Overview
PubVance ("we", "our", or "us") operates a link monetization and traffic analytics platform comprising two mobile applications — the PubVance User App and the PubVance Provider App — along with a web-based Admin Panel and supporting web services.
This Privacy Policy describes what information we collect from users of our applications, why we collect it, how we use it, and the choices available to you. By using any PubVance application or service, you agree to the practices described in this policy.
Information We Collect
The information we collect depends on which PubVance application you use.
- Device identifier (anonymous Device ID)
- Device type and operating system version
- IP address (for fraud detection, not stored long-term)
- Link ID clicked (which short link was opened)
- Session start and completion timestamps
- Quiz interaction data (questions seen, answers selected)
- Ad interaction data (managed by Google AdMob)
- First name
- Email address
- Country and state of residence
- Telegram username (optional)
- Profile picture (optional)
- Traffic source URLs (up to 4, optional)
- Payment details (free-text field, self-entered)
- Referral code and referral relationships
- Short links created (destination URL, title, description)
- Click counts per link
- Wallet balance and transaction history
- Withdrawal request history
- Referral history and credited bonuses
- Short link code in the URL
- User-Agent string (for device detection)
- IP address (for rate limiting, not stored)
- Referrer header (if present)
How We Use Information
We use the information collected for the following purposes:
- Deliver and manage the link engagement experience
- Track valid link clicks and attribute earnings to providers
- Enforce the 2-minute session timer and prevent gaming
- Redirect users to destination content after session completion
- Detect and prevent duplicate or bot-driven click fraud
- Enforce the one-valid-click-per-device-per-link policy
- Rate-limit suspicious traffic sources
- Validate engagement sessions using server-issued tokens
- Calculate and credit provider earnings in USD
- Process and track withdrawal requests
- Send withdrawal status notification emails
- Manage provider referral bonuses
- Generate provider dashboards and click reports
- Produce platform-wide traffic and revenue reports for admin
- Understand quiz engagement patterns (no personal data)
Information Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share information only in the following limited circumstances:
We do not share User App data (Device IDs, click events, quiz interactions) with providers or any other party outside of aggregated, non-identifiable analytics.
Third-Party Services
PubVance integrates the following third-party services. Each service has its own privacy policy governing how it handles data:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Supabase | Supabase Inc. | Database, authentication, file storage, and serverless functions. All platform data is stored on Supabase's PostgreSQL infrastructure. | supabase.com/privacy |
| Google AdMob / Ad Manager | Google LLC | Serves advertisements (App Open, Banner, and Interstitial) in the User App during engagement sessions. Google may collect advertising identifiers and device data to serve personalized ads. | policies.google.com/privacy |
| Email Delivery Service | Third-party SMTP / Resend / SendGrid | Sends transactional emails to providers (withdrawal request approved/rejected notifications, account credential delivery). | Dependent on provider chosen at deployment |
| Google Play Store | Google LLC | App distribution platform for Android. Subject to Google Play's own terms and privacy policies. | policies.google.com/privacy |
| Apple App Store | Apple Inc. | App distribution platform for iOS. Subject to Apple's own terms and privacy policies. | apple.com/legal/privacy |
Advertising
The PubVance User App displays advertisements provided by Google AdMob / Google Ad Manager. These ads help fund the platform and support provider earnings.
Google AdMob may use the following to serve and measure ads:
- Advertising ID (GAID on Android / IDFA on iOS)
- Device type, OS version, and language
- Ad interaction events (impressions, clicks)
- Approximate location (country/region level)
- IP address (may be used to infer location)
- App Open Ad — on app launch via deep link
- Banner Ad — during the 2-minute quiz session
- Interstitial Ad — on each quiz question change
Data Retention
We retain data for as long as necessary to provide the services described in this policy, comply with legal obligations, and resolve disputes.
| Data Type | Retention Period |
|---|---|
| Anonymous Device ID and click records (User App) | Retained for 12 months from last activity, then deleted |
| Session tokens and IP addresses | Deleted within 24 hours of session completion |
| Provider account information | Retained for the lifetime of the provider account. Deleted within 30 days of account deactivation upon request. |
| Provider earnings and wallet transaction history | Retained for 3 years for financial record purposes |
| Withdrawal request records | Retained for 3 years from the date of request |
| Short links and click analytics | Retained for the lifetime of the provider account |
Data Security
We take reasonable technical and organizational measures to protect the information we collect and store:
- All data transmitted over HTTPS (TLS encryption)
- Supabase Row-Level Security (RLS) policies on all tables
- Server-side session token validation for click events
- Passwords hashed using bcrypt via Supabase Auth
- API rate limiting on all public endpoints
- Provider data accessible only to the individual provider and platform admins
- Admin panel access restricted to authorized admin accounts
- Profile pictures and documents stored in access-controlled Supabase Storage
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
Children's Privacy
The PubVance platform and applications are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
The Provider App requires an account created by a platform administrator. We take reasonable steps to ensure that provider accounts are not created for individuals under 18.
The User App does not require account creation and collects only anonymous device identifiers. However, parents and guardians should be aware that the User App displays advertisements served by Google AdMob, which may collect advertising identifiers in accordance with Google's own policies.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
Access You may request a copy of the personal information we hold about you (applies to Provider App users with an account).
Correction You may update your profile information directly within the Provider App (name, country, state, Telegram username, profile picture, etc.).
Deletion You may request deletion of your provider account and associated personal data by contacting us. Financial records required for legal compliance may be retained per our retention schedule.
Opt Out of Personalized Ads User App users may opt out of personalized advertising through their device settings (Google Ads settings on Android, App Tracking Transparency on iOS).
Data Portability Provider account holders may request a machine-readable export of their data by contacting us.
Anonymous Use The PubVance User App can be used entirely without providing any personal information. No registration or login is required.
To exercise any of these rights, please contact us using the details in Section 12. We will respond to verified requests within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.
For significant changes, we will provide additional notice — such as a notification within the Provider App or an email to registered providers — before the changes take effect. Your continued use of our applications after any update constitutes acceptance of the revised policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
PubVance — Privacy & Data Team
📧 Email: privacy@pubvance.app
🌐 Website: pubvance.app
We aim to respond to all privacy-related inquiries within 5 business days. For data deletion requests, please allow up to 30 days for processing.