Privacy policy
Last updated January 16, 2025
PRMagi processes three kinds of data: your account, the workspace you build, and the media contacts you pitch. This policy describes all three in plain language, including the suppression rules we enforce on your behalf.
In short
We collect what the product needs, we never sell it, we never train models on your content, and opt-out requests from media contacts override every other rule in the system.
What this policy covers
This policy explains what personal data PRMagi collects when you use the product, why we collect it, how long we keep it, and the rights you can exercise over it. It covers the website, the application, and the crawler.
If you are a journalist or media contact whose details appear in a customer’s media list, the section on media contact data applies to you specifically.
Data we collect
We collect only what the product needs to work. We do not sell personal data, and we do not use it to train models.
- Account data — email address, name, company, and a hashed password.
- Workspace data — the brand profile, angles, campaigns, drafts, schedule and approval history you create.
- Crawl data — publicly accessible pages from the website address you submit, and the facts extracted from them.
- Media contact data — names, outlets, beats and public work email addresses added by you or imported from a licensed provider.
- Usage data — pages viewed, features used, and error logs, used to operate and improve the service.
- Billing data — handled by our payment provider. PRMagi stores a customer identifier, not card numbers.
How we use it
To run the crawler and generate your brand profile. To draft angles, releases, pitches and social posts. To schedule and send approved outreach. To show you analytics about that outreach. To provide support, prevent abuse, and meet legal obligations.
We do not send email on your behalf unless you have approved the batch in the approval queue, and we do not contact media contacts directly.
Media contact data
Media contact records exist so you can pitch journalists with relevant, beat-matched stories. You are the controller of that data and PRMagi is the processor. That means you are responsible for having a lawful basis to hold and contact each person.
We enforce the following on your behalf: a do-not-pitch flag that permanently blocks a contact, an opt-out flag applied the moment a reply asks you to stop, automatic bounce suppression, and a per-contact frequency cap. Opt-out and do-not-pitch flags override every other rule in the system.
If you are a media contact and want your details removed from a customer’s list, contact us and we will notify the customer and suppress the record.
Legal bases and your rights
Where GDPR applies, we rely on contract performance for account data, legitimate interests for product operation and security, and consent where we send marketing email to you. Where CCPA applies, we do not sell personal information. Where CASL applies, we rely on express or implied consent and provide an unsubscribe path in every commercial message.
You can request access to your data, correction, deletion, export in a portable format, restriction of processing, and objection to processing. Contact us and we will respond within thirty days.
Retention and deletion
Account and workspace data is kept while your account is active and for thirty days after deletion, so an accidental deletion can be reversed. After that it is removed from live systems and from backups on our standard backup rotation.
Crawl snapshots are kept with the brand profile they produced. Media contact records are kept until you delete them, and suppressed records are retained in a minimal form so we can honour the suppression.
Security and sub-processors
Data is encrypted in transit and at rest. Access to production data is limited to a small number of engineers and is logged. Every automated and human action in a workspace is written to an audit log you can review.
We use sub-processors for hosting and database services, email delivery, and error monitoring. A current list is available on request. We do not use your content to train machine learning models.
Contact
Questions about this policy, or a data rights request, can be sent to hello@prmagi.com. We will confirm receipt and tell you who is handling it.
This policy is a good-faith template written for a product of this shape. Have a qualified lawyer review it against your jurisdiction and your actual data practices before you rely on it. See also our terms of service.