Built for organisations that get audited.

Press Pilot collects the minimum data needed to run a newsroom: the email of the person logged in, the partner submissions they receive, the releases they draft, the journalist contacts they use, and the coverage they track. We process this data as a controller for our own service accounts, and as a processor on behalf of you, the customer, for everything inside your workspace.

We do not sell personal data. We do not enrich your contact lists from third-party brokers. We do not train shared AI models on your content. AI drafting runs against your workspace only, with prompts and outputs retained for 30 days for support and abuse prevention, then deleted.

Marketing emails come from a separate list you can unsubscribe from at the footer of any email. Product emails (security, billing, incident notifications) are required while your account is active. Cookies are limited to essential session, analytics consent, and load-balancing.

Data subject requests (access, rectification, erasure, portability) are handled within 30 days. Email privacy@press-pilot.com or have your data protection officer contact ours. Our Data Protection Officer is reachable at dpo@press-pilot.com.

You pay the published price (or your contracted price) for the seats and plan you select. You can cancel a monthly plan at the end of the current billing month. Annual plans are non-refundable mid-term, but you keep access until renewal.

You own your data, your member submissions, your drafts, your media list and your coverage records. We provide tooling to export everything in standard formats at any time, and on cancellation we delete production data within 30 days and backups within 90.

We provide the service substantially in line with the documentation. Service levels (uptime, support response, incident communications) are detailed in the Master Subscription Agreement and the Service Level Annex available on request from your account manager.

The full legal terms (Master Subscription Agreement, Acceptable Use Policy, Service Level Annex) are sent with every order form. Email legal@press-pilot.com for the latest signed-ready copies.

Our DPA reflects GDPR Article 28, UK GDPR and equivalent obligations. It incorporates the latest Standard Contractual Clauses (EU 2021/914) and the UK International Data Transfer Addendum for international transfers, and is pre-signed by Press Pilot.

Customer data is hosted by default in eu-west-2 (London). US data residency is available on Anchor plans. Sub-processors with access to customer data are listed in the table above, and we give 30 days' notice of any change via trust.press-pilot.com.

To execute the DPA, email dpa@press-pilot.com with your legal entity name and registered address. We'll send a counter-signed PDF within one working day. Procurement-ready security pack (DPA, sub-processors, architecture overview, latest pen-test summary) is available on request.