Privacy Policy

1. Introduction

AppToPub ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service to convert Poe Canvas applications into standalone web applications.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

• Poe API Keys: Required to enable AI functionality in your converted applications
• HTML Content: The Poe Canvas HTML code you upload or paste for conversion
• File Names: Original filenames of uploaded HTML files

2.2 Automatically Collected Information

• IP Address: Used for rate limiting to prevent abuse (stored as hashed values)
• Browser Information: Basic browser type and version for compatibility
• Access Logs: Timestamps and basic request information for security monitoring

3. How We Use Your Information

• Service Provision: To convert your Canvas apps and enable API functionality
• Security: To protect against abuse, fraud, and unauthorized access
• Rate Limiting: To ensure fair usage and prevent service abuse
• Service Improvement: To identify and fix technical issues

We do not use your information for marketing, advertising, or sell it to third parties.

4. API Key Storage and Security

Your Poe API key receives special handling due to its sensitive nature:

• Encryption: API keys are encrypted using AES-256 encryption before storage
• Limited Retention: Keys are automatically deleted when deployments expire (72 hours)
• Access Control: Keys are only decrypted server-side when proxying API requests
• No Client Exposure: API keys are never exposed to client-side code or browsers
• Secure Transmission: All data is transmitted over HTTPS/TLS encryption

5. Data Retention

6. Cookies and Tracking

We use minimal cookies and tracking technologies:

6.1 Essential Cookies

We may use essential cookies required for the basic functionality of the service. These cannot be disabled as they are necessary for the service to work.

6.2 What We Don't Use

• No advertising or marketing cookies
• No third-party analytics tracking (e.g., Google Analytics)
• No social media tracking pixels
• No cross-site tracking

7. Third-Party Services

Our service interacts with the following third-party services:

• Poe API (Quora, Inc.): Your API key is used to make requests to Poe's servers. These requests are subject to Poe's Privacy Policy.
• Cloud Infrastructure: We use cloud hosting services that may process data in accordance with their own privacy policies and security certifications.

8. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and updates
• Rate limiting to prevent abuse
• Automatic data expiration and cleanup

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request information about data we hold about you
• Deletion: Request deletion of your data (note: deployments auto-delete after 72 hours)
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us through the channels listed on our website.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the appropriate channels listed on our website.