona configurations, and any other content you create or upload to the Service.
Device Information: For fraud prevention, we may collect a hashed device fingerprint based on browser characteristics (user agent, screen resolution, timezone, language, and platform). This fingerprint is stored as a one-way hash and cannot be used to identify your specific device.
Legal Compliance Data: We record when you accept our Terms of Service, including the timestamp of acceptance and the version of Terms accepted. This data is stored on your user account to verify your agreement to the current Terms and to prompt re-acceptance when the Terms are materially updated.
When you connect social media accounts to PubCue AI, we collect and store platform-specific data necessary to provide the Service. This may include:
X (formerly Twitter): Profile image, display name, username, profile ID, OAuth access tokens, posted content, and engagement data (likes, retweets, replies, impressions).
Facebook & Instagram (Meta): Profile image, display name, page/profile ID, access tokens, posted content, and engagement data (likes, comments, shares, reach).
LinkedIn: Profile image, display name, profile ID, access tokens, posted content, and engagement data.
TikTok: Profile image, display name, username, profile ID, access tokens, posted content, and engagement data (views, likes, comments, shares).
YouTube: PubCue uses YouTube API Services to publish to and manage the YouTube channels you connect. We collect and store your channel name, profile image, channel ID, access tokens, the videos you publish through PubCue, and engagement data. For the comment inbox, we also store the comment's ID and text, the commenting viewer's public display name and avatar, and the ID, title, and thumbnail of the video the comment was left on. We do not store the commenting viewer's YouTube channel ID. Comment data obtained from the YouTube API is retained for no more than 30 days from the date the comment was posted, after which it is automatically deleted from PubCue, in line with the YouTube API Services Developer Policies. Channel and video statistics obtained from the YouTube API, and the scores PubCue calculates from them, are retained for up to 36 months and are then deleted automatically. If you disconnect a YouTube channel or revoke PubCue's access to it, the statistics we hold for that channel are deleted within 30 days. Use of YouTube data is subject to the Google Privacy Policy and the YouTube Terms of Service. You may revoke access via Google Security Settings.
Pinterest: Profile image, display name, username, profile ID, access tokens, boards, posted pins, and engagement data.
Bluesky: Profile image, display name, handle, DID, app password (encrypted), posted content, and engagement data.
Fanvue: Profile image, display name, handle, creator UUID, OAuth access tokens, posted content, engagement data (likes, comments, tips), subscriber lists, chat conversations, and earnings data. Agency accounts may include data for multiple managed creators.
Other Platforms: Similar data categories as described above for any additional platforms we support.
All social media access tokens and credentials are encrypted using AES-256-GCM encryption before storage.
PubCue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the features you connected your Google or YouTube account for, namely publishing videos you schedule, confirming those videos published, showing your channel identity, and reading, replying to, and moderating comments on your own videos. We do not transfer Google user data to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition. We do not use Google user data for advertising, and we do not sell it. We do not allow humans to read your Google user data except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized. You can revoke PubCue's access to your Google account at any time from your Google Account permissions page, and you can disconnect a YouTube channel from within PubCue at any time.
We use your information to: (a) provide, operate, maintain, and improve the Service; (b) process your transactions and manage your subscription; (c) schedule and publish your content to connected social media platforms; (d) generate AI-powered content suggestions and rewrites; (e) provide analytics and performance insights for your social media content; (f) aggregate and display engagement data (comments, mentions, and messages) in the Unified Inbox; (g) send transactional emails (account verification, password resets, billing receipts); (h) provide customer support; (i) detect, prevent, and address fraud, abuse, and security issues; (j) comply with legal obligations; and (k) communicate service updates and changes that affect your account.
Providing AI features. When you use our AI-powered features (content generation, rewriting, persona style engine, AI inbox reply drafts), your prompts and relevant persona context are sent to our AI provider (xAI) for processing. For AI inbox reply features, recent conversation context (including messages from your audience) is sent to the AI provider to generate contextually appropriate draft responses. Prompts are processed per-request, and our AI providers are not permitted to use your content to train their own models. AI-generated outputs are treated as your User Content. Your posting history and persona configurations may be used to personalize AI suggestions within your account only. Conversations processed by AI features may also be scanned locally (on our servers, not sent to third parties) for sensitive content detection to flag conversations that may require human review.
Training PubCue's own AI models.With your permission, we use a defined slice of your product activity to train AI models that PubCue itself owns, so our AI gets better at drafting in your voice and learning what performs. What we collect for this purpose, when your AI Training setting is on: the prompt and settings behind an AI draft, the draft our AI produced, the edited or final version you saved or published, and a performance score PubCue computes for the resulting post. What we never collect for this purpose: your media files, inbox conversations and messages from your audience, subscriber lists, earnings data, payment information, access tokens, or data from a connected platform whose developer terms prohibit AI training use (including YouTube data, in line with our Limited Use commitments in Section 4, and X API content). Before training, we remove account identifiers and contact details. We never sell this data, never share it except with service providers acting on our instructions, never let third-party AI providers train their own models on it, and never expose one customer's content to another.
