Privacy policy
What we collect, why, and who else can see it.
Last updated October 26, 2026
What we collect
When you place an order we collect your email address, your website, the type of announcement you pick, and either the press release you upload (a .docx file) or a Google Docs link. We also record which package and add-ons you selected. You may give us a name, a company name or a brief; if you do, we keep them with the order.
If you create an account we store your name, your email address and a hashed password. If you sign in with Google instead, we receive the name, email address and profile picture Google shares with us. We use cookies to keep you signed in. You do not need an account to order.
Card payments are handled by Stripe. We never see or store your card number. We receive your order total, whether it was paid, and the email address on the payment.
When you look up an order, place an order, start checkout or use one of our free tools, we record the time and a one-way hash of your IP address. This exists to rate-limit abuse, not to profile you, and it is not linked to an advertising identity.
When you use one of our free tools we also keep what you entered (for example the domain you checked or the announcement you described), the time, your approximate city and country, and your email address if you are signed in. We use this to see how the tools are used and to improve them. It is kept for 90 days.
If you ask for a free editor review of a press release draft, we keep your email address, the draft and the template you used so we can reply, and we keep them until you ask us to delete them. If you tick the box for tips, we may also email you new templates and advice now and then; every such email has an unsubscribe link.
When you use the order form we save your progress as you go, even if you do not finish: the steps you reach, the package and add-ons you choose, the email address and website once you type them, how you arrived (the referring site, campaign tags and whether you came from one of our ads), your approximate city and country, and your device type. We use it to see where the order form loses people and, when you have left an email address, to follow up about the order you started. In the European Union, the United Kingdom and Switzerland we do not keep the email address or website unless you place the order. We do not store your IP address. Visits that do not end in an order are deleted after 90 days.
The press release editor keeps your draft in your own browser's local storage. That draft is not transmitted to us unless you place an order.
We do not sell personal information.
Why we collect it
To write, distribute and report on the announcement you ordered. To take payment. To contact you about that order. To let you check its status without an account, which is why the reference and the email must match. To keep the site and its free tools available and fair to everyone.
Our support assistant
Messages you type into the support chat are stored in our database so we can answer and follow up. They are processed by OpenAI to generate replies, so please do not put passwords or card details in the chat.
If you ask to speak to a person, the conversation is handed to tawk.to, our live chat provider, and tawk.to's own privacy policy applies from that point.
Analytics and cookies
We use Google Analytics to understand how the site is used: which pages are viewed, on what kind of device, from roughly which country, and how visitors arrived. It sets cookies and sends this data to Google.
In the European Union, the United Kingdom and Switzerland, analytics storage is switched off by default: no analytics cookies are set there, and Google receives only limited signals that cannot identify you. We do not use Google Analytics to personalise ads, and we have turned that feature off.
We advertise on Google, and we use Google Ads conversion measurement to learn which ads lead to an order. When you arrive from one of our ads, Google may set a cookie. When you add a package to your order, start checkout or pay, we tell Google that step happened, with the order total and an order id once there is one. We never send your name or card details.
To match an order to the ad click that led to it, Google's tag also sends the email address you enter in the order form, hashed: scrambled in your browser into a code that Google can compare with the hashed email addresses of its own signed-in users but cannot turn back into your address. This is Google's enhanced conversions feature, and Google uses it only to measure our ads.
Outside the European Union, the United Kingdom and Switzerland this measurement is on by default; inside them it is off, so no advertising cookie is set, no hashed email is sent and no click is tied to an order. We do not use any of it to build ad audiences or to personalise ads.
In every region you can opt out with Google's Analytics opt-out browser add-on, or by blocking cookies in your browser. Analytics does not run on our internal admin pages. The other cookies we set are the ones needed to keep you signed in.
Who else processes it
Neon hosts our database. Vercel hosts and serves the site and stores uploaded release files. Stripe processes payments. Google provides analytics, advertising measurement and, if you choose it, sign-in. tawk.to provides live chat after a handoff.
OpenAI processes the text you enter into our AI tools (including the release drafter, which also reads the public text of the website you give it) and the messages you type into the support chat. Your uploaded release and your order details are not sent to it. Our DR, traffic and link tools send the domain or address you enter to Ahrefs, Similarweb or to the site itself.
Your announcement is, by design, distributed to publications in our network once you approve it. That content becomes public.
How long we keep it
Order records and uploaded release files are kept for as long as we need them for accounting, delivery and dispute resolution. Rate-limiting records are short-lived and exist only to limit abuse.
Your rights
Write to team@presshalo.com to ask for a copy of your data, a correction, or deletion. We will respond within 30 days. Deletion requests cannot un-publish an announcement that has already been distributed.
[TO CONFIRM] If you are in the UK or EU, your rights under UK GDPR / GDPR apply and the data controller is [legal entity name and registered address].
Changes
We will update the date at the top of this page when this policy changes. Material changes affecting existing orders will be sent to the email address on the order.