Version 3.0 | Effective 2 August 2026
Pubrio Limited ("Pubrio", "we", "our" or "us") operates a business intelligence and data platform. Our customers use it to identify companies and business contacts that may be interested in what they sell, and to understand the technology and market signals behind the websites they visit.
This policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. It covers our website at pubrio.com, our web application, our APIs, and the Pubrio browser extension. Together we call these the "Service".
This policy covers two groups of people, and the difference matters. Some of it is about our users — the people who create a Pubrio account and use the Service. The rest is about business professionals whose contact information appears in our database, who are usually not our users and did not give their information to us directly. Section 6 is written for that second group, and everything in it applies whether or not you have ever heard of us before today.
If you disagree with this policy, please do not use the Service. If you want your information removed from our database, you do not need an account to ask — see Section 6.
Pubrio Limited is a company registered in the Abu Dhabi Global Market (ADGM), United Arab Emirates, at 15th Floor, ADGM Square, Al Maryah Island, Abu Dhabi. We are the controller of the personal data described in this policy, except where we say otherwise in Section 12. You can reach our privacy team at [email protected]. We answer privacy requests at that address, and we do not require you to create an account to make one.
If you are writing to us about information we hold about you and you are not a Pubrio user, please say so — it helps us route your request correctly and answer it faster.
Pubrio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer information received from Google APIs to any other application, and we do not use it for advertising, credit assessment, or lending purposes.
When you create an account, buy a subscription or contact us, you give us information directly. This includes:
You do not have to give us any of this, but we cannot provide an account without account details, and we cannot take payment without billing details.
When you visit pubrio.com or use the web application, we and our analytics providers collect information about the visit using cookies, server logs and similar technologies. This includes your IP address, device and browser type, operating system, language, referring page, the pages you view and what you click.
We use this to keep the Service working, to understand which parts of it people use, to detect fraud and abuse, and — where you have agreed to it — to measure and target our own advertising. You can control cookies through our cookie banner and through your browser settings. Blocking cookies will not stop you using the Service, but some features may not work as intended.
The Pubrio browser extension is optional, and what it collects is different from the rest of the Service. It runs only after you install it and accept the disclosure shown on first run. This section describes everything it sends to us.
The extension identifies the technologies a website is built with. It reads the page you are on — its markup, scripts, stylesheets, meta tags, response headers and the cookies the page itself can already see — and matches them against a database of technology fingerprints bundled inside the extension. This matching happens on your device.
When data sharing is on, the extension then sends us the site's domain, your browser language, and a short, fixed list of the site's own descriptive meta tags, together with the technologies it identified, associated with a randomly generated installation identifier. We record the country the request came from, derived from your IP address at the point of receipt; we do not store the IP address itself.
We use this for two things. The first is keeping our technology coverage current. The second is our market intelligence datasets: aggregated across everyone who has sharing on, domain-and-country records improve the accuracy and coverage of the signals our customers use to identify companies entering new markets. If you have sharing on, your contribution is part of that aggregate, and the signals you see are built from other people in the same position.
It does not send the address of the page you are on beyond the domain, and specifically not the path or the query string. It does not send the page title, the page content, what you type, the page that referred you, your IP-derived location, your screen size, your time zone, your device model or any other device characteristic. It does not read cookies belonging to any website other than Pubrio. It does not operate on local, internal, staging or development hostnames, or on private IP addresses.
You can switch data sharing off at any time in the extension's settings, and you can disable the extension for individual websites. Switching it off stops this collection entirely; the extension continues to identify technologies for you on your own device.
When you open the Pubrio panel while viewing a LinkedIn profile, the extension reads the profile you are looking at and sends it to us so that we can return that person's company and business contact details. What it reads is the person's name, headline, profile address, profile images, employment history, education, location, and follower and connection counts.
This is personal data about the person whose profile you are viewing, not about you. Section 6 explains the basis on which we process it and what that person can ask us to do. If you are that person and you would rather not be in our database, you can tell us directly at [email protected] — you do not need to be a customer, and you do not need to have used the extension.
