Last updated: 27 August 2026
Pubity Creators ("the App"), available at pubitycreators.com, is a private business system operated by Pubity Group Limited, a company registered in England and Wales (company number 12065014) with its registered office at 86-90 Paul Street, London, EC2A 4NE. Pubity Group Limited is the data controller. This privacy policy explains how we collect, use, store, and protect information in the App, including data obtained through the Google / YouTube APIs, the Meta / Facebook Graph API, and Microsoft 365 APIs.
Access to the App is restricted to Pubity staff and to partners we have a contract with. It is not a consumer service and it is not open to the public.
When you voluntarily connect an account to the App, we may access the following information from the relevant provider:
Google / YouTube
Meta / Facebook
Microsoft 365 (optional - internal staff only)
We use the collected data exclusively to:
Our lawful bases
Where you are a partner, we process your data to perform our contract with you (UK GDPR Article 6(1)(b)), and to meet our legal and accounting obligations (Article 6(1)(c)). Where we hold business contact and audience information about creators we have approached or are considering approaching, we rely on our legitimate interests in identifying and contacting potential partners (Article 6(1)(f)). That information is limited to professional and publicly available details, or details supplied to us by creator discovery providers, and is used only for business-to-business contact. You can object to it at any time using the contact address below, and we will remove you.
The App's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use YouTube API data for advertising, to train AI / ML models, or to sell or transfer it to third parties.
The App uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and your data is handled in accordance with the Google Privacy Policy.
You can revoke Pubity Creators' access to your YouTube data at any time from the Google security settings page. Revoking access stops all further data collection immediately.
Connected-account data is stored in our secure database, hosted on Supabase, so we can show performance over time and calculate partner revenue share. This applies to both platforms: YouTube channel metadata and analytics (daily views, watch time, estimated revenue, subscriber changes) and Facebook Page data (page and post metadata, performance metrics, and monetisation figures) are retained rather than processed only in the moment, because historical reporting is the purpose of the App. OAuth refresh tokens are stored securely and used only to refresh the short-lived access tokens needed to call the relevant APIs on your behalf. All data is encrypted in transit and at rest. We do not sell or rent personal data, and we do not share it for advertising.
We keep personal data no longer than we need it. In practice:
| Data | How long we keep it |
|---|---|
| Contracts, and records relating to revenue and payments | Six years after the partnership ends, to meet accounting and tax obligations |
| Connected-account performance data (page, post and channel metrics) | While the partnership is active, then 24 months |
| Business contact details for creators and representatives we approached but did not sign | 24 months from our last meaningful contact, or sooner on request |
| Audience and profile information gathered while assessing a potential partner | 24 months, or sooner on request |
| Direct messages exchanged with us on Instagram | 24 months from the last message in the conversation |
| Staff account records | While the account is active, then 12 months |
When you disconnect a YouTube channel in the App (Settings → Connected channels), we revoke the app's access token with Google and delete the stored connection immediately. You may also request deletion of any stored history at any time (see Data Deletion below), and you can revoke access directly at myaccount.google.com/permissions.
This application integrates with:
We also use a small number of service providers who process data on our instructions and under confidentiality obligations, in these categories: cloud hosting and database providers; an AI provider used for summarising and answering questions about performance data within the App; internal team communication tools used for performance alerts and reporting; and creator discovery providers who supply business contact and audience information about creators. These providers act as our processors. They are not permitted to use the data for their own purposes.
Data received from the YouTube API Services is used only to provide the App's reporting features. It is not used for advertising, not used to train AI or machine-learning models, and not sold or transferred to third parties other than processors acting on our behalf as described above.
Our providers may process data outside the UK. Where that happens we rely on appropriate safeguards, including the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
You have the right to:
To exercise any of these rights, email us at the address in section 10. We will respond within one month.
You also have the right to complain to a data protection authority. In the UK that is the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk/make-a-complaint. If you are in the EEA you may instead complain to the supervisory authority where you live or work. We would rather you came to us first, but you do not have to.
We do not use advertising, analytics or tracking cookies, and we do not run any third-party analytics or advertising code. Because we set no non-essential cookies, this site does not ask you for cookie consent. Browsing our public pages sets no cookies at all.
The cookies we do set are strictly necessary to provide a service you have asked for, and only appear once you sign in:
| Cookie | Purpose | Expires |
|---|---|---|
| sb-*-auth-token | Keeps you signed in. Set by our authentication provider, Supabase. Without it you would be signed out on every page | On sign-out, or when the session expires |
| pubity_talent_hint | Records only that a passcode was entered, so the Pubity Talent portal knows whether to show the catalogue or the passcode screen. Contains no personal data and no session information. It exists so a signed-out visitor is never briefly shown the catalogue | 30 days, or immediately on sign-out |
We also use your browser's local storage to remember interface preferences, such as light or dark mode and your chosen currency. That information stays in your browser and is never sent to us. You can clear cookies and local storage at any time in your browser settings; clearing them will sign you out.
Our web fonts are served from our own domain rather than from a font provider, so loading a page does not disclose your IP address to a third party. We embed no video players, social widgets or share buttons.
Disconnecting a YouTube channel in the App immediately revokes our access and deletes the stored connection. To request deletion of any remaining stored data (e.g. historical analytics), email us at the address below and we will process the request within 30 days. You can also remove the app's access at any time from your Google Account permissions or your Facebook account settings.
For any privacy-related questions or data requests, contact Pubity Group at: daniel.yorston@pubitygroup.com