PubGen.AI

Privacy Policy

Effective May 17, 2026

This Privacy Policy describes how PubGen.AI (“PubGen,” “we,” or “us”) collects, uses, stores, and shares information when you use the PubGen Paginator Adobe InDesign extension and its associated cloud services (the “Service”). It applies in addition to our Terms of Service.

1. Information We Collect

We collect the following categories of information:

a) License & Account Information

  • Organization name and contact email associated with your license key.
  • License key fingerprint, tier, seat count, issuance date, and expiration date.
  • A persistent device identifier generated by the extension on first launch.

b) Session & Network Information

  • IP address of API requests.
  • User-agent string from API requests.
  • Session start time and last-seen heartbeat timestamp.

c) Usage Analytics

  • Event records describing which features of the Service you use (for example: import, RSS load, feed view, ad placement, PDF export, AI request type). Each event includes a timestamp and a short metadata blob about the event (e.g. number of stories imported, aspect ratio chosen).

d) AI Request Logs

When you use the AI Features (text refinement or image generation), we log:

  • The full text of your prompt and any system instructions sent to the AI model.
  • The model used (for example, gpt-image-2, gpt-4o-mini).
  • Parameters such as aspect ratio, quality, and negative prompt.
  • A preview of the response (first 2,000 characters of text) and metadata about the response (token counts, latency, success/failure).
  • For image generation, the size of the returned image in base64 bytes. We do not retain the generated image itself on our servers — it is streamed back to your extension and stored only there.
  • Organization name, license key fingerprint, device identifier, and request IP.

e) Content You Submit for Processing

The Service processes article XML, RSS feeds, ad XML, image URLs, and InDesign frame metadata locally on your machine. This content is generally not transmitted to our servers, with two exceptions: (i) content you submit to the AI Features (which is sent to OpenAI as described below and logged as described in Section 1(d)), and (ii) content you affirmatively push to our CMS via the Export tab.

2. How We Use Information

We use the information we collect to:

  • operate, maintain, and secure the Service;
  • validate license keys and enforce seat limits;
  • provide customer support;
  • detect, investigate, and prevent abuse, fraud, and security incidents;
  • measure and improve feature reliability and performance;
  • improve the quality of the AI Features — including evaluating models, debugging failures, and fine-tuning models used in the Service — using logged prompts and response previews;
  • communicate with you about product updates, security advisories, and renewals; and
  • comply with legal obligations.

3. Third-Party Providers

We share information with third-party service providers strictly as needed to operate the Service:

  • OpenAI — AI prompts (text + image generation prompts you submit) and the resulting completions. OpenAI’s policies state that data submitted via the API is not used to train OpenAI’s models by default.
  • Vercel — hosts the PubGen license server; receives request metadata, IPs, and logs.
  • Upstash (Redis) — stores license records, sessions, analytics, and AI logs in encrypted form.

We do not sell your information. We do not use your data for advertising, and we do not share it with advertisers. We may disclose information when required by law, court order, or to protect the safety of any person.

4. Data Retention

  • License records: retained for the life of the license plus 7 years for financial-record purposes.
  • Session records: automatically expire 10 minutes after the last heartbeat.
  • Usage analytics: retained up to 5,000 events in rolling memory and summarized indefinitely as anonymized counts.
  • AI request logs: retained for 90 days in our KV store (rolling), then automatically deleted. Aggregated, anonymized statistics (e.g. total prompt count per organization) may be retained longer for analytics.
  • Backups: may persist beyond the periods above for disaster recovery, up to 35 days after deletion from the primary store.

5. Your Rights

Depending on your location, you may have the right to access, correct, port, restrict processing of, or delete your personal information. To exercise these rights:

  • Delete my AI prompt history: contact support@pubgen.ai with your license key fingerprint and we will purge your AI request logs within 30 days. (We can also do this on demand via an admin endpoint.)
  • Delete my account: contact support@pubgen.ai. Note that revoking your license key will end access to the Service but does not automatically erase analytics or AI logs; tell us if you want those purged.
  • Object to AI training use: contact support@pubgen.ai. If you opt out, we will mark your logs as “exclude-from-training” and they will not be included in fine-tuning datasets, although they may still be retained for the standard 90-day operational window.

6. International Transfers

The Service is operated from the United States and processes data in U.S.-based Vercel and Upstash regions. If you access the Service from outside the United States, you consent to the transfer of your information to the United States for processing.

7. Security

We use industry-standard safeguards to protect your information, including TLS encryption in transit, encryption at rest in Upstash and Vercel, HMAC-signed license keys, and rate-limiting. No security measure is perfect; if a breach affects your data, we will notify you and applicable authorities as required by law.

8. Children

The Service is intended for use by professional editorial staff. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Policy from time to time. The “Effective” date at the top of this page indicates the most recent revision. For material changes we will notify active customers by email or in-product notice prior to the change taking effect.

10. Contact

Questions, requests, or complaints about this Privacy Policy? Email support@pubgen.ai. Our mailing address: PubGen.AI, Attn: Privacy, 1209 Orange Street, Wilmington, DE 19801, USA.