Legal

Privacy Policy

Last updated: October 29, 2026

PressTwo ("we," "us," or "our") operates the PressTwo platform, including our website, dashboard, APIs, and embeddable chat widgets (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name and email address. You can also add a company name. When you buy a license, our payment processor, Stripe, collects your payment details; they are not stored on our servers. If you invite teammates, we store their email addresses. If you turn on text-message alerts, we store the phone number you give us. If you use our contact form, we receive what you send us.

1.2 Customer Data

When you use our Service to create AI agents, you may upload documents, website URLs, FAQs, and other content ("Knowledge Base Data"). This data is used only to run your AI agents and is not shared with other customers or used for any other purpose. The same goes for applicant files you upload to Closer, and for the staff names and phone numbers you add or sync for SpotCheck.

If you connect a Google or Microsoft mailbox to PressTwo Radar, we read the email that arrives in it (starting with the last 24 hours when you first connect it), store each message with the AI's sorting and any reply, and send replies from your address. When Radar is turned on for the mailbox, we also read the email you send from it (starting with the last 2 hours when Radar is turned on, or the last 48 hours when you press Sync now) to find questions and requests still waiting on an answer, store those messages, and send follow-up emails from your address in the same thread until the other person replies. If someone asks Radar to stop, we save their email address so Radar never follows up with them again. If you also connect your calendar, we check your availability and add the events you book. If you disconnect the mailbox, we delete our access tokens and stop reading it; the email already saved stays in your dashboard.

1.3 Chats, Calls and Emails With AI Agents

When someone chats with, calls, or emails an AI agent built on PressTwo, we save the conversation for the business that runs the agent (the account owner). The owner can read it in their dashboard. We save:

Chat messages, a random visitor ID, timestamps, and anything the visitor chooses to share, such as a name, email or phone number.
Call recordings, transcripts, call summaries, the caller's phone number, and details the caller gives, such as a name or the reason for the call.
Email that arrives in an inbox connected to Radar, email the owner sends from it, and the replies and follow-ups Radar sends.
The email address of anyone who asks Radar to stop following up, so it never emails them again.
SpotCheck test calls to the account owner's staff: recordings, transcripts, and scores.
A topic and sentiment tag, written by AI, for the owner's analytics.

A website chat starts a new conversation after 30 minutes without a message.

These AI providers process the conversations for the account owner:

Anthropic (Claude) writes chat and email replies and Radar follow-ups, finds the open questions and requests in email sent from a Radar mailbox, reads images you upload and Closer files, tags and summarizes conversations for analytics, answers questions in the dashboard, and grades SpotCheck calls.
Voyage AI turns the knowledge base and each question into search vectors so the agent can find the right passage.
Retell AI runs phone and browser voice calls, including SpotCheck test calls. It records the call, turns speech into text, speaks the replies, and writes a call summary, using its own speech and language-model providers. Our agent voices come from ElevenLabs.

Every call answered by a PressTwo voice agent opens with a recording notice: "This call is recorded for quality and training purposes." Our chat widget and hosted chat pages label the agent "AI agent" and show visitors the notice "Chats are saved". If a visitor uses the microphone button to type by voice, their browser's own speech service turns the speech into text; we receive only the text.

The business that runs the agent controls this data. If you chatted with, called, or emailed a business that uses PressTwo, send privacy questions and requests to that business; we will help them respond. PressTwo's own website works the same way: if you chat with our agent or talk to Metis on presstwo.ai, we save that chat or call.

1.4 Usage Data

We automatically collect information about how you interact with our Service, including pages visited, features used, conversation volumes, and performance metrics. We collect it through server logs and through Vercel Web Analytics and Speed Insights, which count page views and measure page speed without cookies. We don't use Google Analytics. When you sign in, our sign-in provider records your session, including your IP address and browser, to keep your account secure. We also use IP addresses briefly to rate-limit traffic and block abuse. This data is used to improve and protect the Service.

1.5 Cookies and Similar Storage

We use cookies and similar browser storage (local storage and session storage). They fall into two groups.

