Privacy Policy | PublishBuddy

Methodize Media Pty. Ltd. (ABN 66 603 423 758) ("Company," "we," "our," or "us"), the operator of PublishBuddy, has created this Privacy Policy to explain how we collect, use, disclose, protect, and otherwise handle Personal Information when you engage with our website, https://publishbuddy.com (the "Site"), as well as related subdomains, applications, browser extensions, APIs, and other services (collectively, the "Service"). It also explains your rights and the choices available to you regarding your Personal Information, and how to contact us with any privacy-related questions.

We handle Personal Information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"), and, where applicable, the EU and UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"). Region-specific rights are set out in Section 11.

In some cases we process Personal Information on behalf of our business customers while they use the Service (for example, information about their audiences). In those cases we generally act as a processor (or service provider), and the relevant business customer is the controller responsible for that processing. Please review that customer's privacy policy to understand how they handle your data.

By registering, accessing, or using the Service, you acknowledge this Privacy Policy and our Terms of Use, found at https://publishbuddy.com/terms. Capitalised terms not defined here have the meaning given in our Terms of Use.

1. Personal Information We Collect

"Personal Information" means any information that identifies or can reasonably be linked to an individual. We collect Personal Information from the sources described below. Where information is required to provide a feature, not providing it may limit your access to that feature.

We do not seek to collect sensitive information or special-category data (such as information about your health, race, religion, political opinions, sexual orientation, or biometric data) and ask that you do not provide it through the Service. We will only collect such information where you choose to provide it and we have a lawful basis to do so, or as required or permitted by law.

2. Personal Information You Provide

Account Registration

To create an account, access restricted areas of the Site, or request marketing materials, we may collect:

Full name
Email address
Contact number
Username
Password (stored in hashed form)
City and time zone

Customer Support Interactions

When you contact our support team, we may collect information relevant to your inquiry, including:

Emails, chat transcripts, and support tickets submitted through our platform
The content of your messages, which may include account details, error reports, or troubleshooting steps
Any follow-up communications between you and our support representatives
Technical logs and diagnostic data associated with reported issues

This information is used to troubleshoot, resolve support requests, and improve our customer service.

Purchases and Transactions

When you make a purchase or subscribe to the Service, we collect the details needed to process your payment securely, including:

Payment method information such as card type, last four digits, and expiry date (full card numbers and security codes are handled directly by our PCI-DSS-compliant third-party payment processors and are not stored by us)
Billing details, including name, address, and zip/postal code
Purchase history, subscription details, and transaction records
Invoicing and receipt-related communications

We do not store complete payment card details. Payments are processed by compliant third-party providers, and your billing information is used only for processing payments, refunds, and fraud prevention.

Social Media Account Information

To enable integration with social media platforms, facilitate content posting, and provide engagement metrics, we may collect and store information related to your linked social media accounts, including:

Social media handles
Account IDs
Profile usernames
Email address
Time zone
API access and refresh tokens (used to authenticate and authorise interactions with connected accounts, stored in encrypted form)
Content publishing permissions granted to the Service
Engagement data such as likes, shares, and comments
Follower counts and audience demographics
Insights and analytics provided by social media platforms

We use this data to schedule, publish, and analyse content across your connected accounts, and only as needed to provide the Service. We do not sell this information.

Content You Create

We collect and store the content you upload, draft, schedule, or publish through the Service (including text, images, video, captions, and prompts you submit to AI features), so that we can provide, secure, and improve the Service.

Business Engagements

If you engage with us as a customer, vendor, or business partner, we may collect additional professional contact details, including:

Company name
Job title/position
Business email address
Office phone number
Business address
Industry and company size
Communication history
Contractual agreements and transaction records

This information helps us manage business relationships, provide service agreements, process invoices, and coordinate projects.

3. Information Obtained from Connected Social Media Accounts

Facebook

If you link a Facebook page or profile, we may obtain:

Profile image
Display name
Username/Page ID
Authentication tokens
Published posts
Engagement statistics (clicks, likes, shares, impressions, and interactions)

X (formerly Twitter)

By linking an X account, we may access:

Profile image
Display name
Username/Profile ID
Authentication tokens
Tweets sent through the Service
Engagement data (likes, retweets, shares, impressions)

Instagram

If you integrate your Instagram profile, we may retrieve:

Profile image
Display name
Username/Profile ID
Authentication tokens
Posts published via our platform
Engagement insights (likes, shares, impressions, and interactions)

Bluesky

If you connect a Bluesky account, we may access:

