1. Who We Are
PR Desk is operated by Echelon Group PR LLC (“we,” “us,” or “our”), a California limited liability company.
Echelon Group PR LLC
500 N. Brand Blvd.
Glendale, CA 91203
hello@prdesk.ai
2. Information We Collect
Information you provide
- Account information: Email address, full name, and password when you create an account
- Billing information: Payment card details are collected and processed exclusively by Stripe. We do not store your card number.
- Client and activity data: Client names, reporter contacts, pitch details, activity log entries, and other professional data you enter into the platform
- AI prompts: Industry topics, pitch angles, reporter names, and other inputs you provide to our AI-powered tools
Information collected automatically
- Usage data: Pages visited, features used, generation counts, timestamps
- Device data: Browser type, operating system, IP address, and device identifiers
- Cookies: We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process your subscriptions and payments
- Generate AI-powered outputs based on your inputs
- Send transactional communications (account confirmation, password resets, billing receipts)
- Respond to support requests
- Enforce our Terms of Service and protect against fraud or abuse
- Analyze aggregate, de-identified usage patterns to improve the platform
We do not sell your personal information. We do not use your data for advertising. We do not share your client data, activity logs, or AI inputs with other users.
4. Third-Party Service Providers
We share data with the following providers solely to operate the Service:
Supabase (database and authentication)
Stores your account data, activity logs, and application data. Hosted in the United States.
Anthropic (AI language model)
Processes your AI prompts and inputs to generate outputs (pitches, media lists, briefings, etc.). Anthropic does not use API inputs for model training. See Anthropic's Privacy Policy. Serper.dev (web search API)
Performs Google searches to build and verify media lists. Search queries may include reporter names, outlet names, and industry topics.
Vercel (hosting)
Hosts the web application. May collect IP addresses and request metadata as part of standard web serving.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account or request deletion, we will remove your personal data and client data within 30 days. Some data may be retained longer if required by law (e.g., billing records for tax purposes).
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/HTTPS) for all data
- Encryption at rest for database storage
- Row-level security policies on all database tables
- Secure authentication via Supabase Auth with bcrypt password hashing
- API keys and secrets stored as environment variables, never in client-side code
No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data (subject to legal retention requirements)
- Export your data in a portable format
- Opt out of non-essential data processing
To exercise any of these rights, email us at hello@prdesk.ai. We will respond within 30 days.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.
European Economic Area (GDPR)
If you are located in the EEA, our legal basis for processing your data is: (a) your consent when you create an account, (b) the performance of our contract with you, and (c) our legitimate interests in operating and improving the Service. You may contact us to exercise your GDPR rights or lodge a complaint with your local data protection authority.
8. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a notice within the Service. Your continued use after the updated policy takes effect constitutes acceptance.
10. Contact
For privacy-related inquiries, contact us at:
Echelon Group PR LLC (d/b/a PR Desk)
500 N. Brand Blvd.
Glendale, CA 91203
hello@prdesk.ai