Essential. Always on, because the Service doesn't work without them:

Sign-in cookies (sb-…-auth-token) that keep you signed in.
A team and support cookie (presstwo_acting_as) that remembers which account you are working in when you switch to a team account, or when our support staff open your account to help you.
Your cookie choice (p2_consent in local storage), so we remember it, including a Reject.
Your consent region (p2_region, kept for a day): whether the opt-in rule for Microsoft's ad tag applies to you (see "Where you are" below). We work it out from the country of your IP address and store only the result, not the country.
Chat widget storage (cp_<agent ID> in local storage) that keeps a random visitor ID, the conversation ID and the last messages of the current chat, so the chat carries on as the visitor moves between pages. The chat is kept for 30 minutes after its last message; after that, the widget clears it the next time it loads. If the agent's owner turns on auto-open, cp-auto-open-<agent ID> in session storage remembers that the chat already opened during the visit.
Small settings, such as a dashboard banner you dismissed (pt-trial-dismissed in session storage).

Advertising. Off unless you click Accept on our cookie banner, with one exception: outside the EU and EEA, the UK and Switzerland, Microsoft Advertising's cookies are on by default (see "Where you are" below):

Google Ads: _gcl_au and _gcl_ls on presstwo.ai (plus _gcl_aw and similar _gcl_ cookies after you click one of our ads), and IDE on doubleclick.net.
Microsoft Advertising (UET): _uetsid and _uetvid on presstwo.ai (plus _uetmsclkid after an ad click), _cltk in session storage, MUID on bing.com, and MR on bat.bing.com.
After a purchase, gads_purchase_… in session storage, so the purchase is counted once.

Your choice. Accept and Reject are equal buttons on the banner, and the site works the same either way. The banner appears on our website's marketing pages, not in the dashboard, on sign-in pages, or on hosted chat pages. You can change your choice at any time with the Cookie settings button in the footer of our website. Your choice applies to the browser you make it in. When you click Reject, and whenever advertising cookies are not allowed, we delete the advertising cookies and storage on presstwo.ai (_gcl_*, _uet* and _cltk). Cookies on Google's and Microsoft's own domains (IDE, MUID, MR) can't be removed from our site; you can clear them in your browser settings. If your browser blocks storage, we can't remember your choice, so the banner shows on each visit and the advertising tags stay off.

Where you are. Outside the EU and EEA, the UK and Switzerland, ad measurement cookies from Microsoft Advertising are on by default: Microsoft's tag loads with the page, and the banner still asks. To turn them off, click Reject on the banner, use Cookie settingsin the footer, or turn on Global Privacy Control in your browser. In the EU and EEA, the UK and Switzerland, and whenever we can't tell where you are, they stay off until you click Accept. Google Ads cookies stay off everywhere until you click Accept.

Global Privacy Control. If your browser sends the Global Privacy Control (GPC) signal, we treat it as Reject, and it replaces any earlier Accept in that browser. The advertising tags don't load, wherever you are, the banner doesn't open on its own, and in Cookie settings the Accept button is switched off, so advertising cookies can't be turned on while your browser sends the signal. Section 4 explains what the advertising tags do.

The chat widget you embed on your own website does not carry any PressTwo advertising or analytics tracker — it loads only what it needs to run the conversation.

1.6 Business Contacts

We also collect business contact details, such as a name, work email address, company, and job title, from public websites and business-contact data providers. We use them to email businesses about PressTwo. To stop these emails, reply and ask us to stop, or tell us through our contact page.

2. How We Use Your Information

To provide, maintain, and improve the Service
To process transactions and send billing-related communications
To answer questions with your AI agents using your Knowledge Base Data
To provide conversation logs and analytics in your dashboard
To send the notifications, alerts, and digests you turn on
To respond to your inquiries and provide customer support
To detect, prevent, and address technical issues and abuse
To measure and show PressTwo ads, under the cookie rules in section 1.5
To tell businesses about PressTwo (section 1.6)
To comply with legal obligations

3. Data Sharing and Disclosure

We do not sell personal information for money. We share information only in the following circumstances:

