Privacy Policy
Last updated: September 6, 2026
1. Who We Are
Presly is operated by Next Renewal LLC, 2442 NW Market St, Unit #887, Seattle, WA 98107, USA. Contact: support@presly.ai.
This policy explains what we collect, why, and what your choices are. It applies to presly.ai, the Presly mobile apps, and related services (the "Service").
2. Our Two Roles
For your account, billing, and usage data, Next Renewal LLC is the data controller — we decide how it is used, as described here.
For the content of your workspaces — your posts, uploaded media, brand information, and the comments, messages, and reviews we collect from your connected social accounts — we act as your service provider (processor). We process that data on your instructions to deliver the Service, and you are responsible for having the right to give us that data.
3. Information We Collect
Account information. Your name, email address, and sign-in identity from the provider you choose (Google, Microsoft, Apple, or Facebook) or the email and password you register with (passwords are stored only as secure hashes). Team members you invite provide the same.
Business profile. The information you tell us about your business — name, type, location, services, brand preferences — and information gathered from public sources you point us to (such as your website or public business listings) to build your content profile.
Social account connections. When you connect a social media account, we store the account identity and the access tokens the platform issues so we can publish and read data on your behalf. We never see your social media passwords.
Your content. Posts, captions, drafts, photos, videos, logos, and brand materials you create or upload.
Social inbox data. With your connection authorization, we collect comments, direct messages, and reviews from your connected accounts so you can read and answer them in one place. This includes content written by your audience — people who are not Presly users; see Section 6.
Analytics data. Post performance and account metrics reported by the platforms you connect.
Payment information. Web payments are processed by Stripe; mobile purchases by Apple or Google. We receive transaction records (plan, amount, status, and store transaction identifiers) but never your full card number.
Usage, device, and log data. IP address, browser and device type, pages viewed, and actions taken, collected through server logs, Cloudflare (security and delivery), Google Analytics (see Section 8), and Sentry (error reports, which may include IP addresses and account identifiers).
Security signals. Login and signup protection via Cloudflare Turnstile (IP and device signals), rate-limit and abuse-prevention records, including a ledger of connected-account identities used to prevent free-trial abuse.
Support communications. Messages you send us.
4. How We Use Information
- To provide the Service — generate content, schedule and publish posts, collect your inbox, show analytics, sync across devices (performance of our contract with you).
- To bill you — process subscriptions, credits, and refunds (contract and legal obligations).
- To secure the Service — authentication, fraud and abuse prevention, rate limiting, debugging (our legitimate interest in a safe service).
- To improve the Service — aggregate usage analysis and product decisions (legitimate interest).
- To communicate — service emails such as verification, billing, and important product notices; you can opt out of non-essential email at any time (legitimate interest / consent).
- To comply with law — tax, accounting, and lawful requests (legal obligation).
We do not make automated decisions about you that have legal or similarly significant effects.
5. AI Processing
Presly uses third-party AI models to power content generation and assistance:
- Google Gemini (text, images, and analysis)
- Image generation providers (currently Ideogram and fal.ai) for certain image styles
To generate content, we send these providers the relevant context: your business profile, brand settings, content topics, your captions and images, and — for AI-drafted inbox replies — the text of the conversation being answered. This data is not anonymized; it is your business data, processed to serve you.
Training. We do not use your data to train AI models. Our primary provider, the Google Gemini API (paid tier), does not use your prompts or outputs to train or improve its models. Image-generation providers receive only the image request (never your inbox conversations) and process it under their own API terms, which can permit limited review of content flagged for policy violations.
AI transparency. Images generated by our AI carry machine-readable provenance signals where the underlying model provides them (Google's SynthID watermark). Our in-app assistant is an AI system, and its responses are AI-generated.
6. Your Audience's Data (Inbox)
When you connect social accounts, we receive comments, messages, and reviews written by your audience — your customers and followers, who are not Presly users. We process this data only as your service provider: to display it to you, to let you reply, and (if you use the feature) to draft suggested replies with AI. We do not use your audience's data for our own purposes, do not build profiles of these individuals, and do not sell it. It is retained while the account stays connected and is deleted with your workspace. Individuals seeking access to or deletion of their messages should contact the business they wrote to, or the social platform where they wrote it; we support our customers in honoring such requests.
