This Privacy Policy explains how PublishPort ("we", "us", "our") collects, uses, and protects your information when you use the Service. The Service is local-first by design and deliberately keeps the data the cloud can access to a minimum.
1. Information We Collect
- Account information: the email address you provide at registration, and a securely hashed form of your password.
- Authentication credentials: the session, device, and MCP tokens we issue, stored only as hashes.
- Session security metadata: when you sign in, we record basic origin details for each login session — the IP address, browser/operating-system (User-Agent), and country of that sign-in — so you can recognize your active sessions on the account page and revoke any you don't recognize. This data is shown only to you and kept for the lifetime of the session.
- Usage counters: relay usage metrics used for billing and quota enforcement (such as the number of command invocations and bytes uploaded per month).
- Limited operational logs: minimal technical logs needed to keep the relay stable and to troubleshoot (such as connection times and error messages).
2. Information We Deliberately Do Not Collect or Store
- The relay does not store the contents of your files. File bytes passing through the relay are streamed straight through — forwarded to your device as they arrive and immediately discarded, with no buffering of the complete file and nothing written to disk.
- Commands run on your own machine, and their results are not retained by the relay.Your platform sessions and published content always remain on your own computer and cannot be read by our servers.
- We do not collect or sell the content of your platform accounts or your personal social data.
3. How We Use Information
- To provide, maintain, and secure the Service;
- To authenticate you and protect account security;
- To meter usage in order to enforce plan limits and billing;
- To contact you when necessary about service changes or security matters.
4. Third-Party Services
- Payments (Dodo Payments): Paid plans are processed by Dodo Payments acting as Merchant of Record. Your payment information is collected and processed by Dodo Payments under its own privacy policy; we do not receive your full payment-card details.
- Upstream open-source tools: The open-source command-line tools the Service invokes run on your own machine; their interactions with each platform occur directly between your computer and that platform.
5. Browser Extension
The PublishPort browser extension is a companion component of the desktop application. It operatesentirely on your own computer:
- No data collection: the extension does not collect, transmit, or sell any of your browsing history, cookies, page content, or personal data, and contains no analytics or tracking of any kind.
- Local-only communication: the extension communicates exclusively with the PublishPort service running on your own machine (127.0.0.1). It never connects to our servers or any other remote server.
- Purpose-bound access: the extension reads platform cookies solely to detect login status, and interacts with web pages solely to carry out the publishing, reading, and engagement tasks you initiate from the desktop application. Results are returned only to the desktop application on the same machine.
- No remote code: all extension code is packaged and distributed through the browser's official store; the extension does not load or execute code from the network.
Our use of information received from browser APIs adheres to theChrome Web Store User Data Policy, including its Limited Use requirements.
6. Cookies and Local Storage
The desktop application uses local storage to keep your session token so that you stay signed in across restarts. Our website may use necessary local storage to maintain basic functionality.
7. Analytics
Our website uses a self-hosted, privacy-friendly analytics tool to understand aggregate traffic and improve the Service. It does not use tracking cookies and does not collect personally identifiable information; it records only anonymous, aggregated usage signals such as page views and referrers.
The desktop application records a small set of high-level product events — such as opening the app, signing in, connecting a platform, or linking an AI client — to understand how the Service is used and to improve it. These events may be associated with your account identifier so that we can measure usage across your devices. We never collect the content you publish, your platform credentials, or the data exchanged between your machine and third-party platforms.
8. Security
We store tokens only as hashes, hash passwords using a salted, industry-standard algorithm, and transmit data over HTTPS/TLS. However, no system is perfectly secure, and you are responsible for safeguarding your account and access keys (see our Terms of Service).
9. Data Retention and Your Rights
We retain your account and usage information only for as long as needed to provide the Service. You may delete your account at any time; after deletion, we will remove or anonymize information associated with you within a reasonable period, except where retention is required by law. To access, correct, or delete your information, contact us.
10. Children
The Service is intended for adults. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.
12. Contact
If you have any questions about this Policy or your data, contact us at support@publishport.app.