Privacy Policy
1. Scope
The operator (controller) of personal data: AFFMID LTD (a company registered in England and Wales, number 15282117, address 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). The text of the consent given by the visitor of the forms is posted on the page Consent to the processing of personal data. This Policy defines the procedure for processing personal data when using the PromtPress Platform (websites promtpress.com, panel.promtpress.com, server mcp.promtpress.com and related subdomains), including visiting the website, communicating with the AI assistant, registration, connecting Telegram channels, creating landing pages and receiving leads, using advertising management tools, contacting support and paying for services through payment providers.
2. What data is processed
The Operator adheres to the principle of minimization and processes only the data necessary for the provision of services: – registration and contact data of the Customer (name, e-mail, password hash, Telegram username); – data of connected Telegram channels (name, ID, subscriber and publication statistics); – information that the Customer provided to create a landing page (business name and description, phone, address, links, photos), and message texts in the dialogue with the AI assistant; – data of visitors to the Customer's landing pages who left a request (name, phone, e-mail, message text, technical visit data). The Operator processes this data on behalf of the Customer and transfers it to the Customer's personal account and e-mail; – technical data of the Customer when using the website (IP address, device and browser type, time and pages visited); – payment metadata of transactions (amount, currency, transaction ID, payment method), without storing bank card details and payment account details; – support requests and correspondence regarding the services provided; – data of affiliate program participants (contacts, payment details, statistics of clicks and registrations via the affiliate link, amounts accrued); – data of subscribers of the Customer's Telegram channels attracted through the Platform: public identifier, username, publicly available profile parameters. This data is processed solely for billing and anti-fraud purposes. The Platform is intended for persons over 18 years of age.
3. Legal bases for processing
Processing is carried out on the basis of: – performance of the service agreement (use of the Platform); – legitimate interests of the Operator (ensuring security, anti-fraud checks, protection against fraud); – consent of the data subject (for analytical and advertising cookies and marketing communications, if applicable); – instructions of the Customer (processing of requests from visitors to the Customer's landing page); – fulfillment of the Operator's legal obligations (accounting and tax accounting under the law of England and Wales).
4. Purposes of processing
Personal data is used exclusively for: – providing access to the Platform's functionality and rendering services; – calculations and invoicing; – ensuring the security of the Platform and anti-fraud traffic checks; – technical support and communication with the Customer; – improving the operation of the Service; – compliance with applicable personal data legislation (UK GDPR and Data Protection Act 2018). Personal data is not sold to third parties and is not used for marketing profiling of third-party advertisers.
5. Categories of data recipients
Data is transferred to the following categories of recipients to the extent necessary for the provision of services: – payment providers (for processing payments and refunds via bank cards, cryptocurrency and bank transfers); – the Operator's bank (for non-cash settlements with corporate Customers); – partner advertising networks (for placing advertisements and attracting subscribers); – hosting provider of the Platform's infrastructure; – Telegram (as the platform on which services are provided, in terms of public data of channels and subscribers); – language model providers (for the operation of the AI assistant and generation of landing page texts: message texts and provided links are transferred, payment data is not transferred); – web analytics and advertising platforms (Yandex Metrica, Google, Meta) in terms of anonymized visit data, only after the visitor's consent in the cookie banner. The specific list of providers and partners constitutes the Operator's commercial secret and is provided upon an individual request of the data subject within the framework of exercising their rights under personal data legislation. All recipients are obliged to ensure the confidentiality of the transferred data within the framework of their obligations under applicable law and concluded agreements.
6. Cross-border data transfer
Some data recipients (payment providers, hosting provider, partner advertising networks) are located outside the United Kingdom. Data transfer is carried out subject to contractual and technical safeguards provided for by the UK GDPR (standard contractual clauses and adequacy assessment).
7. Cookies and analytics
The website promtpress.com uses mandatory technical cookies necessary for the operation of the personal account and security (authorization, CSRF protection, interface settings, language selection). They are set without consent, since without them the website does not work. Analytical and advertising counters (Yandex Metrica, Google Ads, Meta Pixel) are enabled only after the visitor clicks "Accept" in the cookie banner. Until then, they do not collect data. Consent is valid for 6 months; it can be withdrawn by clearing cookies and site data in the browser: the banner will appear again. On Customers' landing pages (domain ppsite.biz), Yandex Metrica is used to track visits and requests according to the rules specified in the footer of such a page.