Profile image
Display name
Username/Profile ID
Authentication tokens
Posts published via our platform
Engagement insights (likes, shares, impressions, and interactions)

For linked Pinterest accounts, we may collect:

Profile image
Display name
Username/Profile ID
Authentication tokens
Pins published
Engagement analytics (likes, re-pins, shares, impressions)

When a LinkedIn account is connected, we may access:

Profile image
Display name
Username/Profile ID
Authentication tokens
Posts and engagement details (clicks, likes, shares, impressions)

TikTok

If you connect a TikTok profile, we may collect:

Profile image
Display name
Username/Profile ID
Authentication tokens
Posted content
Engagement metrics (likes, shares, impressions, and interactions)

Google Business Profiles

For linked Google Business Profiles, we may obtain:

Profile image
Display name
Username/Profile ID
Authentication tokens
Published posts
Engagement data (clicks, likes, shares, impressions)

YouTube

When you link a YouTube channel, we may retrieve the information below. Our use of information from YouTube APIs is also subject to the YouTube Terms of Service and the Google Privacy Policy.

Profile image
Display name
Profile ID
Authentication tokens
Existing videos and engagement metrics

Threads

If a Threads account is connected, we may collect:

Profile image
Display name
Username/Profile ID
Authentication tokens
Posted content and engagement details (likes, shares, impressions, interactions)

If you connect a Telegram channel, we may collect:

Display name and channel/chat ID
Authentication tokens
Posted content and related delivery information

We collect this information solely to deliver the Service and do not share it with external parties beyond what is necessary for Service functionality, as described in Section 7. You can disconnect any account at any time, which revokes our ongoing access tokens for that account.

4. Information Automatically Collected from Your Use of the Service

Log Data

When you use the Service, our systems automatically collect certain details that your browser or device transmits, which may include:

IP Address: The Internet Protocol (IP) address assigned to your device at the time of access.
Browser Type and Configuration: Information about your web browser, such as its type, version, and settings.
Pages Visited and Usage Activity: A record of the pages you access, the duration of your visits, and your navigation sequence.
Timestamps and Access Information: The date and time you interact with the Service, including session duration and activity logs.
Referral Data: The URL of the webpage that referred you to the Service, if applicable.
System Performance Metrics: Error reports and diagnostic details to help troubleshoot technical issues.

Mobile Applications

When you use our mobile applications, we may collect device-related information such as device type and model, operating system and version, unique or advertising device identifiers, app version, crash and diagnostic data, and, if you enable them, push notification tokens used to deliver notifications. With your permission, the app may access certain device features (such as the camera, photo library, or storage) so you can upload and manage content. You can manage these permissions and disable push notifications through your device settings.

Cookie Policy

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (such as pixels, web beacons, local storage, and software development kits) to operate the Service, keep you signed in, remember your preferences, understand how the Service is used, and (where you consent) measure marketing. This section, together with any cookie banner or preference centre we provide, forms our cookie policy.

We use the following categories of cookies and similar technologies:

Strictly Necessary Cookies: Required for the Service to function and cannot be switched off in our systems. They are used for essential purposes such as authenticating you, keeping you signed in, maintaining session state, load balancing, and security. These do not require consent. Examples include session cookies (removed when you close your browser) and short-lived security tokens.
Preference / Functionality Cookies: Remember choices you make (such as language, time zone, and layout settings) to provide a more personalised experience across sessions. These are typically persistent cookies that remain until they expire or you delete them.
Analytics / Performance Cookies: Help us understand how visitors use the Service so we can measure and improve performance, for example by counting visits, identifying popular pages, and diagnosing errors. We use providers such as Google Analytics for this purpose.
Marketing / Advertising Cookies and Pixels: Where you consent, these help us and our advertising partners measure campaign effectiveness and show relevant content. Email pixels and web beacons may also tell us whether an email was opened or a link was clicked.

Cookies may be set by us ("first-party") or by third parties acting on our behalf ("third-party"). Their lifespan varies: session cookies are deleted when you close your browser, while persistent cookies remain for a set period (typically from a few days up to 24 months) or until you delete them.

Managing Your Cookie Choices

Where required by law (including in the EEA and UK), we ask for your consent before setting non-essential cookies, and you can change or withdraw your consent at any time through our cookie banner or preference centre. You can also manage cookies through your browser settings, which let you block or delete cookies and warn you before they are set; instructions are available in the help section of most browsers. Please note that blocking strictly necessary cookies may prevent parts of the Service from working. For analytics, you may also use opt-out tools such as the Google Analytics Opt-out Browser Add-on.

