Privacy Policy

Information you provide

We store the name, email address, team and workspace details, publication information, and planning content you provide to operate the service. Information entered in Posts, Notes, publication settings, URLs, schedules, statuses, and other content fields may include personal information that you choose to provide.

Accounts and security

We use account and security information for sign-in, sessions, password resets, account protection, team access, and product access decisions. Passwords are stored in hashed form. Operational session and security records may include information such as IP address, browser information, and sign-in activity.

Invitations and communications

We store email addresses and status records for account and team invitations, and may send invitation, password-reset, and other service-related messages. We also maintain records of access administration and related actions.

Your content

Publication Manager stores the publication and planning information you enter, including Posts, Notes, schedules, statuses, and relationships between content items. You remain responsible for the information and content you enter. Publication Manager does not currently publish it directly to Substack.

First-party application analytics

When enabled, we record limited usage events in Publication Manager to understand and improve the service. These cover app activity, Queue, Drafts, Calendar and Library use, publication creation, and content creation, updates, and workflow changes. Events are linked to user and workspace identifiers, so they are not anonymous. Usage-event records do not intentionally copy Post or Note bodies, titles, search terms, external URLs, IP addresses, or user agents. These records are scheduled for deletion after approximately 180 days.

Public-page analytics

Public pages viewed by guests, including these policy pages, may use Statcounter for website analytics. Statcounter may receive information from your browser when its analytics code loads. This is separate from the first-party usage analytics in the authenticated application; Statcounter is not included on authenticated Publication Manager pages.

Service providers

Third-party providers may help us operate the service, including website and application hosting, data storage, email delivery, and public-page analytics. We use Statcounter for the public-page analytics described above.

Access administration and retention

We may maintain records of invitations, access changes, and security or administrative actions, including whether access is active, inactive, or suspended. We retain information as reasonably necessary to provide, operate, and protect the service and to meet legal or operational requirements. Apart from the scheduled deletion of first-party usage events described above, this policy does not promise a fixed deletion timetable for every category of information.

Account deletion and access loss

Inactive or suspended access does not delete your account, workspace, or content; access may later be restored. Deleting a user account is a separate action that removes that account and its product access. Some workspace, publication, content, invitation, administrative, operational, or backup-related records may remain under our retention practices.

Security

We use measures such as hashed passwords, authenticated access controls, team and workspace authorization, product access controls, and operational safeguards to protect the service and its information. No security measure can guarantee complete protection.

Changes and contact

We may update this policy. The date shown on this page will reflect material revisions. For privacy or service questions, email app@substack.coach.