Privacy Policy

Account Information

• Name (first and last)
• Email address
• Password (encrypted)
• Profile picture (optional)
• Date of birth (to verify you're 13+)
• Gender (optional)
• Country/location

Portfolio Content

• Videos you upload
• Images and graphics
• Text content (bio, descriptions, rate cards)
• Social media handles (Instagram, TikTok, YouTube, etc.)
• Brand collaboration history
• Work samples and case studies

Payment Information

• Billing name and address
• Payment method details (processed by Stripe - we don't store full card numbers)
• Transaction history
• Subscription plan details

Communications

• Messages you send us (support emails, feedback)
• Survey responses
• Newsletter preferences
• Email correspondence with brands (if you connect your inbox)

When You Use Pressbook

• IP address
• Browser type and version
• Operating system
• Device type (mobile, tablet, desktop)
• Pages you visit and features you use
• Time and date of visits
• Referring website
• Click behavior and navigation patterns

Cookies and Similar Technologies

• Session cookies (to keep you logged in)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand how you use the Service)
• Authentication tokens

When someone visits your portfolio, we collect

• IP address
• Geographic location (city, country, timezone)
• Company/organization name (when detectable from IP address)
• Device type, browser, and operating system
• Pages viewed and videos watched
• Time spent on portfolio
• Actions taken (contact clicks, social link clicks, rate card views)
• Referral source (where they came from)
• UTM tracking parameters

If you connect your email account (Gmail, Outlook)

• Your email address
• Access tokens to send/read emails
• Emails we identify as UGC collaboration opportunities
• Email metadata (sender, subject, date, recipient)
• Email open and click tracking data
• Brand contact information from your inbox

BigDataCloud

• IP geolocation data (city, country, timezone)
• ISP and organization information
• Network details

Stripe

• Payment confirmation
• Transaction status
• Billing information

Email Providers (Gmail, Outlook)

• Email content (only collaboration-related emails)
• Contact lists (only when you authorize)
• Calendar data (if you use scheduling features)

Social Media Platforms

• Public profile information (if you link your accounts)
• Follower counts and engagement metrics (public data only)

Consent

• Marketing emails and newsletters (you can withdraw consent anytime)
• Email inbox scanning for collaboration opportunities
• Cookie usage (except essential cookies)
• Connecting third-party services

Contract Performance

• Providing the Service you signed up for
• Processing payments
• Hosting your portfolio
• Providing analytics

Legitimate Interests

• Improving the Service
• Preventing fraud and abuse
• Analyzing usage patterns
• Marketing our Service (where permitted)
• Customer support

Legal Obligations

• Complying with tax and accounting requirements
• Responding to legal requests
• Enforcing our rights

Supabase (Database & Authentication)

• Stores all your account data, portfolio content, and analytics
• Servers located in EU and US regions

Stripe (Payment Processing)

• Processes subscription payments
• Stores billing information

Mux (Video Hosting)

• Hosts and transcodes your videos
• Delivers video content to portfolio visitors

BigDataCloud (IP Geolocation)

• Identifies visitor location and company from IP addresses

Clearbit (Company Enrichment - Optional)

• Enriches company data for identified visitors

Resend (Email Delivery)

• Sends portfolio sharing emails
• Tracks email opens and clicks

Vercel (Hosting)

• Hosts the Pressbook application
• Content delivery network

OpenAI/Anthropic Claude (AI Analysis)

• Analyzes emails to identify collaboration opportunities
• Processes email content you authorize us to scan

Klaviyo (Email Marketing)

• Sends marketing emails and newsletters (if you opt in)
• Manages email preferences

Meta Ads (Facebook/Instagram Advertising)

• Delivers targeted advertisements
• Tracks ad performance

Google Ads (Advertising)

• Delivers targeted advertisements
• Tracks ad performance

When someone visits your portfolio, they can see

• Your public profile information (name, photo, bio)
• Your portfolio content (videos, images, work samples)
• Your social media handles (if you choose to display them)
• Your rate card (if you make it visible)
• Contact information you choose to display
• You control what information is visible on your portfolio.

