Privacy Policy
Last updated:
This notice covers the Pushizo service at pushizo.com, app.pushizo.com, api.pushizo.com, and docs.pushizo.com. Privacy requests go to support@pushizo.com. The legal name and address are published on the imprint page when company details are configured.
Roles
Pushizo acts in two roles.
Account data. Pushizo is the controller for dashboard accounts, organization membership, and billing records.
End-user data. Campaigns, subscribers, device tokens, events, and message content are processed on the customer’s instructions. The customer is the controller and Pushizo is the processor. The terms are in the Data Processing Agreement. Informing end users is the customer’s duty.
Account data we process
- Name, email, and a password hash. Plain passwords are not stored.
- Organization, membership, and role.
- Session and security cookies.
- The time and version of terms acceptance, and a separate marketing opt-in.
- Invoice records when payments are enabled. Card numbers are not stored by Pushizo; the payment provider processes them.
- Support correspondence.
Data processed for the customer
Data the customer loads in the dashboard or API, or that an SDK sends: subscriber id, email, phone, device token, events, segments, template and message content, delivery results, form responses, chat messages, and attachments.
Ad audience sync runs only after the customer connects an ad account and only for people who opted in to personalized ads. Email, phone, and advertising ids sent to the ad platform are SHA-256 hashes.
Purpose and basis
| Purpose | Basis |
|---|---|
| Opening the account and providing the service | Contract |
| Security, abuse prevention, audit logs | Legitimate interests and legal obligation |
| Legal retention | Legal obligation |
| Product announcements (separate checkbox, off by default) | Consent |
Cookies
The marketing site does not set cookies. The theme preference stays in browser local storage (hs-theme). Dashboard cookies are described in the Cookie Policy.
Transfers
Subprocessors and providers the customer connects are listed on Subprocessors. When a customer connects a channel, ads, payment, or AI provider, the data needed for that action is sent to that provider. That transfer is the customer’s instruction.
AI connectors
An account owner can connect an assistant such as Claude to https://api.pushizo.com/mcp with OAuth. The scopes approved on the consent screen apply. Read tools return campaigns, segments, templates, messages, and analytics summaries. Write tools only save drafts. They do not send or schedule messages. The rest of the chat is not sent to Pushizo.
The in-dashboard AI summary runs when the organization enables it and a provider key is configured. Email, phone, IBAN, and links are masked before the prompt. Prompts and responses are not stored by Pushizo.
Retention
- A deleted organization or app is permanently deleted after 30 days.
- Organization retention is set in the dashboard. Delivery records follow the shorter of that period and the product cap.
- With “remember me”, a session lasts at most 14 days. Without it, the session cookie is removed when the browser closes.
- Deleting a user removes tokens, detaches the user from events and deliveries, and deletes chat and form records.
Security
Queries are scoped by organization and app id. API keys, webhook secrets, and provider credentials are not stored or logged in plain text. The session cookie is HttpOnly. Report vulnerabilities to security@pushizo.com.
Your rights
For access, correction, deletion, restriction, objection, and portability under KVKK article 11 and the GDPR, write to support@pushizo.com. We answer after verifying your identity. You may complain to the Turkish Personal Data Protection Authority or the supervisory authority where you live.
If you are an end user of a Pushizo customer, contact that app first. Pushizo is the processor of that data.
Children
The service is for businesses that open an account. We do not knowingly collect data of children under 13. Customers agree, in the Acceptable Use Policy, not to upload children’s data or special-category data to ad platforms.
Changes
The date on this page changes when the text changes. A material change is reflected in the acceptance version recorded for new signups.