Privacy Policy

PressUp is operated by Voroxi Group LLC ("we", "us"). This policy explains what we collect when you use PressUp, the website at pressup.ai, and the sites people publish with it. If you have a question, write to us at [email protected].

What we collect

Your account. Your email address and name. If you sign in with Google, we also receive your Google account ID. We never see your Google password. When you create your account, we also note roughly where it was created from: the country, and the region and city when known, as Cloudflare estimates them from your network address. We don't keep the address itself.

An email while your site builds. If you build a site before signing in and ask us to email you when it's ready, we keep that address with the site and use it only for that one email, which has a link to open and keep the site. Opening the link signs you in with that address, and it becomes your account's address. If you never open it, we use the address for nothing else.

What you give us to build your site. Your business description and details (name, services, prices, phone number, address, hours), your chat messages, photos you upload, and any screenshots you share as a design reference.

Enquiries from your site's visitors. When someone fills in a form on a site published with PressUp, we store what they send (for example their name, email, phone number and message) and email it to the site's owner. For these enquiries we act on behalf of the site's owner, who decides what their forms ask for.

Apps you connect. If you connect another app to PressUp, such as Google Sheets, we keep what we need to work with it for you: which account you connected (for Google, its email address), the permissions you gave, and the keys the app gives PressUp to act for you, encrypted. You can disconnect an app at any time in Apps: we delete its keys and ask the app to cancel them.

Text alerts. If you turn on text alerts, we keep your mobile number (encrypted), when you agreed to the texts, and a record of each text we sent you (when, and whether it went). Stopping them deletes the number.

Visitor numbers. For each published site we count page views and approximate daily visitors, so owners can see how their site is doing. This uses no cookies. We don't keep visitors' addresses: each visitor is counted with a one-way code made with a key that changes every day, and the codes and the key are deleted once the day is over.

Payments. Payments are handled by Stripe. We keep your Stripe customer ID, your plan and your credit history, but never your card number.

Payments customers make on a site. When a site published with PressUp takes payments, we keep a record of each order for the site's owner: what was bought, the amounts, tax and delivery charges, the delivery address when something is sent (encrypted), the status of the payment and of any refund, deposit or subscription, the email address of the customer's account on that site, and the reference numbers Stripe gives them. Customers pay on Stripe's checkout page: their card details go to Stripe and never reach PressUp. For these records we act on behalf of the site's owner, whose own Stripe account receives the payment.

Your customers. For each business, PressUp keeps a list of the people who sent an enquiry, booked or paid through its website, or whom the owner added: their email address, name and phone number when they gave them, which enquiries, bookings and orders were theirs, and any notes the owner writes about them. As with enquiries, we keep it on the owner's behalf: only the owner sees it, and they can correct, download or delete any customer.

Invoices. When a business bills someone through PressUp, we store the invoice (the customer's name and email, what it's for, the amounts and whether it's paid) and email it to that customer on the business's behalf, with a private link to view it. When the business takes payments, the customer can pay it from that link on Stripe's checkout page; we keep what Stripe tells us about the payment, and card details go to Stripe, never to us. For invoices we act on behalf of the business.

Reviews. When a business asks its customers for reviews through PressUp, we email each of them the request on the business's behalf and keep what they send: their rating, their review, the name they chose to show, and whether they agreed to it appearing on the business's website. Only reviews the customer agreed to share, and the business chose to show, appear there. Someone who asks not to be asked again isn't emailed again by that business. For reviews we act on behalf of the business.

Cleaning requests through CleanByClean. CleanByClean (cleanbyclean.com) is a PressUp service that puts homeowners around Fayetteville, North Carolina in touch with independent local cleaning businesses. When you ask for a cleaner there, we keep what you send (your name, phone number, email address, ZIP code, the size of your home, the cleaning you want, your preferred date and any notes) and that you agreed to us sharing it. Here we act for ourselves, not for a site's owner. We pass your request to one cleaning business that covers your area and does that kind of cleaning, so it can contact you about it by phone, text or email. Cleaning businesses pay us for the requests we send them. We don't pass your request to anyone else, and the business's own privacy policy applies to what it does with your details.

Domains you buy. Domain registries require the owner's name, address, phone number and email. When you buy a domain through PressUp, we send the details you give us to Namecheap to register it, and keep them (encrypted) to show you next time.

Business names you check. When you check whether a name is free in a US state, we send the name, the state and the kind of business to Palm, which checks the state's records.

Forming your business and getting its EIN. If you have PressUp file your LLC, we send what the state's form needs (the business's name, addresses and email, and the names of its organizer and registered agent) to Palm, which files it. If you also have PressUp get the business's EIN, the IRS needs the name and Social Security number or ITIN of the person responsible for the business, with a few answers about the business. The number goes straight to Palm, which keeps it to apply for the EIN: we don't store it, and it isn't in our logs or emails. We keep the EIN once the IRS issues it, encrypted, with the IRS's letter.