When you share your portfolio via email

• Recipients receive the email from your connected account or from

We may disclose your information if required to

• Comply with legal obligations (court orders, subpoenas)
• Protect our rights and property
• Prevent fraud or abuse
• Protect the safety of users or the public
• Respond to government requests

Pressbook is based in the United Kingdom. Your information may be transferred to and processed in

• European Union
• (Supabase EU region, some service providers)
• United States
• (Mux, Stripe, OpenAI, Meta, Google, Vercel)

When we transfer data outside the UK/EU, we ensure appropriate safeguards are in place

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Service providers certified under Privacy Shield successor frameworks
• Adequacy decisions by the UK/EU authorities

Active accounts

• Retained while your account is active

Deleted accounts

• 30-day grace period, then permanently deleted

Backups

• May persist in backups for up to 90 days after deletion

While active

• Retained indefinitely

After deletion

• Deleted within 30 days (may persist in backups for 90 days)

Visitor analytics

• Retained indefinitely for historical reporting

IP addresses

• Retained indefinitely (may be anonymized after 12 months)

Session data

• Retained indefinitely

Connected accounts

• Access tokens retained while connected

Synced emails

• Retained indefinitely while connected

After disconnection

• Deleted within 30 days

Email tracking data

• Retained indefinitely for analytics

Sent emails

• Tracking records retained indefinitely

Transaction history

• Retained for 7 years (tax/accounting requirements)

Payment methods

• Stored by Stripe until you remove them

Support emails

• Retained for 3 years

Marketing emails

• Retained until you unsubscribe
• You can request deletion of your data at any time by contacting

Security Measures

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and authentication
• Secure API endpoints
• Regular backups
• Monitoring for suspicious activity

Employee Access

• Employees access data only when necessary for support or operations
• Background checks for employees with data access
• Training on data protection

Third-Party Security

• All service providers maintain SOC 2 or equivalent certifications
• Regular vendor security assessments

Users aged 13-17

• Can create accounts and use the Service
• No parental consent required
• Same terms apply as adult users

We will send you emails necessary to provide the Service

• Account creation and verification
• Password resets
• Payment confirmations and receipts
• Service announcements
• Security alerts
• You cannot opt out of transactional emails.

With your consent, we may send

• Product updates and new features
• Tips and best practices
• Newsletter and blog updates
• Promotional offers
• Event invitations

Opting Out

• Click "Unsubscribe" in any marketing email
• Update preferences in your account settings
• Email

Essential Cookies (Cannot be Disabled)

• Authentication cookies (keep you logged in)
• Security cookies (prevent fraud)
• Load balancing cookies

Analytics Cookies

• Track how you use the Service
• Measure feature usage
• Identify bugs and issues
• Used by us and third-party analytics providers

Preference Cookies

• Remember your settings
• Store language preferences
• Remember display options

Advertising Cookies

• Deliver relevant ads (Meta Ads, Google Ads)
• Measure ad effectiveness
• Create custom audiences
• Retarget visitors

Google Analytics

• Website analytics

Meta Pixel

• Facebook/Instagram advertising

Google Ads

• Google advertising

Stripe

• Payment processing

Browser Settings

• Most browsers allow you to refuse or delete cookies
• See your browser's help section for instructions
• Note: Disabling cookies may limit Service functionality

Some browsers have "Do Not Track" features. When enabled, we will

• Not set analytics or advertising cookies
• Not track IP addresses or identify companies
• Still provide the Service with reduced functionality

When someone visits your portfolio, we use

• Session cookies
• to track their visit
• Visitor ID cookies
• to identify returning visitors (stored in localStorage)
• Analytics tracking
• to collect engagement data

We analyze

• Emails from business domains (not personal emails)
• Subject lines and email content
• Sender information
• Emails containing keywords like "collaboration," "partnership," "campaign," "UGC"

We do NOT scan

• Personal emails from friends and family
• Emails from personal domains (Gmail, Yahoo, Hotmail)
• Emails unrelated to UGC work
• Emails you mark as private

We use OpenAI and Anthropic Claude to analyze emails and extract

• Brand names
• Collaboration opportunities
• Budget/rate information
• Deliverable requirements
• Timeline and deadlines

You can

• Disconnect your email at any time
• Choose which emails we scan
• Mark emails as "not an opportunity"
• Delete synced emails

Right to Know

• What personal information we collect
• How we use it
• Who we share it with

Right to Delete

• Request deletion of your personal information

Right to Opt-Out

• Opt out of the "sale" of personal information (we do not sell data)

Right to Non-Discrimination

• We will not discriminate against you for exercising your rights

To exercise these rights

• Email

We may update this Privacy Policy from time to time. When we make changes

• We will update the "Last Updated" date
• We will notify you via email (if you have an account)
• We may display a notice on the Service
• Material changes will be communicated at least 30 days in advance

Location

• United Kingdom