Privacy Policy

Last updated: May 2026.

PNX (the "Service") is operated by Saboor Tahir. This policy explains what data we collect, how it's used, and your rights. For a full breakdown of how we use each Google API, see our Google API Integrations & OAuth Transparency Hub.

1. Data we collect

• Chat history — stored locally in your browser (localStorage). We do not store your conversations on our servers.
• Analytics — Google Analytics (G-2MT0HT3T33) collects anonymous usage data (pages viewed, country, device type) to help us improve the product.
• AI processing — your prompts are sent to the Lovable AI Gateway and underlying model providers (e.g. Google Gemini) for processing. Do not paste sensitive personal data.
• Google API data (only when you connect) — see Section 9 below for a per-API breakdown.

2. Cookies

We use first-party cookies for analytics. You can disable cookies in your browser settings. Third-party services (Google Analytics, Google AdSense if enabled in future) may set their own cookies governed by their privacy policies.

3. Advertising

This site may display ads via Google AdSense in the future. Google may use cookies to serve ads based on prior visits. You can opt out at google.com/settings/ads.

4. Data sharing

We do not sell your data. We only share data with the processors strictly needed to operate the Service (Lovable, Google Analytics, Cloudflare, and — when you explicitly authorize them — Google API endpoints). No personally identifiable information (PII) is shared with third parties, and data obtained through any Google API is never sold, used for advertising, or transferred to data brokers.

5. Your rights

You can clear chat history at any time by clearing your browser localStorage. You can revoke PNX's access to any Google API at any time from your Google Account permissions page. To request deletion of analytics data, email saboortahir01@gmail.com.

6. Children

PNX is not directed to children under 13. We do not knowingly collect data from children.

7. Changes

We may update this policy. Material changes will be announced on this page.

8. Contact

Questions or privacy / security inquiries? Email saboortahir01@gmail.com.

9. Google API Services & OAuth Disclosures

Limited Use Disclosure. PNX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request only the minimum scopes needed for each user-facing feature, and we never use Google user data for advertising, sell it, or allow humans to read it except with your explicit consent, for security investigations, or to comply with applicable law.

Data retention. PNX does not store Google user data on its servers. All Google API responses are processed ephemerally in memory for the duration of your request, or stored locally in your browser (localStorage) only when needed to display results.

9.1 Google Search Console API

• Data accessed: aggregated, anonymized search performance data (queries, impressions, clicks, average position) for sites you own.
• Purpose: to power user-facing SEO audit, ranking, and gap-analysis reports inside PNX.
• PII: none collected. Storage: ephemeral; not retained server-side.

9.2 Google Analytics 4 (GA4) Data API

• Data accessed: aggregated, anonymized traffic and engagement metrics (page views, sessions, bounce rate, conversion counts).
• Purpose: to correlate SEO work with real engagement and surface data-driven recommendations.
• PII: none collected. Storage: ephemeral; not retained server-side.

9.3 Google Drive API

• Data accessed: only files you explicitly pick (file picker), for importing source content or exporting PNX reports.
• Scopes: read-only for imports, file-scoped write for exports — never broad Drive access.
• Storage: files are processed in memory and discarded after the response is returned.

9.4 Blogger API

• Data accessed: post titles, content, tags and publication status of blogs you own.
• Purpose: on-page SEO analysis of existing posts and optional one-click publishing of PNX-generated drafts.
• Storage: not retained server-side.

9.5 Google Sheets API

• Data accessed: only the spreadsheets you explicitly select for keyword imports, content plans, or report exports.
• Scopes: file-scoped — never your entire Drive.
• Storage: ephemeral processing only.

9.6 YouTube Data API v3

• Data accessed: public video metadata (titles, descriptions, tags, view counts), channel info and search results — used for YouTube SEO analysis and keyword research.
• PII / private data: none.
• Storage: not retained server-side.

9.7 Revoking access

You can revoke PNX's access to any Google service at any time from myaccount.google.com/permissions. Revocation takes effect immediately and removes our ability to call any Google API on your behalf.