8. Retention period
– account data, for the duration of the use of the Service and for 1 year after termination of use (to resolve possible disputes and tax reporting); – payment data and invoices, for the period established by the legislation of the United Kingdom on accounting and taxation (at least 6 years); – data of subscribers attracted through the Platform, for 12 months from the last activity of the campaign, after which it is anonymized; – support requests: 2 years from the date of the request; – requests from visitors to landing pages: 12 months from the date of receipt, after which they are deleted or anonymized; – dialogues with the AI assistant: 12 months, anonymized fragments may be stored longer to improve the assistant; – information for the landing page: while the page is published, and 6 months after deactivation. Upon expiration of the periods, the data is deleted or anonymized.
9. Security
The Operator applies organizational and technical measures to protect information: encryption of data in transit (HTTPS/TLS), storage of passwords in the form of hashes, restriction of access to servers by keys, regular backup. The Customer is obliged to ensure the confidentiality of their credentials and access rights to connected Telegram channels.
10. Rights of the personal data subject
In accordance with the UK GDPR and the Data Protection Act 2018, the personal data subject has the right to: – obtain information about the processing of their personal data; – obtain access to their personal data and a copy thereof; – request the rectification, erasure or restriction of processing of personal data; – withdraw previously given consent to processing; – lodge a complaint with the Information Commissioner's Office (ICO), United Kingdom. Requests are sent to hello@promtpress.com. A response is provided within one month.
11. Third-party resources
The Platform may contain links to third-party resources (Telegram, partner pages, media articles). The Operator is not responsible for the personal data processing policies of third-party resources. Before using third-party resources, it is recommended to review their privacy policies.
12. AI assistant, text generation and "Autocontent TG"
The AI assistant on the website and in the account, the landing page generator and the additional service "Autocontent TG" use APIs of third-party language model providers. Message texts, provided links and business information are processed on the provider's side under its terms. Payment data and passwords are not transferred there. The Customer independently decides on the publication of generated materials and is responsible for their compliance with legislation and platform rules. Assistant responses are for reference only.
13. Access via AI assistant (MCP)
You can connect to your account AI assistants, Claude, ChatGPT, Cursor and others, via the server mcp.promtpress.com. This section explains what data is processed in this case and where it goes.
What we store. The account email address, as well as the company name and country, if you have provided them. The fingerprint of the access key, but not the key itself: the database contains an irreversible hash from which the key cannot be recovered; the key's permissions, issue date and last use date are stored. The name and return address of the application you connected. Records of the assistant's actions with campaigns and budget: which tool was called, when, with what parameters, how it ended and for what amount. One-time confirmation codes and login links, until use or expiration. Technical counters of requests to login pages: the request address and the email address to which the request was directed, they are needed so that the login form cannot be used to send emails on someone else's behalf.
What we do not store. There are no passwords in this circuit at all, login is only via a one-time link to email. Payment data does not pass through the assistant server in any form. The content of your conversations with the assistant is not transmitted to us: we only receive tool calls.
What the assistant sees and where it goes. The assistant receives the data it requests at your request: balance, campaign list and statistics, and balance movements. This data goes to the service you use (Anthropic, OpenAI, and others) and is processed under its rules, not ours. This is a transfer outside our perimeter, and we ask you to consider it when choosing an assistant. The scope can be limited in advance: the right to "view" is granted separately from the rights to "prepare campaigns" and "spend budget".
Retention periods. Records of actions with campaigns and budget: 3 years: this is confirmation of what funds were charged for, and it is retained after account deletion; otherwise, there would be no way to resolve disputes over past spending. Revoked access renewal keys: 30 days. One-time codes and used login links: 24 hours. Request counters: 7 days. Other account data, per the general terms of Section 8.
Your rights. You can revoke any assistant's access, freeze spending, or change limits in the dashboard, in the "Profile" section, at any time and without contacting us. Revocation takes effect immediately: the key stops working along with the ability to renew it.
Automated decisions. Some decisions are made without human involvement, according to pre-defined rules: checking the issued limit and its consumption when launching a campaign; refusing placement for topics we do not place; limiting the frequency of requests to login pages; revoking issued accesses if an authorization code is presented again (a sign of interception). There is no automatic account blocking. You can write to hello@promtpress.com about any automated refusal: we will review it manually.
When the assistant names someone else's address. The assistant may provide us with the email address of a person who has not yet contacted us, to invite them. In this case, we create an account and send an email to that address stating that they were named. Access to the account is not granted at that point: it appears only after the address owner follows the link in the email.
Cookies. Cookies are not used on the assistant's login pages (mcp.promtpress.com): state is stored on the server via a one-time code.
14. Policy Changes
The Operator may update this Policy. The current version is published on the promtpress.com website. The date of the last update is indicated at the beginning of the document.
15. Contacts
For all questions regarding personal data processing: E-mail: hello@promtpress.com Telegram: @PromtPress_manager