Service Providers: Vercel (hosting), Supabase (database, sign-in, and file storage), Stripe (payments), Resend (email), Twilio (text-message alerts you turn on), Upstash (rate limiting), and Sentry (error monitoring) process data on our behalf under contract.
AI Model Providers: Anthropic, Voyage AI, and Retell AI (with its speech and voice providers, including ElevenLabs) process Knowledge Base Data, Closer files, and the conversations described in section 1.3 to run the Service. Anthropic does not use data sent through its API to train its models.
Advertising Partners: Google, only if you accept advertising cookies, and Microsoft, if you accept or, outside the EU and EEA, the UK and Switzerland, by default until you click Reject. See section 4.
Services You Connect: If you connect a mailbox, calendar, CRM, spreadsheet, database, store, phone system, messaging app (such as Slack, Microsoft Teams, or Webex), webhook, or other integration, we exchange the data that integration needs with that service.
Legal Requirements: We may disclose information if required by law, subpoena, or court order, or to protect the rights, safety, or property of PressTwo, our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

4. Advertising

We advertise PressTwo on Google and Microsoft Bing. The Google Ads tag loads on our website only if you click Accept on our cookie banner. The Microsoft Advertising tag loads when you click Accept if you are in the EU or EEA, the UK or Switzerland (or we can't tell where you are), and by default everywhere else, until you click Reject. These tags send those companies information about your visit: the pages you view, the ad you came from, and whether you signed up, contacted us, or bought a license (and its price), along with cookie IDs, your IP address, and browser details. Google and Microsoft use it to measure our ads and to show you PressTwo ads on other sites and apps. Their own privacy policies cover what they do with it.

Under some US state privacy laws, such as California's, this can count as "sharing" personal information for cross-context behavioral advertising, or as "targeted advertising." We do not sell personal information for money.

To opt out, click Reject on the banner, use Cookie settings in the footer, or turn on Global Privacy Control in your browser. Reject deletes the advertising cookies on presstwo.ai; cookies on Google's and Microsoft's domains can be cleared in your browser settings. The advertising tags don't load in the chat widget, on hosted chat pages, or in the dashboard, and they don't report page views there. The one exception is the dashboard page you return to after a purchase, where the tags load, under the same rules, to record that purchase.

5. Data Retention

We keep your account data, Knowledge Base Data, and conversation logs, including call recordings and transcripts, while your account is open, unless you delete them sooner. The exception is SpotCheck test calls: we delete their recordings and transcripts, including Retell AI's copy, 180 days after the call, and keep only the score, the per-question results and the coaching note. You can delete documents, leads, saved Closer results, and agents from your dashboard at any time. Deleting an agent deletes its chats, calls, and leads from PressTwo. Call recordings are also stored by Retell AI; ask us and we will have them deleted. Closer deletes uploaded documents as soon as the analysis is done, and a saved result deletes itself after 90 days.

When you request a free AI review of a website, we store the website address, the review results and, if you give it, your email address, for 90 days, then delete them.

To delete your account, contact us through our contact page. We then delete all associated data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest (AES-256), access controls, and regular security reviews. For more details, see our Security page.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data.
Portability: Request a machine-readable copy of your data.
Objection: Object to the processing of your data in certain circumstances.

To exercise any of these rights, contact us through our contact page. We will respond within 30 days. We may need to confirm your identity first, for example by writing to the email on your account. You can also have an authorized agent make a request for you. If your data came from a chat, call, or email with a business that uses PressTwo, send your request to that business; we will help them answer it.

7.1 US State Privacy Rights

If you live in California or another US state with a consumer privacy law, you have the right to:

Know what personal information we collect, use, and disclose, and get a copy.
Delete personal information we hold about you.
Correct inaccurate personal information.
Opt out of "sharing" and targeted advertising: click Reject, use Cookie settings, or turn on Global Privacy Control (see section 4).
Not be discriminated against for using any of these rights.

Section 1 lists the kinds of personal information we collect and where we get it, section 2 why we use it, and section 3 who receives it. We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. If we turn down your request, you can appeal by replying to our answer. If we still turn it down, you can contact your state attorney general.

7.2 EEA and UK

If you are in the European Economic Area or the United Kingdom, the GDPR (and the UK GDPR) gives you the rights above, plus the right to restrict processing, to withdraw consent at any time, and to complain to your local data protection authority. We rely on these legal bases:

Contract: to provide the Service you signed up for.
Legitimate interests: to keep the Service secure, prevent abuse, improve it, answer your questions, and tell businesses about PressTwo.
Consent: for advertising cookies. You can withdraw it at any time with Cookie settings in the footer.
Legal obligation: where the law requires us to keep or disclose data.

8. International Data Transfers

Our Service is hosted in the United States. If you are accessing the Service from outside the United States, your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our contact page.