1. Introduction
PressKit (“we”, “us”, “our”) operates PressKit.space. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
2. Information We Collect
Information you provide
- Account information: email address, display name, password (hashed)
- Content: text, images, links, and media you upload to your press kits
- Payment information: processed by PayPal (we do not store card details)
- Communications: messages sent through our contact form
Information collected automatically
- Usage data: pages visited, features used, timestamps
- Technical data: IP address (anonymized), browser type, device type
- Analytics on published kits: page views, referrer data (anonymized)
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process subscriptions and payments
- To send transactional emails (verification, password reset, billing)
- To provide analytics on your published press kits
- To respond to support requests and contact form messages
- To detect and prevent abuse, fraud, or security issues
We do not use your personal information for advertising. We do not sell your data.
4. Data Sharing
We share your data only with:
- PayPal: For payment processing
- Infrastructure providers: For hosting and operating the Service
- Legal requirements: When required by law or court order
5. Data Storage & Security
Your data is stored on servers in the European Union. We use:
- TLS encryption for all data in transit
- Bcrypt hashing for passwords
- Secure, short-lived JWT tokens for authentication
- Restricted access to production systems
6. Data Retention
We retain your data for as long as your account is active. Upon deletion, your data is removed within 30 days, except where retention is required by law.
7. Your Rights (GDPR)
If you are in the EEA, you have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Restrict processing
- Portability: Receive your data in a structured format
- Objection: Object to processing
Contact privacy@presskit.space to exercise these rights. We respond within 30 days.
8. Third-Party Embeds
Published press kits may include embedded content from Spotify, SoundCloud, YouTube, and other services. These are subject to their respective privacy policies.
9. Children's Privacy
The Service is not intended for users under 16. We do not knowingly collect data from children.
10. Changes
We may update this policy. Material changes will be communicated via email or in-app notice.
11. Contact
For privacy questions: privacy@presskit.space