Device Data

We may also collect data about the device you're using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal Information

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Information”). Personally identifiable information may include, but is not limited to:

• Name
• Email address
• Phone/mobile number
• Payment Information
• Professional credentials and expertise
• Company information

Usage Data

We may also collect information on how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Affiliate Tracking

We participate in affiliate marketing programs. When you visit our website through an affiliate link, we may use cookies to:

• Track that you arrived via an affiliate partner
• Attribute any subsequent purchases to the referring affiliate
• Store affiliate tracking information for up to 60 days

The affiliate tracking cookies contain:

• A unique affiliate identifier
• The date and time of your visit
• No personally identifiable information

This tracking helps us compensate our partners who refer customers to our service. You may opt out of affiliate tracking by clearing your browser cookies or using private/incognito browsing mode.

Legal Basis for Processing Your Data (GDPR Article 6)

Under the EU General Data Protection Regulation (GDPR), we are required to have a lawful basis for each type of processing we perform on your personal data. The table below sets out the legal basis we rely on for each processing activity.

Where We Rely on Legitimate Interests

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment to ensure our interests do not override your fundamental rights and freedoms. Our legitimate interests include:

• Service improvement: Analyzing aggregated usage patterns to identify bugs, improve features, and enhance the user experience
• Security and fraud prevention: Monitoring for unauthorized access, detecting suspicious activity, and protecting platform integrity
• Pre-sale support and inquiry response: Responding to inquiries you initiate through our live chat widget, managing leads, and providing information about our services

You have the right to object to any processing based on legitimate interests at any time. See the Data Protection Rights section below for details.

Where We Rely on Consent

Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal:

• Cookies (including affiliate tracking): Use the cookie preferences panel accessible via the “Cookie Settings” link in the footer
• Marketing emails: Click the “Unsubscribe” link in any marketing email, or adjust your preferences in your account settings
• All other consent: Contact us at privacy@prbot.ai

Use of Data

StartupBros LLC d/b/a PR Bot uses the collected data for various purposes:

• To provide and maintain the Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer care and support
• To provide analysis or valuable information so that we can improve the Service
• To monitor the usage of the Service
• To detect, prevent and address technical issues
• To train our AI systems to accurately represent you in media outreach
• To automatically respond to relevant journalist queries on your behalf
• To track the performance and outcomes of your PR outreach efforts
• To manage our affiliate program and track referrals

Affiliate Program Participation

If you choose to participate in our affiliate program, we collect additional information to manage your affiliate account:

• Tax identification information (collected by Stripe Connect)
• Banking details for payouts (managed by Stripe Connect)
• Performance metrics (clicks, conversions, commissions earned)
• IP address and timestamp when accepting affiliate terms
• Sub-affiliate relationships if you refer other affiliates

This information is used solely for:

• Processing affiliate commission payments
• Tax reporting as required by law
• Preventing fraud and abuse
• Providing you with performance analytics

Stripe Connect handles all sensitive financial information according to PCI compliance standards. We do not store your banking details on our servers.

Transfer Of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

StartupBros LLC d/b/a PR Bot will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Third-Party Service Providers (Sub-Processors)

To provide and improve our Service, we work with trusted third-party service providers who process your personal information on our behalf. Below is a list of our key sub-processors and the categories of data they process:

Important Notice for EU/UK Residents: Data transfers to the United States and other countries are conducted under appropriate safeguards. Many of our sub-processors are certified under the EU-U.S. Data Privacy Framework (DPF), and where applicable we also rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. Each sub-processor has committed to protecting your data in accordance with applicable data protection laws.

For detailed information about data processing safeguards and retention policies, please see our Data Processing Information page.

AI Vendor Data Retention: Profile data sent to AI service providers (OpenAI, Anthropic, Google AI) is processed to generate responses on your behalf. These vendors may retain data according to their own privacy policies. For complete details about how we use AI and your rights, see our AI Transparency & Policy page. You can review vendor privacy policies at:

• OpenAI: https://openai.com/privacy
• Anthropic: https://www.anthropic.com/legal/privacy
• Google AI: https://policies.google.com/privacy

This list is current as of the last update date shown above. We may add, remove, or change sub-processors as needed to provide and improve our Service. We will update this list accordingly.