Keeping free credits to one per person. New accounts get free credits, once per person. To check that, each time you sign in we record codes made from: your email address without the variations that reach the same inbox (such as a "+" tag), its domain if it isn't a large email provider, a random ID we keep in a cookie in your browser, a summary of your browser's settings (such as its screen size, time zone, languages and graphics), and your network address. The codes are one-way (made with a secret key), so they can't be turned back into what they were made from. We only compare them with each other, to see whether an account was made by someone who already had free credits. If it was, the new account starts without them. We don't use them for anything else.

Pages you look at before signing up. On PressUp's own pages (not on sites published with PressUp), while you aren't signed in, we note which pages you look at and when, the site that sent you (its address only), any campaign tags in the link that brought you (such as utm_source, or that you came from a Google ad), your country as Cloudflare estimates it, and whether you're on a phone, a tablet or a computer. We keep these under a random ID in a cookie in your browser, not with your network address. If you then create an account, we link them to it, so we know what brought you to PressUp and can follow up with information about what you were looking at. We don't record this for visitors in the European Economic Area, the UK and Switzerland, or when your browser sends a Global Privacy Control or Do Not Track signal.

Technical information. Like most websites, our servers and our network provider record addresses, browser details and times of requests. We use these records to keep PressUp secure and working.

Cookies

PressUp uses the cookies it needs to work: one that keeps you signed in, one that protects forms against forgery, and one that recognises your browser when you sign in, so free credits go to one account per person. Before you sign up, we also use one that keeps the random ID for the pages you look at (see above): it lasts 30 days, and is removed when you create your account. On PressUp's own pages, we also use Google Analytics to count visits and see which pages people use. It sets its own cookies to recognise a returning browser, except for visitors in the European Economic Area, the UK and Switzerland, who get none. We don't use advertising cookies. Sites published with PressUp don't use Google Analytics and set no cookies. A video, map, booking calendar or form from another service on a site (YouTube, Vimeo, Google Maps, Calendly, Acuity Scheduling, Setmore, Typeform, Jotform or Google Forms) loads only when the visitor presses its button; from then on, that service's own privacy policy and cookies apply to it.

How we use it

Help from PressUp. To answer a support request or look into abuse, PressUp's staff can sign in to your account and see and change what you can. Each time is recorded with the reason and what was changed. Staff can't spend your money, connect another service or your bank as you, give your tax number, or delete your account this way.

We use your information to build, host and change your sites, to sign you in, to deliver enquiries to site owners and on to the apps they choose, to show owners their visitor numbers, to take payments, to understand how PressUp's own pages are used and what brings people to it, and to keep PressUp secure. We email you sign-in codes, new enquiries, the bookings customers make or cancel on your site, and messages about your account, and after you sign up we may write to you about the parts of PressUp you were looking at (tell us and we'll stop), and, when a business asks us to, we email its invoices and review requests to its customers. We don't sell your information, and we don't use it for advertising. The one exception is a CleanByClean request, which, with your agreement, goes to one cleaning business that pays us for it.

Who helps us run PressUp

We share information only with the companies that help us run PressUp, and only what they need:

• AI providers. PressUp uses AI models to help build and change your site, write its text and photo descriptions, check your site's details before you publish, and make artwork. These models come from Anthropic (Claude), OpenAI (GPT), xAI (Grok) and Google (Gemini). When video generation is enabled, fal.ai and the video model provider serving the selected endpoint receive the scene instructions, visual-direction notes and any source image you choose for that clip. Which provider does a task depends on the model we choose for that task, and we may change it. The provider doing a task receives only what that task needs: your business description and details, your chat messages, your site's content, and the photos and design references you share. For artwork, it receives art-direction notes that PressUp writes. Generated videos are downloaded and prepared in your site library; provider handling and retention of submitted inputs follow the applicable provider policies.
• Stripe takes payments, both PressUp's and those of the businesses whose sites take payments.
• Namecheap registers the domains you buy through PressUp, in your name.
• Palm checks the business names you ask about against a state's records and, when you ask PressUp to, files your LLC with the state and applies to the IRS for its EIN.
• Resend sends PressUp's emails, such as sign-in codes and new enquiries.
• Twilio sends the text alerts you ask for: your mobile number, the code that confirms it, and each alert's words (your site's name, and the name and phone number or email of the person who got in touch, or for a booking, the service, its time and who booked).
• Google provides sign-in with Google, if you choose it, and Google Analytics, which measures how PressUp's own pages are used (addresses of the pages you visit, and your browser and device type). Pages on PressUp and on published sites load fonts from Google Fonts, so your browser connects to Google.
• Cloudflare carries traffic to PressUp and to published sites and protects them.
• IndexNow receives the addresses of a published site's new and changed pages when it's published, and shares them with search engines such as Bing, so they find the changes sooner. Nothing else is sent, and never member-only pages.
• Our hosting provider runs the servers that store PressUp's data.

