Privacy policy

The short version

PullPress is designed to hold as little of your data as possible. Your site content lives in your own GitHub repository — not in our database. We store the minimum needed to run your account, and we never sell your data or use it for advertising.

What we collect

Account: your email address, display name and role. Authentication uses single-use, short-lived magic-link tokens — we never store a password.

Preferences: cookies for your session and for your theme (pp_theme) and language (pp_locale) choices.

Operational: session records and rate-limit counters to keep the service secure.

Billing: handled by Stripe. We store a customer/subscription reference and plan status; we never see or store your card details.

Your content stays in your repository

The pages, posts, images and data you edit are committed to your own GitHub repository through the GitHub App you install. Drafts are branches in that repository. We read and write content on your behalf to power the editor and review flow, but we do not keep a separate copy of your content in our database.

Because everything lives in your repo, your content is fully portable: stop using PullPress and your complete, versioned content is still yours.

Third parties we use

GitHub — to read and write your content via the GitHub App.

Neon (database) and Netlify (hosting) — to run the service.

Resend — to send sign-in links and notification emails.

Stripe — to process subscriptions (paid plans only).

Anthropic and OpenAI — only when you use an AI feature. The relevant content (e.g. the text to translate, a diff to review, or an image prompt) is sent to the provider to process that single request; it is not used to train their models under our API agreements.

Pexels — only if your administrator enables stock-photo search.

PostHog — if analytics are enabled, for privacy-friendly product analytics and error tracking, to understand usage and fix problems.

Cookies

We use a session cookie to keep you signed in, and two small preference cookies (pp_theme, pp_locale). If analytics are enabled, PostHog sets its own cookies to measure usage. We do not use advertising or cross-site tracking cookies.

Your rights

You can access and update your profile at any time. Deleting a workspace or your account removes the associated account data from our database; your content remains in your Git repository, under your control.

For data requests or questions, contact us at privacy@pullpress.app.

Security & retention

GitHub access uses short-lived, per-request installation tokens; private keys and secrets are kept as server-side environment variables and never sent to the browser. We keep account data for as long as your account is active and remove it on deletion.