Privacy Policy

PushArc ("we", "us") operates the publishing platform at pusharc.com. This policy explains what we collect and how we use it. What we collect. Account details you provide (name, email, password stored only as a salted hash); content you compose (posts, articles, campaigns, media you upload); and, when you connect a social media account, the OAuth access tokens those platforms issue. We never see or store your social media passwords. How tokens are handled. Platform tokens are encrypted at rest with AES-256-GCM and used solely to publish the content you schedule, read delivery status, and — where you grant it — read advertising metrics. You can disconnect any account at any time, which revokes our use of its token. How we use your data. To operate the service: publishing your content to the destinations you choose, generating campaign content you request, and showing your team the results. We do not sell personal data, and we do not use your content to train AI models. Payment information. We never collect or store card numbers. Any advertising billing happens directly inside the relevant platform's own billing system. Third parties. Content you publish is transmitted to the platforms you connect (for example Meta, Reddit, Bluesky, Discord) under their terms. AI generation requests are processed by Anthropic's API. Our infrastructure runs on DigitalOcean in the United States. Data isolation. Every organization's data — workspaces, channels, campaigns, team — is isolated from every other organization on the platform. Retention & deletion. Your data persists while your account is active. To delete your account and its data, contact us and we will remove it within 30 days. Your rights. You may request a copy, correction, or deletion of your personal data at any time. Contact: baileybuoniello@icloud.com We may update this policy; material changes will be announced on this page with a new effective date.