Privacy Policy

Last updated: August 5, 2026

This English version is provided for accessibility. The French privacy policy remains the reference version if the translations differ.

1. Data controller

The controller is Bruno Rocher, a sole proprietor trading as Publyra in France. Privacy enquiries: contact@publyra.com.

2. Data we process

We process account identifiers; subscription and Stripe status; quotas, generation history and security logs; encrypted AI-provider and CMS credentials; authorized Search Console properties and performance metrics; and authorized Meta destinations and publication history.

3. Protection of secrets

Compatible API keys and CMS credentials are encrypted in the browser before storage using a key derived with PBKDF2 and AES-GCM. When needed, the selected secret is decrypted in the browser and transmitted over TLS for the requested operation. It may exist temporarily in server memory and is not stored there in plain text. This protects stored credentials but is not a strict zero-knowledge design.

4. Purposes and legal basis

Data is used to provide accounts and requested features, manage subscriptions and quotas, secure the service, comply with legal duties and improve reliability. Optional integrations operate only after the user connects them.

5. Retention

Account content is retained for the account lifetime and during the stated 30-day restoration period. Audit and usage logs are retained for 12 months. Encrypted backups rotate daily, weekly and monthly for up to six months. Connected integration data is removed when the integration or account is deleted, subject to required operational and legal retention.

6. Processors and recipients

Publyra does not sell personal data. Necessary recipients may include Oracle Cloud Infrastructure for hosting in the Marseille region, Stripe for payments, the AI provider selected for a request, Google Search Console, Meta, WordPress and other destinations explicitly connected by the user.

7. Your GDPR rights

Where applicable, you may request access, correction, deletion, restriction, portability or objection, and may lodge a complaint with the CNIL or another competent supervisory authority. Send requests to contact@publyra.com.

8. Cookies and analytics

Essential cookies support authentication and security. Plausible provides privacy-oriented aggregate analytics without advertising profiles.