PRIVACY
Privacy at Pressbox
Pressbox is designed to publish company news, help communications teams manage legitimate media relationships and measure outcomes without turning personal data into an uncontrolled marketing asset.
Who is responsible
Yamu Ltd, company number 11870394, operates Pressbox. Our business address is 61c Rivington St, London, EC2A 3QQ. Contact privacy@pressbox.com about your personal information.
What we hold
Account and workspace information, press-release content and public contact details supplied by issuers, media-contact data entered or licensed by customers, campaign delivery/suppression records, security/audit events and aggregate product analytics needed to operate the service.
Why we use it
We use account and workspace data to provide the service you request, process purchases and answer support requests. We use security and abuse-prevention records to protect the service and our users, and retain records where required by law. Consent applies where we ask you to opt in; you may withdraw it. Customers are responsible for the lawful basis of personal data they upload or use for outreach.
Service providers and retention
Hosting, email, payment and enabled AI providers process the information needed to provide their part of the service. Where information is transferred internationally, applicable data-protection safeguards are required. We retain account information while needed to operate your account, and keep necessary billing, security and legal records afterwards. Published releases are public archive content and may also be retained by independent sites. Contact us for information about current providers, safeguards and retention for your data.
Journalist data
Pressbox records provenance, subscriber type and asserted lawful basis for media contacts. Suppressions and unsubscribe requests override campaign targeting. AI targeting excludes email addresses and is constrained to permitted metadata/evidence sources.
Published releases
Published releases are intentionally public and search-engine accessible. Issuers remain responsible for factual claims; Pressbox publication is not independent endorsement.
AI providers
Pressbox minimizes information sent to AI providers. Journalist email addresses and raw private message bodies are excluded from targeting workflows. Where third-party evidence is used, Pressbox tracks whether its source permits AI processing.
Connected AI assistants
If you deliberately connect a supported external assistant such as ChatGPT, Claude or Gemini, Pressbox receives only the verified identity claims, workspace requests and tool inputs the assistant is authorised to send for your request. Connecting an assistant does not give Pressbox blanket access to the assistant's conversation history or memory. Pressbox records limited connector metadata such as the assistant/client source, tool used, outcome and security/audit information, but does not retain the raw text of your assistant conversation merely for attribution.
To keep a connector bound to the correct account, Pressbox stores the OAuth provider issuer and stable subject identifier associated with the connection, together with limited link metadata such as the verified email seen when the link was established and last-seen/revocation timestamps. A verified email may help establish the first link, but Pressbox does not treat email as the permanent connector identity after that link is created.
A connected assistant can access only the Pressbox account and workspaces authorised for that identity. Pressbox does not return journalist email addresses through its AI media-list tools, and publication, subscription checkout and external distribution remain subject to Pressbox permissions, quality controls and explicit confirmation where required. Your external assistant provider processes information under its own terms and privacy policy.
Your controls
You can review and disconnect connected AI identities from Account security. Disconnecting a connector revokes that Pressbox identity link and prevents it being silently recreated through email matching; reconnecting requires a new explicit connection.
Signed-in users can export their account data and request deletion from the Privacy & data screen. Some company publication, billing, fraud-prevention and audit records may require separate review before deletion or anonymisation.
Contact
Email privacy@pressbox.com to request access, correction, deletion, restriction or portability, or to object to processing. We may verify your identity before acting. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.