Privacy Policy

Overview

This Privacy Policy explains how PressMe collects, uses, and shares information when you use our services. We comply with the GDPR and the Norwegian Personal Data Act.

Controller

Blit AS is the controller for account, billing, and website data. When PressMe processes Customer Content and usage data on behalf of an Organization, Blit AS acts as a processor and the Organization acts as controller.

Organisasjonsnummer: 835 813 932
Forretningsadresse: Totengata 7, 0658 Oslo, Norway

If you have questions, use our contact form.

Data We Collect

• Account data such as name, email address, and authentication identifiers provided through Clerk.
• Organization data including workspace name, members, and roles.
• Usage data such as searches, saved results, and feature usage.
• Billing data handled by Stripe (we receive limited billing metadata, not full payment details).
• Press release details and sources we process to produce coverage results.
• Technical data like IP address, browser type, and logs used for security and performance.

TelemetryDeck Analytics

We use TelemetryDeck to collect privacy-friendly usage metrics, such as a pseudonymous device identifier and device type. This data is stored in the EEA. See the TelemetryDeck privacy policy for details.

Cookies

We only use essential cookies required for authentication and session management (Clerk). We do not use tracking cookies.

Legal Basis

We process personal data to provide the service (contract), comply with legal obligations, and improve the product based on our legitimate interests. Where required, we rely on consent for marketing communications.

How We Use Information

• Provide, maintain, and improve the PressMe service.
• Process searches and deliver coverage results.
• Manage accounts, billing, and support requests.
• Prevent abuse, secure the platform, and enforce policies.
• Communicate service updates and important notices.

Subprocessors and Sharing

We do not sell personal data. We share information with service providers that help us operate PressMe:

• Clerk (authentication and identity)
• Stripe (payments)
• Vercel (frontend application hosting)
• Google Cloud Platform (backend processing and file storage)
• Neon (primary database hosting)
• Resend (transactional email delivery)
• TelemetryDeck (product analytics, EEA storage)
• OpenAI (AI-assisted query planning and web search)

Not all providers receive personal data; access is limited to what is necessary for their role. Queries derived from Customer Content may also be transmitted to third-party search APIs to retrieve publicly available results.

A current list of subprocessors is available at https://www.pressme.app/subprocessors.

International Transfers

PressMe uses providers that may process personal data in the United States and other countries. Where required, we rely on the EU Commission's Standard Contractual Clauses (Decision (EU) 2021/914) and, where applicable, the EU-U.S. Data Privacy Framework. We implement supplementary measures where needed.

Data Retention

We keep data for as long as your account or organization is active. When an organization is deleted, we delete associated data. We retain logs for up to 30 days, backups for up to 30 days, and billing records for up to 5 years to meet accounting obligations.

Our Data Processing Addendum is available on request via our contact form. See https://www.pressme.app/dpa for details.

Your Rights

• Request access to your personal data.
• Request correction or deletion of data.
• Object to or restrict processing.
• Request data portability where applicable.
• Submit a complaint to the Norwegian Data Protection Authority (Datatilsynet).

To make a request, use our contact form.

Security

We use reasonable administrative and technical safeguards to protect your data, but no system is 100% secure. Please keep your account credentials safe.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy and revise the date above.