7. When We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share data only with service providers acting for us, with platforms at your direction, or when the law requires:
- Google Cloud Platform — hosting and storage (United States)
- Cloudflare — content delivery, security, bot protection
- Social media platforms you connect — we publish and read data at your direction
- Social-platform connectivity providers — infrastructure that maintains our platform connections
- Google Gemini, Ideogram, fal.ai — AI processing (Section 5)
- Stripe, Apple, Google — payments
- SendGrid / Microsoft 365 — outbound email
- Sentry — error monitoring
- Google Analytics — site analytics (Section 8)
- Professional advisers and authorities — when required for legal compliance, to protect rights and safety, or in a business transfer (we would notify you of a change of ownership)
8. Cookies and Analytics
We use essential cookies for sign-in and security. We use Google Analytics to understand which pages and features visitors use. In the European Economic Area, the United Kingdom, and Switzerland, analytics cookie storage is off until you allow it. Elsewhere it is on unless you opt out. A saved opt-out or Global Privacy Control signal keeps analytics cookie storage off. You can change your choice at Analytics cookies: On/Off below or in Account settings. When cookie storage is off, Google Consent Mode can still send cookieless measurement pings. We do not use third-party advertising cookies.
You can control cookies in your browser, and Google offers an opt-out browser add-on. Our site does not respond to "Do Not Track" browser signals.
9. International Transfers
We are a U.S. company and process data in the United States. If you use the Service from outside the U.S., your data is transferred to and stored in the U.S. For customers in the EU, UK, and other regions with data-transfer rules, we protect transfers through appropriate safeguards, including data-processing agreements with Standard Contractual Clauses across our major providers, and we honor the rights described in Section 12 for all users. You may contact us with questions, and you have the right to lodge a complaint with your local data-protection authority.
10. Retention
- Account and business profile: for the life of your account.
- Content and media: until you delete it or your account.
- Inbox data: while the social account stays connected; deleted with your workspace.
- Deleted accounts: removed from live systems immediately; residual copies clear from encrypted backups within 14 days.
- Billing and tax records: retained as required by law (typically 7 years).
- App-store purchase identifiers: retained indefinitely to prevent subscription abuse, as disclosed on our account deletion page.
- Security and abuse-prevention records: up to 24 months, or longer where needed to prevent repeated abuse.
- Server logs and error reports: typically 90 days or less.
11. Security and Breach Notification
We protect data with encryption in transit and at rest, access controls, least-privilege practices, and monitoring. No system is perfectly secure. If a breach affects your personal data, we will notify the competent supervisory authority within 72 hours where the law requires it, and we will notify you without undue delay, with what happened, what data was involved, and what we are doing about it.
12. Your Rights
Wherever you live, we honor these rights over your personal data:
- Access a copy of it
- Correct it
- Delete it (you can delete your account yourself in Settings)
- Export it in a portable format
- Restrict or object to certain processing
- Withdraw consent where processing is based on consent
- Not be discriminated against for exercising any right
Email support@presly.ai from your account email. We verify identity before acting and respond within 30 days. If you are in the EU or UK, you also have the right to complain to your data-protection authority; we would appreciate the chance to address your concern first.
13. Children
The Service is for businesses and requires users to be at least 18. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
14. Google and Meta Platform Data
Presly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements — Google user data is used only to provide the features you see, never for advertising, and never sold.
Data received from Meta platforms (Facebook, Instagram) is used only to provide the Service. You can delete it at any time by disconnecting the account in Integrations or deleting your account; both revoke our access tokens and remove stored platform data.
15. Changes to This Policy
We may update this policy as the Service and the law evolve. The current version is always at this URL with its effective date. For material changes, we will notify you through the Service or by email before they take effect.
16. Contact Us
Next Renewal LLC 2442 NW Market St, Unit #887 Seattle, WA 98107 Email: support@presly.ai Phone: 253-987-8079