🛡️ Privacy Policy

1. Introduction

Publisha.ai (“Publisha”, “the Service”) is a digital content and campaign management platform operated by Laivisson OÜ, a company registered in Estonia.

This Privacy Policy describes how we collect, use, and protect your personal information when you visit or use Publisha.ai.

By using our website or creating an account, you agree to the terms of this Privacy Policy.

2. Data We Collect

We collect and process the following categories of data:

• Account Information: Name, email address, password, and company/organization details.
• Usage Information: IP address, browser type, device details, and site interactions.
• Content Data: Campaigns, uploads, and content generated through Publisha.ai.
• Payment Data: Processed securely by third-party providers such as Stripe.
• Support Communication: Messages or attachments sent to our support team.

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account
• To deliver and improve our SaaS services
• To process billing and payments
• To provide customer support and service updates
• To send product announcements and newsletters (with consent)
• To comply with legal obligations (GDPR, taxation, accounting)

4. Legal Bases for Processing (GDPR)

We process your data based on:

• Performance of Contract: To provide and maintain your account and access.
• Legitimate Interest: To enhance platform functionality, prevent abuse, and ensure security.
• Consent: For marketing or promotional emails (withdrawable at any time).
• Legal Obligation: To comply with Estonian and EU regulatory requirements.

5. Data Sharing & Processors

We may share your information only with trusted partners acting as data processors:

• Hosting & Infrastructure: AWS or EU-based cloud providers
• Analytics: Google Analytics (aggregated and anonymized)
• Payment Processing: Stripe or other PCI-DSS–compliant providers

All partners comply with GDPR and are contractually bound to protect your data.

6. Google and YouTube Data

If you sign in with Google or connect a YouTube or Google Ads account, Publisha accesses Google user data only with your permission and only for the features you use:

• Google Sign-In: your name, email address and profile picture, to create your account and sign you in.
• YouTube (youtube.upload, youtube.readonly): we read your channel name and ID to show which channel you are posting to, upload the videos you choose to publish to that channel, and check their processing status. We do not read, change or delete your other videos, comments or channel settings.
• Google Ads (adwords): we request keyword ideas and search volumes for the keyword research you start in Publisha.

Storage and security: access tokens are stored encrypted and used only for the actions above. When you disconnect an account in Publisha, we revoke our access with Google and delete the stored tokens. You can also remove Publisha's access at any time in your Google Account at myaccount.google.com/permissions.

Sharing: we do not sell Google user data, use it for advertising, or share it with third parties except as needed to provide these features, to comply with the law, or with your consent. We do not use Google user data to develop, improve or train generalized AI or machine-learning models.

Publisha's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

By connecting YouTube, you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

7. Data Retention

We keep your data only as long as necessary for service operation or as required by law. You may request deletion of your account and personal data anytime by contacting [email protected].

8. Your Rights (EU / GDPR)

You have the right to:

• Access and receive a copy of your data
• Correct or update your information
• Request deletion of your data
• Restrict or object to processing
• Request data portability

All requests will be handled within 30 days, as required by GDPR.

9. Cookies

Publisha.ai uses cookies to enhance performance and user experience. You may manage or disable cookies in your browser settings. Some features may not function properly without cookies. We also use a first-party cookie (publisha_acq) that remembers, for up to 90 days, the ad or campaign that first brought you to our site (click ID and UTM tags), so we can measure which campaigns lead to sign-ups. If you sign up, this information is saved with your account.

10. Security

We implement strong encryption (SSL/TLS), firewalls, and secure authentication measures. However, no internet transmission is 100% secure, and you use our Service at your own risk.

11. International Data Transfers

All data is processed within the European Economic Area (EEA). If data must be transferred outside the EEA, it will only be to jurisdictions with adequate GDPR safeguards.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://www.laivisson.com/privacy. If material changes occur, users will be notified via email or platform notice.

13. Contact

For any privacy-related questions or concerns, contact:
Laivisson OÜ
Email: [email protected]
Address: Karamelli tn 2, Pärnu mnt 139b, 11317 Harju maakond, Estonia