Privacy Policy

1. Who we are

PRminded is a media-relations platform operated from Dubai, United Arab Emirates. For the personal data described in this policy we act as the data controller. To reach us about anything in this policy, email hello@prminded.com with "Privacy" in the subject line.

2. The data we collect

We collect only what the platform needs to work.

• Account and identity data: name, work email address, password hash, chosen role (journalist or PR professional), and authentication provider if you sign in with Google.
• Professional profile data: outlet or agency, job title, the beats you cover, cities, biography, profile photo and links to published work.
• Verification evidence: the newsroom email domain we confirm and the published bylines you or we submit for editorial review.
• Content you create: pitches, press releases, story drafts, comments, posts and direct messages, including anything you attach to them.
• Usage and device data: pages viewed, features used, approximate location derived from IP, browser and device type, and error diagnostics.
• Billing data: subscription tier, invoices and VAT details. Card details are handled by our payment processor and are never stored on our systems.

3. Why we process it, and on what basis

Every processing activity has a lawful basis under the PDPL.

• To perform our contract with you: creating your account, matching and delivering pitches, hosting your content, running subscriptions and support.
• With your consent: verification of your journalist profile, marketing email, and any optional processing we ask you about separately. You can withdraw consent at any time.
• For our legitimate interests: keeping the platform secure, preventing spam and abuse, and improving how matching works, balanced against your rights.
• To meet legal obligations: tax and accounting records, and responding to lawful requests from authorities.

4. AI processing of your content

Parts of PRminded use large language models. When you ask for a draft, a rewrite or a match, the relevant text (a pitch subject and body, a press release, or the beats on a profile) is sent to our AI provider to generate the response or to compute the embeddings that power semantic matching. We do not permit that content to be used to train third-party models. AI output is always returned to you as an editable draft: PRminded never sends a pitch, files a story or publishes anything on your behalf.

5. Who can see your data

We do not sell personal data. It is shared only in these circumstances.

• Other users: your professional profile is visible to verified members. A pitch or message you send is visible to the recipient you sent it to.
• Service providers acting on our instructions: cloud hosting and databases, email delivery, file storage, payment processing, error monitoring and product analytics. Each is bound by contract to process data only for us.
• Legal and safety: where we are required to disclose by law, or where disclosure is necessary to investigate abuse or protect someone's rights and safety.
• Business transfer: if PRminded is acquired or merges, data may transfer with the business under the same protections.

6. Where your data is stored

Our primary database and file storage are hosted in the UAE region. Some service providers process limited data outside the UAE. Where that happens we transfer it only to a jurisdiction offering an adequate level of protection, or under contractual safeguards that meet the PDPL's requirements for cross-border transfer.

7. How long we keep it

We keep your account and profile data for as long as your account is open. When you close your account we delete or irreversibly anonymise your personal data within 90 days, except where we must keep records longer: billing and tax records for the statutory retention period, and security and audit logs for a limited window. Our audit log is append-only by design; when we action an erasure request we remove the personal data it references.

8. Your rights under the PDPL

You can exercise any of these by emailing hello@prminded.com with "Privacy" in the subject. We will respond within the period required by law and may ask you to confirm your identity first.

• Access: get a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your personal data deleted, subject to our legal retention obligations.
• Restriction: ask us to limit how we process your data while a concern is resolved.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent: where processing relies on consent, withdraw it without affecting what we did beforehand.
• Complain: raise a complaint with the UAE Data Office if you believe we have not handled your data properly.

9. How we protect it

Data is encrypted in transit and at rest. Access is controlled by role and re-checked on the server for every action. We never rely on the browser to decide what you are allowed to see. Services are isolated from one another, internal traffic is authenticated, and privileged actions are written to an append-only audit log. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the PDPL requires.

10. Cookies and similar technologies

We use cookies that are strictly necessary to sign you in and keep your session secure, preference cookies that remember your language and layout direction, and analytics cookies that tell us which features get used. You can clear or block cookies in your browser, but the strictly necessary ones are required for the platform to work.

11. Children

PRminded is a professional platform intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

12. Changes to this policy

We update this policy as the product and the law change. The date at the top always reflects the current version. If a change materially affects how we use your personal data we will tell you in the app or by email before it takes effect.