We Engineer Attention.
Not Data Breaches.

PRAI ("we", "us", "our") is a PR technology company registered in Brussels, Belgium. We operate the platform at prai.press and all associated services, APIs, and subdomains. PRAI is the data controller for all personal data processed through our platform. Our AI-powered press release generation, journalist outreach, and campaign management tools are subject to this Privacy Policy.

• Account data: Name, email address, company name, and role upon registration.
• Usage data: Pages visited, features used, actions taken, session duration, and device/browser metadata.
• Content data: Press releases, campaign drafts, brand voice profiles, journalist notes, and media lists you create.
• Billing data: Payment information processed securely via Stripe. We never store card numbers, CVVs, or full payment details on our servers.
• Communication data: Emails sent through the platform, open/click tracking metrics, and journalist response data.
• AI interaction data: Prompts sent to AI models for content generation. We do not use this data to train any models.

We process your data under the following legal bases:

• • Contract performance: To deliver the PRAI platform, process your campaigns, and generate AI content.
• • Legitimate interest: To improve platform features, detect fraud, and ensure security.
• • Legal obligation: To comply with tax, accounting, and regulatory requirements.
• • Consent: For optional analytics cookies (opt-out available in Settings → Privacy).

We never sell your data. We never share it with advertisers. Period.

All sub-processors are GDPR-compliant and bound by Data Processing Agreements (DPAs).

SCCs = Standard Contractual Clauses (EU–US data transfer mechanism under GDPR Chapter V).

• • Account data: Lifetime of account + 30 days after deletion.
• • Content (press releases, campaigns): Lifetime of account; deleted within 30 days of account closure.
• • Email tracking data: 24 months, then anonymised.
• • Billing records: 7 years (Belgian/EU tax law requirement).
• • Server logs: 90 days for security and debugging.
• • Anonymised analytics: Retained indefinitely in aggregated, non-identifiable form.

Upon account deletion, all personal data is purged within 30 days — except billing records (legally required) and anonymised analytics.

• • Access: Request a complete copy of all personal data we hold.
• • Rectification: Correct inaccurate or incomplete data.
• • Erasure: Request deletion ("right to be forgotten").
• • Portability: Receive your data in machine-readable format (JSON/CSV).
• • Object: Object to processing based on legitimate interests or direct marketing.
• • Restriction: Request we pause processing while a dispute is resolved.

Email privacy@prai.press to exercise any right. We respond within 30 days. Complaints can be lodged with the Belgian Data Protection Authority.

Optional tools only load after you accept that category in our cookie banner. Rejecting is as easy as accepting, and a Global Privacy Control signal from your browser counts as a rejection. We do not use session recording, heatmaps or keystroke capture.

• • Necessary — sign-in and security (Supabase, EU): login session, security checks and your cookie choice, stored in your browser. Legal basis: contract and legitimate interest (Art. 6(1)(b) and (f) GDPR); no consent needed.
• • Necessary — error monitoring (Sentry): technical error reports with passwords, tokens and personal details removed; no session replay. Legal basis: legitimate interest in keeping the service working (Art. 6(1)(f)).
• • Analytics — Google Analytics 4 (Google Ireland): pages viewed, device and browser type, approximate location; uses cookies (_ga). No user ID, email or name is sent; Google Signals and ad personalisation are off. Only for adults who passed our age check. Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 11.7a Dutch Telecommunications Act). You can withdraw it at any time.
• • Marketing: none in use. No ad pixels (Meta, TikTok, LinkedIn or others).
• • Embedded videos (YouTube/Vimeo): only load when you click "Load video".

We do not use advertising cookies. We do not sell data to ad networks.

Marketing Email

• • We only send product updates, newsletters or offers if you ticked the (unticked-by-default) box and then confirmed by clicking the link we emailed you. Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 11.7 Dutch Telecommunications Act).
• • We keep a record of your consent: when, where (e.g. sign-up form), your IP address and browser, and the exact wording you agreed to — so we can prove it.
• • Every marketing email has a one-click unsubscribe link and a preferences page. Unsubscribing takes effect immediately; we keep your address on a do-not-email list only so we never email you marketing again.
• • Account emails (verification, password reset, receipts, security alerts) are sent because they're needed for your account (Art. 6(1)(b)) and aren't marketing.
• • Emails are sent through Resend. Sender: PRAI.PRESS B.V., Overhoeksplein 3, 1031 KS Amsterdam, KvK 7645444.

PRAI uses AI models to generate and optimise press release content. Your inputs (company name, brief, talking points) are sent to our AI sub-processors to produce draft content. We do not use your content to train third-party AI models — all API calls are made with data-use restrictions enabled where providers support it. No automated decisions with legal or similarly significant effects are made about you.