Some browsers offer a "Do Not Track" or Global Privacy Control signal. Where required by applicable law (such as for California residents), we treat recognised opt-out preference signals as a valid request to opt out of the "sale" or "sharing" of Personal Information.

Third-Party Analytics and Advertising

We work with external analytics providers to gather aggregated usage insights and improve the Service. These third parties may use cookies or similar technologies to collect:

Frequency and patterns of Service use.
Geographic and demographic trends.
Device and browser performance statistics.
Effectiveness of marketing campaigns and advertisements.

To limit third-party tracking, you may adjust your browser or cookie settings, or use opt-out tools provided by companies such as Google Analytics.

Links to Other Websites

The Service may include links to external websites operated by third parties. These links are provided for convenience and do not imply endorsement. We do not control these third-party sites and are not responsible for their privacy practices, content, or security. We encourage you to review the privacy policies of any third-party websites you visit. Any interaction with those sites is solely between you and the third party.

5. How We Use Your Personal Information

We use the Personal Information we collect for operational, administrative, and legal purposes, including:

Service Provision and Account Management: To create and manage accounts, authenticate identity, and enable access to functionality, including scheduling and publishing to your connected accounts.
Communication and Customer Support: To send service-related communications such as account verification, system updates, technical notices, security alerts, and support responses.
Payments and Transactions: To process payments, issue receipts, manage billing, and prevent fraud.
Personalisation and Improvements: To analyse usage and tailor and improve the Service.
AI Features: To generate and deliver AI-assisted output you request (see Section 6).
Marketing and Promotional Messaging: To send promotional messages about features, updates, and offers, where permitted. You can opt out at any time.
Security, Fraud Prevention, and Compliance: To detect and prevent fraud, unauthorised access, and security incidents, and to comply with legal obligations.
Business Intelligence and Research: To analyse aggregated data to understand engagement, optimise the Service, and develop new features.

6. AI and Automated Processing

Some features use artificial intelligence to generate content, suggestions, and analytics based on inputs you provide (such as prompts, drafts, and connected-account data). To deliver these features, we may share the relevant inputs with trusted third-party AI providers acting as our processors under confidentiality and data-protection obligations. We do not use your private content to train third-party foundation models except where you have expressly opted in or where the data has been aggregated and de-identified. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without a lawful basis and appropriate safeguards.

7. How We Share Your Personal Information

We do not sell your Personal Information. We may share it with the following categories of recipients:

Service Providers and Processors: Vendors who help us operate the Service, including cloud hosting and storage, payment processing, email and communications, analytics, AI providers, customer support, and security. These parties are bound by contract to protect your information and use it only on our instructions.
Third-Party Platforms: When you direct us to publish content or retrieve analytics, we exchange the necessary information with the relevant social media platform via its APIs.
Other Users in Your Workspace: If you use team or collaboration features, your information and content may be visible to other authorised members of your workspace or Organisation.
Legal Compliance and Protection: Where required by law or to respond to lawful requests (such as subpoenas or court orders), or to protect our rights, users, or the public, and to prevent fraud or harm.
Business Transfers: In connection with a merger, acquisition, financing, reorganisation, or sale of assets, subject to the recipient honouring this Privacy Policy.
Affiliates: With our corporate affiliates to help provide and improve the Service, consistent with this Privacy Policy.
Aggregated or De-Identified Data: Information that cannot reasonably be used to identify you may be shared for analytics or business purposes.

8. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your Personal Information on one or more of the following legal bases:

Contract: To provide the Service and perform our agreement with you (for example, account management, publishing, and billing).
Legitimate Interests: To secure, operate, analyse, and improve the Service, prevent fraud, and conduct direct marketing, where not overridden by your rights.
Consent: For non-essential cookies, certain marketing, and any optional processing, which you may withdraw at any time.
Legal Obligation: To comply with applicable laws, such as tax, accounting, and lawful requests.

9. Data Retention

We retain Personal Information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including providing the Service, complying with legal, tax, and accounting obligations, resolving disputes, and enforcing our agreements. When information is no longer required, we delete or de-identify it, or securely store and isolate it until deletion is possible (for example, in backups). If you close your Account, we will delete or de-identify your Personal Information within a reasonable period, except where we are required or permitted by law to retain it.

10. How We Protect Your Personal Information

We use a combination of technical, administrative, and physical safeguards designed to protect Personal Information against unauthorised access, loss, misuse, alteration, or destruction.

