Privacy Policy

We collect information you provide directly to us when you create an account, including your name, email address, professional credentials, and account type. We also collect information about your use of the platform, including releases you publish, pitches you send or receive, media lists you create, and coverage you log. When you request verification, we collect additional information including your outlet name, work email, job title, and supporting credentials. This information is used solely for verification purposes and is stored securely. We automatically collect certain technical data when you use PUBLICLLY, including your IP address, browser type, device information, and usage analytics. This data helps us improve the platform and maintain security.

We use your information to provide and improve the PUBLICLLY platform, including connecting journalists with PR professionals, distributing press releases, and facilitating media enquiries. We use your professional information to verify your identity, display your profile to other users, and match you with relevant stories, sources, and opportunities. We do not sell your personal information to third parties. We may use your email address to send you platform notifications, service updates, and occasional newsletters. You can opt out of non-essential communications at any time from your account settings.

We share your profile information (name, outlet, beats, verified status) with other PUBLICLLY users to facilitate the platform's core functionality. Your contact details are only shared when you initiate a pitch, message, or enquiry. We do not share your personal information with advertisers. We may share aggregated, anonymised data for analytics and industry reporting purposes. We may disclose your information if required by law, court order, or to protect the rights, property, or safety of PUBLICLLY, our users, or others.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, and strict access controls. Our platform is SOC 2 Type II compliant and GDPR ready. We conduct regular penetration testing and maintain an incident response plan. Despite our efforts, no system is perfectly secure. If we become aware of a data breach, we will notify affected users within 72 hours in accordance with GDPR requirements.

Under GDPR and similar regulations, you have the right to access, correct, export, or delete your personal data. You can exercise these rights from your account settings or by contacting us at privacy@publicly.com. You can delete your account at any time, which will permanently remove your personal information from our active systems within 30 days. Some data may be retained for legal or accounting purposes. If you have a complaint about how we handle your data, you have the right to lodge a complaint with your local data protection authority.

If you have questions about this Privacy Policy or how we handle your data, please contact us at: Email: privacy@publicly.com Address: 1 Finsbury Avenue, London EC2M 2PF, United Kingdom We will respond to your enquiry within 30 days.