Your control.The "Help improve PubCue's AI" setting lives in Settings under Security and Privacy. It is on by default on every plan, including the Agency plan. This is disclosed when you create your account, and again on the screen where you accept our Terms of Service, so you can turn it off before you continue. For an organization, only an organization owner can change it, and the change applies to the whole organization. Turning it off is one click: collection stops immediately, and the training data already stored from your account is deleted from our active systems within 30 days (backup copies are purged on the cycle described in Section 9). Turning it off never affects your features, pricing, or service quality. One honest limitation: models trained while the setting was on cannot be retroactively unwound, because trained models do not contain retrievable copies of the data used to train them. Deleting your account also stops collection and deletes stored training data on the same schedule.
Agency and client content. If your organization manages brands or content on behalf of clients, the setting is on by default there too, and the organization owner is responsible for deciding whether it stays on. Leaving it on is a representation that you hold the rights and client permissions needed for that content to be used this way, as described in Section 39 of our Terms of Service. We show that representation, and the setting itself, on the Terms acceptance screen for Agency-plan organizations.
Legal bases and your rights. Where the GDPR or UK GDPR applies, we process training data on the basis of our legitimate interests in developing and improving the Service's AI features (Article 6(1)(f)), balanced in your favor through de-identification, strict internal-only use, transparency, and an always-available opt-out; where applicable law requires consent for this processing, your AI Training setting operates as that consent and you may withdraw it at any time with effect for the future. We do not sell personal information, and we do not "share" training data for cross-context behavioral advertising within the meaning of the CCPA/CPRA. You can exercise the opt-out directly in Settings, or by contacting privacy@pubcue.com, and all of the rights described in Section 10 (access, correction, deletion, export, restriction, objection) apply to training data.
We do not sell, rent, or trade your personal information to third parties. We share data only with the following categories of service providers, and only as necessary to provide the Service:
Social Media Platforms: Content and account data shared with platforms you connect, for the purpose of publishing your scheduled content.
Payment Processing: Stripe, Inc. processes all payments. See Stripe's Privacy Policy.
Email Services: Resend handles transactional emails (account verification, password resets, billing notifications).
Cloud Infrastructure: Our service runs on Vercel (hosting), Supabase (database), and Cloudflare (media storage and CDN).
AI Processing: xAI processes AI content generation requests. Prompts are sent per-request and are not stored by the AI provider for training purposes.
Legal Requirements: We may disclose information when required by law, court order, subpoena, or to protect our rights, safety, or property.
We implement industry-standard security measures to protect your data, including: (a) encryption of data in transit using TLS/SSL; (b) encryption of social media tokens and credentials using AES-256-GCM; (c) secure password hashing using bcrypt; (d) role-based access controls and multi-tenant data isolation; (e) regular security reviews. While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will remove your personal data within 30 days, except: (a) anonymized, aggregated analytics data that cannot identify you may be retained for service improvement; (b) data we are required to retain by law; (c) backup copies which are automatically purged on a rolling cycle; and (d) AI training data is retained only while your AI Training setting is enabled and your account is active, and is deleted from active systems within 30 days after you turn the setting off or delete your account. Published content on third-party platforms is governed by those platforms' retention policies and is not affected by your PubCue AI account deletion.
Depending on your location, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Export: Download a portable copy of your data in JSON format at any time from Settings. You may also contact us to request a copy.
Restrict Processing: Request that we limit how we use your data.
Opt Out: Opt out of marketing communications at any time.
Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, contact us at privacy@pubcue.com. Data exports are available instantly via your account Settings. For all other requests, we will respond within 30 days.
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases: (a) performance of our contract with you (providing the Service); (b) your consent (where explicitly given); (c) our legitimate interests (improving the Service, preventing fraud); and (d) compliance with legal obligations. Your data may be transferred to the United States. We use appropriate safeguards, including standard contractual clauses, for international data transfers. You have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale of personal information (we do not sell personal information); and (d) not be discriminated against for exercising your privacy rights. To exercise these rights, contact us at privacy@pubcue.com.
We use the following types of cookies: (a) Essential Cookies for authentication, session management, and security (these are required for the Service to function); (b) Preference Cookies to remember your settings and preferences (timezone, theme, sidebar state). We do not use third-party advertising cookies or tracking pixels. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.
If you create a link-in-bio page, certain information you provide will be publicly accessible to anyone who visits your page URL. This may include your display name, bio text, profile image, social media links, and any custom links you add. Analytics data about page visits (view counts, click counts) is collected and visible only to you. We do not share link-in-bio analytics with third parties.
The Service, including link-in-bio pages, may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party services you access through links on our platform.
In the event of a data breach that compromises your personal information, we will notify affected users via email within 72 hours of discovering the breach, in accordance with applicable laws. Our notification will include a description of the breach, the types of data affected, steps we are taking to address the breach, and recommendations for actions you can take to protect yourself.
Some browsers offer a "Do Not Track" (DNT) setting. Since we do not use third-party advertising trackers or cross-site tracking, our Service operates the same way regardless of your DNT setting.
PubCue AI is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If we discover that we have collected data from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at privacy@pubcue.com.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service at least 30 days before they take effect. The "Last updated" date at the top of this page indicates the most recent revision. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
For privacy inquiries, data requests, or complaints, contact our privacy team at privacy@pubcue.com.