Privacy policy

PushyCMO (https://pushycmo.com) is a daily marketing plan for people who make products. Every morning it suggests posts to write, people to reply to and fixes for your website. It never posts anything for you. PushyCMO is run by Sherif Gjini ("we", "us"). This page explains what we collect, why, who helps us process it, and how to get it deleted. Questions: hello@pushycmo.com.

What we collect

Your account

• Your email address, used to sign you in and to send the morning email.
• If you sign in with Google: your name and profile picture, as Google shares them at sign in. We use them only to show who is signed in.
• Your settings: timezone, email preferences, the voice you picked, muted platforms.

Your product

• The website or app store link you give us, and what we read from it: the public pages of your site and your public store listings (description, reviews, ratings, version).
• What you tell us in onboarding and later: tags, stage, corrections, the posts you paste as examples of your writing, check-in notes, rivals you add or remove.
• What you do with the suggestions: which posts and replies you marked done or skipped and why, fixes you marked done, the text you edited.

Public posts by other people

To find people worth replying to, we search public posts on Reddit, X, LinkedIn, Threads, Bluesky, Hacker News and public Facebook groups, through third-party data providers. We store the public text of matching posts, the author's public username, the link, public counts (likes, comments) and any images or links in the post. We never read anything behind a login, and never private groups or messages. If one of your public posts is stored and you want it removed, write to hello@pushycmo.com.

Google data, only if you connect it

You can connect Google Search Console and Google Analytics. We ask for read-only access and never change anything in your Google account:

• Search Console (webmasters.readonly): the list of your properties; search queries, pages, impressions, clicks and positions by day, device, country and search type; and Google's indexing verdict for pages of your site.
• Analytics (analytics.readonly): the list of your properties and their web streams; sessions, users, new users and engagement by day, channel, landing page, source, country, hour and event; and the property's timezone.

We use this data only to show you what is working and to write your suggestions: which pages to improve, which searches you almost rank for, which platforms send you visitors. Your Google access tokens are encrypted before they are stored.

Billing

Payments are handled by Freemius. We never see or store your card. We keep your license and subscription identifiers, plan, status, renewal dates and the email used at checkout.

Cookies and browser storage

We use only the cookies needed to keep you signed in. Your browser also stores a few preferences (light or dark theme, small interface choices). We use no advertising cookies and no third-party trackers.

Google API Services: Limited Use

PushyCMO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide and improve the features you see in PushyCMO.
• We do not sell it, and do not use it for advertising.
• No person reads it, except with your permission, for security, or where the law requires.
• We do not use it to develop, improve or train generalized AI or machine learning models.
• Short summaries of it (for example "a page had 312 impressions and 4 clicks") are sent to the AI providers listed below only to write your suggestions, never the raw data in bulk.

Who processes data for us

• Supabase: database and sign in.
• Vercel: hosting, and the AI Gateway that routes our AI requests.
• Anthropic, OpenAI, Perplexity: AI models that read your product details and the summaries above to write suggestions, judge which posts are worth a reply, and check whether AI answers cite your site.
• Apify, Serper: collecting public posts and public search results.
• Google: the APIs you connect, and its public page speed test of your site.
• Freemius: checkout, subscriptions and invoices.
• Resend: sending email.
• Inngest: running the scheduled morning jobs.

These companies may process data outside your country, under their own safeguards.

How long we keep it

• Disconnecting Google (Settings) deletes the connection and every row of Search Console and Analytics data we stored for that product. You can also remove our access at myaccount.google.com/permissions.
• Deleting a product (Settings) deletes everything about it: suggestions, history, leads, Google data and site checks. Cost logs stay, with the product removed.
• Deleting your account: write to hello@pushycmo.com from the account's email and we delete it and everything in it within 30 days.
• Otherwise we keep your data while your account exists.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to hello@pushycmo.com. If you are in the EU or UK you can also complain to your data protection authority. We process your data to provide the service you signed up for, and public posts by others on the basis of our legitimate interest in helping you find people who are asking for what you make.

Children

PushyCMO is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will tell you by email or in the app before it applies. The date at the top says when it last changed.