Privacy Policy

This Privacy Policy explains how The PR Assistant Pty. Ltd. ("The PR Assistant," "we," "us," or "our") collects, uses, and protects information when you use The PR Assistant. It applies to you as an account holder, and to information about your clients and contacts that you enter into the service.

Account information. When you sign up, our authentication provider (Clerk) collects your name, email address, and login credentials. If you join or create an organization, we also store your role in that organization.

Billing information. Payment is handled directly by Stripe. We receive your subscription status and plan from Stripe, but we don't collect or store your full card number ourselves.

Content you provide. Anything you enter to use the service: client voice samples, boilerplate, key messages, journalist and contact details, coverage records, chat messages, and generated drafts. This can include personal information about people you're not the account holder for, such as journalists named in your drafts or spokespeople in a client profile, which you're responsible for having a lawful basis to store.

Usage information. Which tools and workflows you use and how often, for the purpose of enforcing plan limits and improving the service.

We use the information above to:

• Provide, maintain, and improve the service
• Process your requests through our AI provider and return a response
• Process payments and manage your subscription
• Communicate with you about your account, billing, or changes to the service
• Detect and prevent misuse, fraud, or abuse of the service
• Meet legal and regulatory obligations

When you use a tool or workflow, relevant content, your request plus the applicable client's voice, boilerplate, key messages, and other context you've set up, is sent to our AI provider (currently Anthropic) to generate a response. Some tools also use live web search to ground their answers, which sends your query terms to that search function.

We don't use your account or client content to train AI models, ours or our provider's. Content sent for processing is used only to generate your response.

We don't sell your information. We share it only with the service providers that make the platform work, each acting under their own privacy and security commitments:

• Clerk, for authentication and account management
• Stripe, for payment processing and billing
• Anthropic, to generate AI responses to your requests
• Neon and Vercel, for data storage and hosting

Your client data is scoped to your own account or organization only. It's never visible to, or shared with, other customers of the service.

We may also disclose information if required by law, or to protect the rights, safety, or property of The PR Assistant, our users, or the public.

Your data is stored in a hosted Postgres database (via Neon) and served through Vercel's infrastructure. We use industry-standard measures to protect it, including encrypted connections and access controls scoping every request to your account or organization. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

We retain your account and client data for as long as your account is active, so the service can keep working the way it's designed to: remembering client context between sessions. If you close your account, we'll delete your data within a reasonable period, except where we're required to retain records for legal, tax, or accounting purposes.

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can update most of your own account and client information directly in the app. For anything else, including a full data export or account deletion, contact us using the details below.

If you're in Australia, we handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988. If you're in the European Economic Area, UK, or California, you may have additional rights under GDPR, UK GDPR, or the CCPA respectively, and we'll honor requests made under those frameworks to the extent they apply to you.

We use a minimal set of cookies, primarily to keep you securely signed in via our authentication provider. We don't use advertising or cross-site tracking cookies.

The service isn't directed at, or intended for use by, anyone under 18. We don't knowingly collect personal information from children.

Our service providers (including Anthropic and Vercel) may process data in countries other than your own, including the United States. Where that happens, we rely on those providers' own safeguards and contractual commitments to protect your information consistent with this policy.

We may update this Privacy Policy from time to time. If we make material changes, we'll make a reasonable effort to notify you, such as by email or an in-app notice, before they take effect.

Questions about this policy, or requests relating to your data, can be sent to hello@theprassistant.ai.