If you are signed in to Pubrio, the extension reads your Pubrio session cookie so that you do not have to sign in a second time. It reads no other website's cookies for this purpose.
Our use of information collected by the browser extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide and improve the features described above and in our store listing. We do not sell it, we do not use it for advertising, and we do not use it to assess creditworthiness or for lending purposes.
This section is for you if your professional details appear in our database and you have never been a Pubrio customer. Most of the people in our database are in this position. We are writing this section to tell you what we hold, where we got it, why we are allowed to hold it, and how to make us stop.
Professional information only: your name, job title, employer, professional biography, employment and education history, business email address, business telephone number, business social profile addresses, professional photograph and the city or country in which you work. We do not seek out or knowingly hold information about your personal life, your home address, your personal email or phone, your health, your finances, your beliefs, or any of the special categories of data that data protection law treats as sensitive.
If you ask us where a specific record about you came from, we will tell you the actual source of that record. We will not answer with a general statement that it came from "publicly available sources".
Where the GDPR or UK GDPR applies, we rely on our legitimate interests, and those of our customers, in enabling business-to-business communication (Article 6(1)(f)). We have assessed that interest against your rights and concluded that it is proportionate because the data is professional rather than private, because the use is business-to-business rather than consumer marketing, and because you can object at any time and we will act on it. You can ask us for a summary of that assessment.
We do not rely on legitimate interests where the information was restricted by you to a limited audience. If a professional profile is visible only to a person's own connections or to signed-in members of a particular network, we treat that as outside what you would reasonably expect and we do not add it to our database.
You can ask us to show you what we hold about you, correct it, delete it, restrict how we use it, send it to you in a portable format, or stop using it altogether. Email [email protected]. We will respond within 30 days, and we will not charge you for it.
If you ask us to stop, we will suppress your record so that it is no longer returned to any customer. To make that stick we keep a minimal record of the identifiers you asked us to suppress — otherwise we would simply re-acquire your details from a source and start again. That suppression record is used for nothing else.
Suppressing your record with us does not remove it from the systems of customers who obtained it before you asked, or from other data providers. We will tell you which customers received your record in the twelve months before your request if you ask us to.
We use the information described above to:
We may produce aggregated or de-identified statistics — for example, how many websites in a market use a given technology — and use and publish those without restriction. Where information has been aggregated or de-identified so that it can no longer reasonably be linked to a person, it is no longer personal data and this policy does not restrict our use of it. We do not attempt to re-identify it.
We do not use the personal data of people who are not our users to train general-purpose artificial intelligence models offered to third parties.
We share information in the following circumstances, and no others:
We do not sell the personal data of our own users. We do supply business contact data to our customers for a fee, which some laws — including California's — define as a "sale" or as "sharing". Section 13 explains what that means for you and how to opt out.
We advertise our own products, and we work with advertising and analytics providers who may set cookies on our website to measure our campaigns and show our ads to people who have visited us. This applies to our website only. It does not apply to the browser extension, and no information collected by the extension is used for advertising.
You can opt out of interest-based advertising from many companies through the Network Advertising Initiative and Digital Advertising Alliance opt-out pages, and through your browser's cookie controls. These opt-outs are stored per browser, so setting one does not carry across to a different browser or device, and they stop targeting rather than advertising as such.
We honour the Global Privacy Control signal where your browser sends one, and treat it as an opt-out of sale and sharing.
We keep information only as long as we have a reason to, and we set an outer limit for each kind:
We may keep information longer where we need it to resolve a dispute, enforce our agreements, or comply with a legal obligation or a preservation order. Where we do, we keep only what that purpose requires.
You have the right to access your personal data, to have it corrected or erased, to restrict or object to how we process it, to receive it in a portable format, and — where we rely on consent — to withdraw that consent at any time. Withdrawing consent does not affect processing that already happened.
Our legal bases are: performance of a contract, for running your account and providing the Service; legitimate interests, for maintaining and securing the Service, for our own direct marketing, and for compiling and supplying business contact data as described in Section 6; consent, for optional cookies and where the law otherwise requires it; and legal obligation, where a law requires us to keep or produce information.
