Privacy at PressLoom.

Updated 2 November 2026

What your workspace stores

When you register, we store your name, email, company, a salted password hash, account status, and account activity. Campaigns include the brief, draft versions, approvals and feedback, conversations, uploaded assets, purchased package, payment status, and publication reports.

Why we need it

We use these records to secure your account, prepare and deliver your campaigns, track your approvals, provide support, and send service emails. Campaign data is visible to the account that submitted it and authorized PressLoom administrators. Agency accounts can submit campaigns for multiple brands; each brand remains inside that account’s workspace.

Email and payments

Service emails cover email confirmation, password resets, welcome messages, campaign updates, draft review, conversations, and payment confirmations. They are queued securely until an email provider is connected. Online payment is available only after Stripe is configured. Stripe handles card details; PressLoom stores the checkout reference and payment status, not card numbers.

Cookies and files

The portal uses an essential, HTTP-only session cookie for sign-in and request protection. Private campaign files download as attachments and require campaign access. This application does not add advertising trackers. Public-page discovery logs record the page path, response status, referral-service category, and claimed crawler type. That separate discovery log omits IP addresses, query strings, raw referrer URLs, and visitor identifiers. Its counts describe page requests rather than unique people.

Retention and your requests

Campaign and account records remain available to support service delivery, reporting, and operational records. You can request access, correction, or deletion through your campaign conversation or your established PressLoom service contact. We will confirm identity before acting. Financial or dispute records may need to be retained. There is currently no automatic campaign deletion schedule.

Publishing your announcement

Approved press releases and editorial content are intended for public publication. Do not include private personal information, passwords, or confidential material in content intended for distribution. Third-party publication pages and Stripe have their own privacy practices.