Disclosure Of Data

StartupBros LLC d/b/a PR Bot may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of StartupBros LLC d/b/a PR Bot
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to rectify inaccurate information
• The right to erasure of your data in certain circumstances
• The right to restrict processing of your data
• The right to data portability
• The right to object to processing of your data
• The right to opt out of automated decision-making, including AI-generated responses

Right to Object to Legitimate Interests Processing (GDPR Article 21): Where we process your data on the basis of legitimate interests (Article 6(1)(f)), you have the right to object at any time. Upon receiving your objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority. If you are in the EU, you can find your local authority at edpb.europa.eu. If you are in the UK, you may contact the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at privacy@prbot.ai.

International Privacy Contact

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may direct privacy inquiries to our dedicated international privacy contact at privacy@prbot.ai. We are committed to cooperating with the guidance and decisions of the relevant data protection supervisory authorities regarding any complaints or concerns that cannot be resolved directly with us.

U.S. State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Florida, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another state with a comprehensive consumer privacy law, you have specific rights over your personal information, including the right to access, delete, correct, and opt out of certain processing activities.

Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary consideration. However, certain analytics and advertising-related cookies may constitute “sharing” under the CCPA/CPRA or “targeted advertising” under other state laws. For complete details about our data sharing practices, your opt-out rights, a state-by-state rights breakdown, and how to exercise your choices, please visit our standalone Your Privacy Choices page.

Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of the sale and sharing of personal information, as required by the CCPA/CPRA, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Texas Data Privacy and Security Act, and other applicable state laws. When we detect a GPC signal, we automatically treat it as an opt-out request for your browser.

Summary of Key Rights

• Right to Know / Access: Request what personal information we collect, use, and disclose about you
• Right to Delete: Request deletion of your personal information, subject to legal exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the sale/sharing of personal information and targeted advertising
• Right to Limit Sensitive Data Use: Limit our use of sensitive personal information to what is necessary to provide our services
• Right to Data Portability: Receive your data in a portable, machine-readable format
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@prbot.ai with the subject line “Privacy Rights Request.” We will verify your identity before processing your request and respond within 45 days. For opt-out requests and detailed state-by-state information, visit our Your Privacy Choices page.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Account data: Retained for the duration of your account. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
• Profile data and AI training data: Deleted within 30 days of account closure. Copies previously sent to AI vendors for processing are subject to those vendors' retention policies.
• Payment records: Retained as required by tax and accounting laws (typically 7 years).
• Affiliate data: Commission and tax records retained as required by law. Performance metrics retained for the duration of the affiliate relationship plus 3 years.
• Analytics data: Retained in aggregate form. Individual-level data retained for up to 24 months.
• Server logs: Retained for up to 90 days for security and debugging purposes.

Global Privacy Control

We honor the Global Privacy Control (GPC) opt-out preference signal. If your browser or device sends a GPC signal (via the Sec-GPC HTTP header or the navigator.globalPrivacyControl JavaScript API), we will treat that signal as a valid request to opt out of the sale or sharing of your personal information, as required by the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act (CPA), and other applicable state privacy laws.

When we detect a GPC signal:

• We will not sell or share your personal information with third parties for cross-context behavioral advertising.
• We will suppress non-essential analytics and advertising cookies.
• We will configure third-party analytics tools (including Google Analytics and Meta Pixel) to operate in privacy-preserving mode.
• This preference applies automatically without requiring any additional action from you.

If you have previously accepted cookies on our site and subsequently enable GPC in your browser, we will honor the GPC signal as your most recent privacy preference and treat it as a new opt-out request.

We do not respond to the deprecated Do Not Track (DNT) browser signal, as it lacks a legal framework or technical standard requiring compliance.

To enable GPC, visit your browser's privacy settings or install a browser that supports GPC, such as Firefox, Brave, or DuckDuckGo. For more information, see our Your Privacy Choices page.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law:

• GDPR: We will notify the relevant supervisory authority within 72 hours of becoming aware of a breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly without undue delay.
• CCPA/CPRA: We will notify affected California residents within 60 days, or sooner if required by law.
• General: We will notify affected users via email and/or a prominent notice on the Service, describing the nature of the breach, data affected, and steps taken to address it.

Business Transfers

If the Company is involved in a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We implement a variety of security measures to help protect your information:

• All data is encrypted in transit and at rest
• We use multi-factor authentication for administrative access
• Regular security audits and penetration testing
• Strict access controls limiting employee access to personal data
• Special protections for AI training data to prevent unauthorized use

For comprehensive details about our security controls, infrastructure, encryption standards, and vulnerability disclosure program, please see our Security Policy.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

StartupBros LLC d/b/a PR Bot
100 1st Ave N, #2706
St. Petersburg, FL 33701, USA
Email: privacy@prbot.ai