Privacy Policy
Last updated: April 20, 2026
Press & Galley ("we," "our," or "us") operates the pressgalley.com website and the Press & Galley Amazon Ads optimization service (the "Service"). This page explains what information we collect, how we use it, and the choices you have.
In plain English: we collect the minimum data needed to run the Service, we don't sell your data to anyone, and you can delete your account and data at any time.
Information we collect
Information you give us
When you sign up for the waitlist, we collect your email address. When you create a Press & Galley account, we additionally collect your name, a password (stored encrypted), and billing information processed by our payment provider Stripe.
Information from Amazon
When you connect your Amazon Advertising account via Amazon's Login with Amazon (LWA) OAuth flow, we receive authorization tokens that let us access your Amazon Ads data on your behalf. We never see or store your Amazon password.
Through the Amazon Ads API, we access campaign, keyword, search term, and performance data associated with your advertiser account. We use this data solely to provide the Service — analyzing your campaigns, generating recommendations, and executing changes you approve.
Information collected automatically
When you use our website or Service, we automatically collect certain information including IP address, browser type, device information, and pages visited. We use cookies and similar technologies to maintain sessions and remember your preferences. We do not use advertising cookies or third-party tracking cookies.
How we use your information
- To provide, maintain, and improve the Service
- To analyze your Amazon Ads data and generate recommendations
- To process payments and manage your subscription
- To send you service-related communications (account notifications, receipts, product updates)
- To respond to your questions and support requests
- To detect, prevent, and address fraud or security issues
- To comply with legal obligations
How we share your information
We do not sell your personal information or your Amazon Ads data. We share information only with:
- Service providers who help us operate the Service, including cloud hosting (Vercel, AWS), payment processing (Stripe), email delivery (Postmark), and error monitoring (Sentry). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
- Amazon, in the form of API requests that execute changes you approve on your own advertiser account.
- Legal authorities, if required by law, subpoena, or to protect the rights and safety of Press & Galley, our users, or the public.
- Successor entities, in the event of a merger, acquisition, or sale of assets. We would notify you before your information becomes subject to a different privacy policy.
How we protect your information
We implement appropriate administrative, technical, and physical safeguards designed to protect your information. This includes encryption in transit (TLS) and at rest, access controls, regular security reviews, and SOC-2-aligned practices for cloud infrastructure.
No security measures are perfect. If we become aware of a security incident affecting your data, we will notify you as required by law and make reasonable efforts to minimize any harm.
Your rights and choices
You have the following rights regarding your information:
- Access: You can request a copy of the data we hold about you.
- Correction: You can update your account information in your dashboard, or email us to correct any information we hold.
- Deletion: You can delete your account at any time. Upon deletion, we will delete your personal information and associated Amazon Ads data within 30 days, except where we're required to retain it by law (e.g., for tax or accounting purposes).
- Disconnection: You can disconnect your Amazon account at any time from your dashboard, which immediately revokes our access to your Amazon Ads data.
- Opt out of marketing emails: Every marketing email includes an unsubscribe link. We'll still send you essential service emails (billing, security) unless you close your account.
If you're in California, the EU, or UK, you may have additional rights under applicable privacy laws. Contact us to exercise any of these rights: privacy@pressgalley.com.
Data retention
We retain your account information while your account is active. After account deletion, we delete your personal data within 30 days. We may retain anonymized, aggregated data indefinitely for analytical and product improvement purposes. We retain financial records as required by applicable tax and accounting laws (typically 7 years).
International data transfers
Press & Galley is based in the United States. If you are accessing the Service from outside the US, your information will be transferred to, stored, and processed in the US. We use appropriate safeguards for international transfers as required by applicable law.
Children's privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.
Contact us
If you have questions about this Privacy Policy or our practices, contact us:
Press & Galley
Email: privacy@pressgalley.com
For security issues: security@pressgalley.com