Your Data Stays On Your Site.
What Presstack keeps, where it keeps it, what leaves your site and why.
In Your Own WordPress Database.
Presstack is a WordPress plugin (or the theme, if you build the whole site with it), so it runs where your site runs. What Cleo knows and does is stored there, not in an account somewhere else.
-
On Your Site
Your business details, Cleo's notes, the history of every change and the copies used to undo them, your ranking history and your enquiries. All in your own database.
-
On Our Side
Your account and licence, a record of credits used (what was charged and for what, not the content), the sites your licence is used on, and your Google connection if you make one.
-
Not Kept At All
The text sent for writing and the text that comes back are passed through, not stored. Nothing is logged with your content in it.
-
Short Lived Copies
To avoid paying twice for the same lookup, an AI engine's answer to a search is kept for 7 days and ranking data for 14. Neither holds anything about your business.
Only What A Job Needs, Only When You Use It.
Nothing is sent anywhere on its own. When Cleo writes, checks a ranking or makes an image, the part needed for that job only goes to the service that needs it.
-
Writing And Images
To write, Cleo sends the instructions and the business details the job needs to Anthropic, through Presstack. Images are made by fal.ai. Use your own Anthropic or fal.ai key and the request goes straight from your site to them.
-
Rankings And Research
Keyword positions and search data come from DataForSEO. AI answer checks ask OpenAI, Google Gemini and Anthropic the question you are tracking. None of it needs your content.
-
Your Google Data
Search Console and Analytics are connected with read only access. Presstack reads them and never writes to them. Disconnect at any time and the access is revoked at Google.
-
Payments
Subscriptions and purchases go through Stripe's own checkout. Card details are entered with Stripe and never reach Presstack or your site.
Your Data, Item By Item.
Where each kind of data lives, and whether it ever leaves your site.
| Data | Where It Lives | Leaves Your Site? |
|---|---|---|
| Business details | Your database | Only the parts a writing job needs |
| Cleo's notes | Your database | No |
| Change history and undo copies | Your database | No |
| Pages, posts and products | Your database | Only when you ask Cleo to rewrite one |
| Ranking history | Your database | No |
| Enquiries from your forms | Your database | No |
| Search Console and Analytics | Read by Presstack, never written to | |
| Account, licence and credit record | Presstack | Kept by us to run your account |
| Payment details | Stripe | Never seen by Presstack |
Who Can Do What.
Presstack follows WordPress's own permissions, and adds its own on top.
| The Question | The Answer | |
|---|---|---|
| Who Can Use Presstack | Site administrators only | Every action is checked against the user and protected against forged requests |
| What Cleo Can Change | Your choice | Everything starts on Ask Me; changes to your pages and products always ask first |
| Knowing What Changed | Every change is logged | With the date, and whether you or Cleo made it |
| Undoing It | Pages, posts, products and images | One click, for 30 days |
| Visitors On Your Site | Not tracked by Presstack | Your own Google Analytics only, if you add it |
| Cookie Consent | A consent banner is built in | With Google Consent Mode; switch it on if your site needs it |
| Form Spam | Hidden spam traps and rate limits | Enquiries are stored on your site |
| Get Started |
Everything Procurement Will Ask For.
Data Processing Agreement
Our processing terms, security measures and sub-processors.
Read The Agreement
Ask Us
A security question this page does not answer? Ask, and you will get a straight answer.
ContactSecurity Questions
-
No.
Your business details, history, enquiries and ranking history live in your own WordPress database. When Cleo writes, the text needed for that job passes through Presstack to the AI provider and back, and is not stored or logged.
-
Only the ones a job needs.
Anthropic for writing, fal.ai for images, DataForSEO for rankings and search data, OpenAI, Google Gemini and Anthropic for AI answer checks, Google for Search Console, Analytics, maps and speed checks, and Stripe for payments. Review and social services are only used if you connect them. The full list of sub-processors is in the data processing agreement.
-
Yes, for writing and images.
Add your own Anthropic or fal.ai key and those requests go straight from your site to the provider, without passing through Presstack. Ranking data always comes through Presstack.
-
Read Search Console and Analytics. Nothing else.
Both are connected with read-only access, so Presstack can never change them. If you connect Google Calendar for bookings, that one can add events. Disconnect at any time and the access is revoked at Google.
-
Administrators only.
Every action checks the user's permissions and is protected against forged requests. Cleo changes nothing on your pages without approval unless you switch an area to Automatic, and every change is logged.
-
Presstack does not track your visitors.
If you add your own Google Analytics, that runs as normal. A cookie consent banner with Google Consent Mode is built in; it is off until you switch it on, so turn it on if your site needs consent. Some design widgets, such as popups, use cookies to remember they have been shown.
-
It stays on your site.
If the subscription stops, your site and everything Cleo made keep working. If you delete the plugin, your data is kept unless you first switch off Keep My Data, and even then your posts, pages and images are never deleted.
-
Yes.
It covers how we process data on your behalf, our security measures, international transfers and our sub-processors. Read it here.
-
Contact us directly.
Use the contact page or email hello@presstack.ai. Security reports are dealt with first.
Put It On A Test Site First.
Install Presstack on a staging copy, connect Google, and look at what it does before it goes near your live site.