Text messages. We use the mobile number you give for text alerts only to send you those texts. We don't share mobile numbers, or your agreement to get texts, with anyone for their own marketing, and we don't sell them. Reply STOP to any of our texts to stop them.

Apps you connect. When you connect an app and switch on what it does, we send it what you chose, at your direction, and that app's own privacy policy applies to what it receives. For Google Sheets, each new enquiry from your site (when it arrived, the form it came from, and its answers) is added to a sheet PressUp creates in your Google Drive. PressUp can reach only the sheets it creates, and uses that access only to create them and add your enquiries. For Google Search Console, PressUp uses your Google account to prove to Google that your website is yours (with a file your website shows Google), add it to your Search Console and send Google its sitemap, and reads that website's search numbers (clicks, times shown, average position and its top searches) to show them on your dashboard; it doesn't read or change anything else there. For Google Calendar, PressUp makes a calendar of its own in your Google Calendar and keeps your website's confirmed bookings in it (the service, the time and the customer's email), and sees when you're busy in your main calendar (busy or free only, not what your events are) so customers can't book those times; it can't see what your events are, or change your other calendars or events. We don't use your Google data for anything else: not for advertising, not to train AI models, and we don't sell it or pass it to anyone. PressUp's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. For Outlook, PressUp makes a calendar of its own in your Outlook calendar and keeps your website's confirmed bookings in it (the service, the time and the customer's email), and sees when you're busy in your main calendar (the times and whether you're busy only, not what your events are) so customers can't book those times. Microsoft's permission reaches all your calendars; PressUp uses it only for those, and doesn't read or change your other calendars or events, or use what it receives from Microsoft for anything else. For Calendly, PressUp receives each booking made in your Calendly and each cancellation (the event, its time and place, and the name, email, phone number for text reminders and answers of the person booking) and keeps them with your website's enquiries, as it keeps those; it uses its access to your Calendly only to start and stop sending them. For Slack, each new enquiry (the form it came from and its answers) is posted to the channel you pick when you add PressUp to Slack; PressUp can post only to that channel and can't read your Slack. For Mailchimp, only people who asked for your news (by the tick box or form you chose) are sent, and only their email address; Mailchimp asks them to confirm before they're added. Mailchimp gives PressUp access to your whole Mailchimp account, and PressUp uses it only to list your audiences and add those people. For HubSpot, each new enquiry with an email address is matched to a contact in your HubSpot by that email address (or becomes a new contact), with the enquiry's answers added as a note. If you choose to, PressUp also copies your HubSpot contacts (first name, last name, email and phone) into a private list in your site data that only you can see, when you ask it to. PressUp uses its access to your HubSpot contacts only for those. For Zapier, Make, n8n or another address you give us, each new enquiry from the forms you chose (when it arrived, the form, and the answers you ticked) is sent to that address. If you add your bookings to a calendar app, it fetches your confirmed bookings (the service, the time and the customer's email) from a private link only you have, and that calendar service's privacy policy applies to what it keeps.

We may also share information if the law requires it, or to protect PressUp, our users or the public.

How long we keep it

We keep your account and sites until you delete them. When you delete your account from the Account page, we delete your sites, their content, photos, enquiries, customer records, invoices, reviews and published files, and your account, and disconnect the apps you connected. Copies may remain in our backups for a limited time before they are overwritten. Deleting an account that holds customers' payment records goes through our support, so that payments still in progress are settled and the records the law requires are kept. The sign-in codes that keep free credits to one per person are kept for a year after they were last seen, including after you delete your account, so that deleting an account doesn't bring its free credits back. Visitor codes are deleted every day. Pages looked at before signing up are deleted after 30 days if they were never linked to an account, and a year after the visit if they were (or sooner, when you delete your account). We keep a CleanByClean request for a year after you send it, so we know which business it went to and can sort out any problem, then delete it. Write to [email protected] to have it deleted sooner; the business it went to keeps its own copy.

Your choices

You can see and change your details and your sites in PressUp, download your enquiries and your customers, and delete your account at any time. To ask for a copy of your information, a correction, or anything else about your privacy, write to [email protected]. Depending on where you live, you may have further rights under local law, and we'll honour them.

Site owners and their visitors

Visitors who make an account on a site published with PressUp (to book a time, for example) sign in with a code we email them or, when it's offered, with Google. With Google we receive only their verified email address, which is all their account on that site keeps.

If you publish a site with PressUp, you're responsible for the enquiries and customer records your site collects, the invoices and review requests you send through PressUp, and for telling your visitors and customers how you use them. Visitors who want their enquiry or customer record deleted can ask the site's owner, or write to us.

Children

PressUp is for businesses and isn't meant for children. We don't knowingly collect information from anyone under 16.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll let you know by email or in PressUp before it takes effect.