Pressifo ("Pressifo", "we", "us") provides a PR automation platform that helps customers discover journalists, draft press releases and send outreach. This policy explains what personal data we process, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Pressifo is a product of Data Professionals Ltd, a company registered in England & Wales (Company No. 12030418, VAT No. GB 411 3471 40). We are the data controller for the personal data described in this policy. You can reach us at hello@pressifo.com or by writing to our registered office (available on request).
2. Data we process
- Account data: name, work email, hashed password, workspace name, billing address, VAT number.
- Content you upload: your website URL, brand assets, drafts, campaigns, and any documents you attach.
- Journalist contact data: business email, outlet, beat, published articles and public social profiles, sourced from publicly available pages and licensed data providers.
- Outreach engagement: email opens, clicks, bounces, unsubscribes and delivery metadata, used to measure performance and honour opt-outs.
- Technical data: IP address, device / browser identifiers, log timestamps, and cookies (see our Cookie Policy).
- Payment data: handled directly by Stripe. We never see or store your card number.
3. Why we process it and our lawful basis
- Deliver the service (Art. 6(1)(b) — contract): create your account, run generations, send the emails you approve.
- Journalist discovery (Art. 6(1)(f) — legitimate interests): we hold professional contact details of journalists so our customers can send them relevant, targeted pitches. A Legitimate Interests Assessment is on file. Journalists may object or request erasure at any time via privacy@pressifo.com or the unsubscribe link on any Pressifo-sent email.
- Billing (Art. 6(1)(b) and 6(1)(c) — legal obligation): to charge subscriptions and meet tax / accounting duties.
- Product analytics and marketing (Art. 6(1)(a) — consent): only where you accept non-essential cookies.
- Security and fraud prevention (Art. 6(1)(f)): logging, rate limiting, abuse detection.
4. AI processing
Draft press releases and pitch emails are generated by third-party large language models on your instruction. Prompts and outputs are transmitted to those providers under contractual data protection terms. We do not permit them to train foundation models on your content. You remain the controller of the drafts you produce.
5. Who we share data with
- Infrastructure: Cloudflare (hosting/CDN), Supabase (database + auth), Resend (email delivery), Stripe (payments).
- AI providers: used to generate copy and embeddings on your instruction.
- Analytics: Google Analytics 4 — only if you consent.
- Authorities: where required by law, court order or to defend legal rights.
A current sub-processor list is available on request. Some providers process data outside the UK; transfers rely on the UK International Data Transfer Addendum to the EU SCCs or UK adequacy regulations.
6. How long we keep data
- Account data: for the life of your subscription + 12 months.
- Billing records: 6 years (UK tax law).
- Outreach + engagement logs: 24 months, then aggregated.
- Suppression list (unsubscribes / objections): kept indefinitely so we do not re-contact you.
7. Your rights
You have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent at any time. Contact privacy@pressifo.com. We respond within 30 days. You may also complain to the UK Information Commissioner's Office (ico.org.uk), but we would appreciate the chance to resolve concerns first.
8. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted, logged and reviewed. We run vulnerability scans and patch promptly. No system is perfectly secure; report suspected issues to security@pressifo.com.
9. Children
Pressifo is a B2B service and is not directed at anyone under 18.
10. Changes
We will post updates on this page and, for material changes, notify account holders by email at least 14 days in advance.