Privacy Policy

1. Scope of this policy

This policy covers personal data processed by PressCosmos Media Network ("PressCosmos", "we") when you visit presscosmos.com, submit a press release, create an account, subscribe to a newsletter or contact us. It does not cover third-party sites we link to, including outlets that syndicate your release — those organisations have their own policies.

2. What we collect

• Account data — name, work email, organisation, role, billing country.
• Submission data — the content of press releases and media assets you upload, including any personal data you include in them.
• Billing data — processed by our payment processor. We do not store full card numbers.
• Usage data — pages viewed, features used, referring source, approximate location derived from IP address.
• Communications — support tickets, emails and editorial correspondence.

3. Why we use it

• To provide the service — reviewing, distributing and hosting your release, and reporting results. Legal basis: performance of a contract.
• To operate the network — syndicating releases to contracted distribution partners. Legal basis: performance of a contract.
• To improve the product — aggregated analytics on how features are used. Legal basis: legitimate interests.
• To send marketing — where you opted in, or where we have a legitimate interest based on an existing customer relationship. Legal basis: consent or legitimate interests.
• To meet legal obligations — tax, accounting, sanctions screening and lawful requests from authorities. Legal basis: legal obligation.

4. Who we share data with

We share data with distribution partners, hosting and infrastructure providers, payment processors, analytics providers and professional advisers. When we distribute a release, the release content — including any personal data in it, such as a named spokesperson and contact details — is transmitted to receiving outlets and feed partners. That transmission is the service you are buying.

We do not sell personal data, and we do not resell media contact databases or use your campaign data to pitch your competitors.

5. How long we keep it

• Published releases and hosted pages: retained permanently, because a distributed release cannot be retracted from partners. You can request de-indexing of a hosted page where law permits.
• Account data: retained while the account is open, then for seven years to meet financial record-keeping obligations.
• Analytics data: aggregated after 26 months; raw event data retained for 14 months.
• Marketing consent records: retained until withdrawn plus three years as evidence of the withdrawal.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to our processing of your personal data, and to withdraw consent. You may also have the right not to be subject to solely automated decisions with legal effect — we do not make any such decisions.

To exercise a right, email support@presscosmos.com. We respond within 30 days. You can complain to your local supervisory authority; in the EU that is your national data protection authority, and in the UK the Information Commissioner's Office.

7. International transfers

We operate infrastructure in the United States and the European Union. Where personal data is transferred outside the EEA or UK, we rely on the European Commission's Standard Contractual Clauses with supplementary technical and organisational measures, including encryption in transit and at rest.

8. AI processing

We use language models to help draft and tighten copy and to measure how answer engines describe your organisation. Drafting assistance runs on your submitted content only when you enable it, and is not used to train third-party models under our enterprise agreements. Share-of-answer measurement queries public AI systems and stores the responses and citations, not your private data. Release pages are intentionally published to the open web and are available to search and AI crawlers — that is the purpose of distribution.

9. Security

We encrypt data in transit and at rest, enforce least-privilege access with mandatory multi-factor authentication, log administrative access, and review our subprocessors annually. Nobody can promise absolute security; if a breach affects your personal data we will notify you and the relevant authority within 72 hours of becoming aware.

10. Children

PressCosmos is a business service and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.