Megal Publisher
Privacy Policy
Publication files, autosave and imports
Megal Publisher stores publication files on your local machine unless you choose to use autosave features tied to your account. Account, subscription, and autosave metadata are processed only for authentication, subscription enforcement, and restoring your latest layout state. Pack & Go temporarily sends the current publication to Megal solely to assemble the requested ZIP; the response is marked no-store, the temporary server ZIP is deleted immediately after packaging, and this workflow retains no copy.
Microsoft Publisher .pub import sends only the PUB file you choose to Megal's same-site importer. It reads the request upload temporary file in memory without retaining the original source file. The editable content created by a completed import is returned to your browser and becomes part of your publication.
Word, Excel and PowerPoint import sends only the Office file you choose to Megal's same-site importer. It reads the request upload temporary file without retaining the source or extracted parts, never fetches external Office relationships, and never runs macros. The editable content created by a completed import becomes part of your publication.
OneDrive
During the administrator OneDrive pilot, OneDrive access is optional and uses delegated permission to the Microsoft account you choose. OneDrive-bound publications bypass Megal account autosave and are opened from and saved back to your OneDrive file. Microsoft tokens stay in the current browser tab and are removed when you disconnect OneDrive or sign out of Megal Publisher.
Measurement, analytics and live presence
Megal Publisher uses first-party measurement to understand visits, marketing app-link and subscription call-to-action clicks, editor openings, first document changes, output-paywall views and subscription clicks, logins, registration starts and results, plan views, checkout starts and results, and .pub import starts and results. Traffic reports store only the broad device class Phone, Tablet or Desktop, not raw User-Agent strings or screen dimensions; a signed-in account retains its latest broad class. Signed-in journey events may be linked to the account inside the protected admin area so its last recorded activity, return visits and completed product steps can be understood. Megal also keeps a short-lived live-presence record so protected administrators can see people with a visible Megal Publisher tab during the last two minutes, grouped as non-registered, registered Free or registered paid. Administrator activity and recognised automated traffic are excluded. Non-registered browsers use pseudonymous hashed identifiers; signed-in entries are linked to the account name, email and current plan inside the protected admin area. The current site path, broad device class and whether the tab is being actively used or viewed may be shown. Live presence does not store a raw IP address, filename or publication content; a one-way IP fingerprint is used only to suppress internal and automated traffic, and raw presence rows are deleted after ten minutes. With your permission, Megal Publisher also uses Google Analytics. For a signed-in customer who permits analytics, Megal may retain the Google Analytics client identifier needed to send the first verified Professional subscription payment to Google Analytics from its server. The conversion contains the subscription plan, GBP value and a payment transaction reference for deduplication; it does not contain publication content. Completed registration and paid-subscription events are shared with Megal Publisher's linked Google Ads account for campaign measurement and bidding. Advertising storage, advertising user data and personalised advertising remain disabled. You can change your analytics choice at any time; denying analytics clears stored Google Analytics identifiers and prevents unsent subscription conversions from being delivered.
Megal AI
Megal AI generation is optional and requires a registered, signed-in Megal Publisher account. Free accounts receive a one-time trial of two image and two text generations; the trial does not renew. Professional costs £5.99 monthly or £59.99 yearly, includes 1,000 Megal AI Credits refreshed monthly on either paid billing option and provides access to the AI tools. Optional paid AI add-ons provide a separate monthly credit allowance and can be billed monthly or yearly; yearly service still refreshes credits monthly. The Professional and add-on allowances have separate refresh or renewal dates and do not roll over. For generation, your description is sent securely through Megal's server to OpenAI. Megal AI Template Designer may use OpenAI web search to retrieve public information about the requested subject and general design conventions. Megal uses that research to generate original wording, imagery and editable design objects; it does not deliberately copy a particular third-party template or web photograph. Generated output is embedded in your publication.
Your Megal account stores AI allowance counters and a transaction ledger so usage and refunds can be enforced. Development logs record action type, model, credit amount, timing and error information, but not the text of your prompt. OpenAI credentials remain on Megal's server and are never sent to the browser. Signing out blocks all AI access.
Mail Merge and browser-stored publishing resources
Mail Merge recipient rows, searches, filters and exclusions are read in your browser and kept only for the current editor session; they are not uploaded to Megal, included in the MPUB file, or written to account autosave. The source file and worksheet name, field names, formatting and merge layout may be stored so the list can be reconnected, without storing recipient values. Excel import downloads the SheetJS parser from its official CDN when required, but the workbook itself remains in your browser. If you explicitly enable HTTPS picture fields, your browser requests each image from the address in that field and the remote host may receive normal request information. Identity Sets are stored only in this browser profile and are never uploaded as a Megal-hosted contact database. Personal Brand Kits, Saved Templates and Building Blocks stay in browser storage, are not uploaded to Megal, and leave that storage only when you explicitly export or download a backup.