Does PubNub require disclosure in my privacy policy?

Yes. PubNub processes user data including messages, presence information, and channel membership, making it a third-party data processor that must be disclosed in your privacy policy. This is required under GDPR Article 28 and similar data protection regulations. You must inform users that their communications pass through PubNub's infrastructure.

What specific data does PubNub collect from users?

PubNub collects published messages and their payloads, user presence status and state data, channel membership information, and message history when persistence is enabled. The exact data depends on what your application sends through PubNub's pub/sub channels. All messages transit through PubNub's servers for real-time delivery.

Does PubNub require a cookie consent banner?

No. PubNub does not use cookies. However, you still need to disclose PubNub in your privacy policy because it processes personal data through messages and presence information, even without cookies. Cookie consent is separate from notifying users about third-party data processors.

Who is the data processor and where is my data transferred?

PubNub Inc., a United States-based company, is the data processor. Data is transferred to and processed on PubNub's global edge network infrastructure. PubNub is SOC 2 Type II certified and GDPR and HIPAA compliant. For EU users, ensure appropriate data transfer safeguards are in place and review PubNub's privacy policy at https://www.pubnub.com/privacy-policy/.

Social & Communication

Privacy policy clauses for PubNub

PubNub is a real-time messaging infrastructure that powers live communication features like notifications, chat, and presence indicators. Websites use PubNub to deliver instant messages and state updates across user devices through a global edge network.

Scan my site free →Copy sample clause ↓

Free scan · No signup · Results in 60 seconds

What data PubNub collects

Your privacy policy must disclose each of the following data types when you use PubNub.

Published messages and payloads

User presence and state data

Channel membership

Message persistence (when enabled)

When does PubNub trigger privacy obligations?

Installation triggers immediate obligations

The moment you integrate PubNub's SDK into your app or website, you begin collecting and transmitting user data through a third-party processor. PubNub collects:

–Message content and payloads — the actual text, objects, or structured data your users publish
–User presence data — online/offline status, timestamps

Privacy policy clauses for PubNub

What data PubNub collects

When does PubNub trigger privacy obligations?

Installation triggers immediate obligations

Jurisdiction thresholds

First concrete step

Where data goes

Common compliance pitfalls

Pitfall 1: Not disclosing real-time message transmission

Pitfall 2: Forgetting the DPA or using outdated Standard Contractual Clauses (SCCs)

Pitfall 3: Enabling message persistence without retention disclosure

Legal note

Sample privacy policy clause

What regulators look for

DPA enforcement priorities

Initial audit focus

Frequently asked questions

Does PubNub require disclosure in my privacy policy?

What specific data does PubNub collect from users?

Does PubNub require a cookie consent banner?

Who is the data processor and where is my data transferred?

Don't ship without Bandit.