Sensitive data, including access tokens, is encrypted in transit and at rest. We use firewalls, access controls, and monitoring to restrict access, and we conduct security reviews to identify and address vulnerabilities. Personnel with access to Personal Information are bound by confidentiality obligations, receive data-protection training, and operate under role-based access controls so that data is available only to those who need it.

No method of transmission or storage is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will investigate, take steps to contain it, and notify affected individuals and relevant regulators (such as the Office of the Australian Information Commissioner) as required by applicable law, including the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

11. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your Personal Information:

Access and request a copy of the Personal Information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your information, subject to legal and operational requirements.
Restrict or object to certain processing.
Withdraw consent where processing is based on consent.
Request portability of your information in a structured, commonly used format where legally required.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding, and we will not discriminate against you for exercising your rights. You can opt out of marketing at any time using the unsubscribe link in our emails or your account settings.

Australia

We handle Personal Information in accordance with the Privacy Act 1988 (Cth) and the APPs. If you have a privacy concern, contact us first. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

EEA and United Kingdom

If you are in the EEA or UK, you have the rights described above under the GDPR. You also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office). Where we transfer your data outside the EEA or UK, we rely on appropriate safeguards as described in Section 12.

California

If you are a California resident, the CCPA/CPRA gives you the right to know what Personal Information we collect, use, and disclose; to request access and deletion; to correct inaccurate information; to opt out of the "sale" or "sharing" of Personal Information; and to limit the use of sensitive Personal Information. We do not "sell" your Personal Information, and we do not "share" it for cross-context behavioural advertising, as those terms are defined under the CPRA. If this changes, we will update this Privacy Policy and provide a "Do Not Sell or Share My Personal Information" mechanism.

In the preceding 12 months, we have collected the following categories of Personal Information (as defined by the CCPA/CPRA): identifiers (such as name, email, username, and IP address); commercial information (such as subscription and transaction records); internet or other electronic network activity (such as usage and log data); geolocation data (such as city and approximate location derived from IP address); professional or employment-related information (for business contacts); and audio, electronic, or visual information (such as content and media you upload). We collect this information from the sources, and use and disclose it for the business purposes, described in this Privacy Policy.

You may exercise these rights by contacting us at [email protected], and you may use an authorised agent. We will verify your request and will not discriminate against you for exercising your rights.

Other U.S. States

If you are a resident of a U.S. state that has enacted a comprehensive consumer privacy law (such as Virginia, Colorado, Connecticut, Texas, Oregon, Utah, and others), you may have rights similar to those described above, including the right to access, correct, delete, and obtain a portable copy of your Personal Information, and to opt out of targeted advertising, the sale of Personal Information, and certain profiling. We do not sell your Personal Information or use it for targeted advertising in a way that would require an opt-out under these laws. To exercise any applicable rights, contact us at [email protected]. Where a law provides a right to appeal a decision about your request, you may do so by replying to our response, and we will inform you of the outcome.

12. International Data Transfers

We operate globally, and your Personal Information may be transferred to, stored, or processed in countries outside your jurisdiction, including Australia and the United States, where our service providers operate. When we transfer Personal Information internationally, we put appropriate safeguards in place to comply with applicable data protection laws. For transfers from the EEA or UK, these safeguards may include the European Commission's Standard Contractual Clauses (and the UK Addendum) or transfers to countries recognised as providing adequate protection.

13. Children's Privacy

The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect Personal Information from anyone under 18. If we become aware that we have collected Personal Information from a minor without appropriate authorisation, we will take prompt steps to delete it.

Parents or legal guardians who believe a child has provided us with Personal Information should contact us at [email protected] so we can investigate and take appropriate action. We also comply with applicable laws protecting minors, including the Children's Online Privacy Protection Act (COPPA) in the United States and the GDPR's protections for children in the EU/UK.

14. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. We will communicate significant updates by email, through the Service, or by a prominent notice on our website, and the "Last updated" date above will reflect the most recent revision.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after an update takes effect signifies your acceptance of the revised policy. If you do not agree with any changes, you should discontinue use of the Service and may contact us regarding the deletion of your data, where applicable.

15. Contact Information

If you have any questions, requests, or complaints about this Privacy Policy or our handling of your Personal Information, please contact us at:

Methodize Media Pty. Ltd. (ABN 66 603 423 758)
Attn: Privacy Officer
Sydney, Australia
Email: [email protected]