Where you object to processing based on legitimate interests, we will stop unless we have compelling grounds that override your rights. For direct marketing there is no balancing test — if you object, we stop.
Where we handle information on behalf of a customer — for example, a contact list they uploaded, or messages they asked us to send — that customer is the controller and we are the processor. Send those requests to the customer. If you are not sure which applies, write to us at [email protected] and we will tell you, and pass your request on where we can.
You may complain to your local supervisory authority. We would rather hear from you first at [email protected] so that we have a chance to put things right, but that is your choice and not a precondition.
Depending on where you live, you may have the right to know what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties we disclosed it to; to request deletion or correction; to opt out of the sale or sharing of your personal information; and not to be discriminated against for exercising any of these rights.
We supply business contact information to our customers for a fee. Under the California Consumer Privacy Act this is a "sale". To opt out, email [email protected] or send a Global Privacy Control signal from your browser; we honour both. We do not sell or share the personal information of anyone we know to be under 16.
We do not collect or process sensitive personal information as that term is defined under California law, and so we do not offer a separate right to limit its use.
You may use an authorised agent to make a request. We will ask for proof that you authorised them, and we may need to verify your identity before we act — for a deletion request, to a reasonably high degree of certainty, because deletion cannot be undone.
We are registered in the Abu Dhabi Global Market, so our processing is governed by the ADGM Data Protection Regulations 2021 and supervised by the ADGM Commissioner of Data Protection. Those Regulations are closely modelled on the GDPR, and the rights they give you are equivalent to those in Section 12: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where consent is what we rely on.
Exercise them the same way — [email protected]. If you are not satisfied with how we handle your request, you may complain to the ADGM Office of Data Protection.
Where we are registered does not decide which law protects you. These regimes apply based on where you are and what we do, not on where we are incorporated, and more than one can apply at the same time.
So: if you are in the EEA, the UK or Switzerland, the GDPR or UK GDPR applies to us because we offer services to people there and monitor behaviour there, and Section 12 is yours. If you are in California or another US state with a privacy statute, that statute applies to us on the same basis, and Section 13 is yours. If you are in the UAE, this section is yours. We do not treat our registration in the ADGM as a reason to give you less than any of those regimes require, and we apply the strongest applicable standard where they overlap.
We encrypt data in transit and at rest, restrict internal access to those who need it for their work, log administrative access, require multi-factor authentication for our own staff, and review our controls regularly. No system is perfectly secure and we do not claim otherwise.
Please help by using a strong and unique password, keeping it to yourself, enabling multi-factor authentication where we offer it, and telling us at [email protected] if you think something is wrong. If a breach affects your personal data and the law requires us to notify you, we will, without undue delay.
We are established in the Abu Dhabi Global Market and we use service providers in several countries, including the United Arab Emirates, Singapore, the European Economic Area and the United States. Your information may therefore be processed outside the country you live in, including in countries whose data protection laws differ from your own.
Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision where one applies. Where we transfer personal data out of the ADGM, we rely on an adequacy determination by the ADGM Commissioner of Data Protection, or on appropriate safeguards under the ADGM Data Protection Regulations 2021. You can request a copy of the safeguards we use at [email protected].
The Service is for business use and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to [email protected] and we will delete it.
The Service links to and integrates with third-party websites and applications. What those parties do with your information is governed by their policies, not ours, and we are not responsible for their practices. Please read them before you connect an account or follow a link.
We update this policy as the Service and the law change. When we make a material change we will post the updated policy here with a new version number and effective date, and — where the change materially affects how we use information we already hold — we will give notice through the Service or by email at least 30 days before it takes effect, so you have time to object or to close your account.
Changes that only describe existing practice more clearly take effect when posted.
Privacy questions, requests and complaints: [email protected]. Security reports: [email protected]. We aim to acknowledge within 5 working days and to resolve within 30 days.
Pubrio Limited, 15th Floor, ADGM Square, Al Maryah Island, Abu Dhabi, United Arab Emirates.
Pubrio turns expansion signals across 200+ markets into one live graph, so revenue teams see which companies are entering new markets, and act on the timing.
© 2026 Pubrio. All rights reserved.