Privacy Policy

1. Introduction

Product Manager Hub ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Email address (required for authentication)
• Password (stored securely using industry-standard hashing)
• Full name
• Company name
• Company size (optional)

2.2 User Content

When you use the Service, we store the content you create, including:

• Products, epics, and stories
• Knowledge Hub items (notes, decisions, links, risks)
• Stakeholder information
• Releases and dependencies
• Any other data you input into the Service

2.3 AEO Audit Data

When you use the AEO Audit Tool (Professional tier) or free public audit:

• URLs you submit for auditing
• Email address (for free tier users)
• Audit results and scores
• Site analysis data
• Audit history and progress tracking

2.4 GEO Citation Tracking Data

When you use GEO Citation Tracking (Professional tier only):

• Domain and brand name
• Search queries used for tracking
• Citation results from AI platforms (ChatGPT, Claude, Gemini, Perplexity, Google AI Overview)
• Citation history and metrics

2.5 API Usage and Cost Tracking

We track API usage for monitoring and cost management:

• API provider (OpenAI, Anthropic, Google, Perplexity, SerpAPI)
• Service type and feature name
• Token usage (input, output, total)
• Number of API calls
• Estimated costs in USD
• Cache hit information
• Request and response metadata

2.6 Subscription Information

For paid subscriptions, we collect:

• Subscription tier (Professional, Enterprise)
• Subscription status (active, trialing, cancelled)
• Billing cycle (monthly, annual)
• Subscription expiration date

2.7 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Authentication tokens and session data

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your registration and manage your account
• Authenticate your identity and authorize access to features
• Store and process your content to provide the Service
• Process AI-powered features by sending your content to third-party AI services (OpenAI, Anthropic, Google)
• Run AEO audits and GEO citation tracking
• Track API usage and costs for monitoring and optimization
• Manage subscriptions and process payments
• Send you service-related communications (account updates, feature announcements)
• Send you marketing communications (with your consent, which you can opt out of)
• Respond to your inquiries and provide customer support
• Analyze usage patterns and improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Third-Party Services and Data Sharing

4.1 AI Service Providers

To provide AI-powered features, we send your content to third-party AI services:

• OpenAI: For ChatGPT citation tracking and some AI features
• Anthropic: For Claude citation tracking and AI features
• Google: For Gemini AI features and Google AI Overview tracking
• Perplexity: For Perplexity citation tracking
• SerpAPI: For Google AI Overview search results

When we send your content to these services, it is subject to their privacy policies. We recommend reviewing their privacy policies to understand how they handle your data.

4.2 Infrastructure and Service Providers

We use third-party services to operate the Service:

• Supabase: For database storage, authentication, and hosting
• Email Services: For sending transactional and marketing emails (Microsoft Graph API, Resend, or SMTP)
• Payment Processors: For processing subscription payments (when integrated)

4.3 Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, and email services. These providers are contractually obligated to protect your information.
• Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Protection of Rights: We may disclose information to protect our rights, property, or safety, or that of our users or others.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Row-level security (RLS) policies to isolate data by company
• Authentication and authorization controls
• Regular security assessments
• Access controls and audit logs

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account or cancel your subscription, we will:

• Retain your data for a reasonable period to allow for account recovery
• Delete or anonymize your personal information upon request, subject to legal obligations
• Retain aggregated and anonymized usage data for analytics and service improvement

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to and receive a copy of your personal information
• Rectification: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at ludwigad@productmanagerhub.io. We will respond to your request within a reasonable timeframe.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are used for:

• Authentication and session management
• Remembering your preferences
• Analyzing website usage

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at ludwigad@productmanagerhub.io, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we may also notify you via email or through the Service.

Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: ludwigad@productmanagerhub.io