Privacy Policy
Effective November 9, 2026
Approved — updated November 9, 2026. Mark Kendrick approved this November 9, 2026 Privacy Policy for publication. Effective November 9, 2026.
Effective November 9, 2026. November 9, 2026 edition
Mark Kendrick operates City Press Release under the business name Kendrick Online Consulting. This policy explains how we handle information about customers, website visitors, people mentioned in releases, and journalists and outlets we contact. For a privacy request, email support@citypressrelease.com. You can contact us without creating an account. Mailing address: 1684 Whittier Ave, Space 42, Costa Mesa, CA 92627
1. What we collect and why
- Source
- You or your business
- Information
- Name, business, email, phone if supplied, sign-in details and support correspondence.
- How we use it
- Manage your account, answer requests, confirm instructions and protect access.
- Source
- You and people acting for you
- Information
- Briefs, links, files, images, quotes, typed answers and optional voice recordings.
- How we use it
- Prepare drafts, transcribe answers, write a series of social posts and build your business knowledge base.
- Source
- You and our service
- Information
- Drafts, revisions, the approved release, approval history and publication links.
- How we use it
- Document what you authorized, publish approved work and handle corrections.
- Source
- You and our payment processor
- Information
- Order, invoice, payment status, amount, dates, subscription consent and cancellation history.
- How we use it
- Process orders, manage credits, issue refunds and send billing notices. The processor handles full card numbers.
- Source
- Your browser
- Information
- IP address, browser type, pages requested and cookies used for sign-in.
- How we use it
- Deliver pages, keep you signed in, diagnose faults and detect misuse.
- Source
- Google, if you allow analytics
- Information
- Page views, scrolls, outbound clicks and the browser details the Google tag sends with them.
- How we use it
- Understand site traffic. Google receives this through the Google tag for City Press Release.
- Source
- Outlets and public sources
- Information
- Professional contact details, editorial topics, pitches, replies and public links.
- How we use it
- Select relevant outlets, document submissions and honor contact preferences.
A customer may give us information about someone else, such as a spokesperson’s name, photo, quote or business email. Supply only information you have permission to use. If a release mentions you, you may contact us directly about your information.
2. Private working material and public releases
Your knowledge base holds the business details, uploads, transcripts and previous work you save for future orders. We use it to prepare your releases, website Q&As and social posts and to pre-fill later orders. If you separately authorize us to use text and images from your website, we may save that material for the same purpose. We do not give other customers access to your knowledge base.
Your approval authorizes us to publish the final release, including the names, quotes, images and contact details it contains, in our Newsroom and recent releases list. If distribution is included, we also send approved material and a tailored pitch to matched outlets. If you select a paid outlet, we send the information it needs for that submission. Outlets handle submissions under their own policies. Public releases may be copied, indexed or archived. We seek separate permission to feature your release in our ads or case studies.
3. Voice answers and AI assistance
Each follow-up question accepts a typed answer. If you prefer to speak, press Record. Your microphone is used as described in the Terms of Service, and you should record only your own voice. We send the recording for transcription and let you review and edit the text. We use the transcript to prepare your release. We do not create voiceprints, clone voices or use a recording to identify a speaker.
We use AI tools to draft and revise content from your material. An AI assistant may also help draft responses to support messages. A person handles complaints and refunds. We do not authorize our AI providers to use your private uploads, recordings, transcripts or knowledge base to train their general-purpose models.
4. Who receives information
Service providers may handle information for hosting, storage, payment processing, email delivery, transcription, AI-assisted writing and customer support. For example, the transcription provider receives the audio it converts to text. We limit the information we send to what each provider needs for its task.
If you allow analytics, Google may receive page views, scrolls, outbound clicks and similar site-use information through the Google tag for City Press Release, measurement ID G-9T3QKMWVZP. We use that information to understand site traffic. We do not send it for advertising that follows people across different businesses’ websites or apps.
We may disclose necessary information to meet a legal obligation, respond to lawful process, prevent abuse or protect someone’s safety. If ownership of the business changes, we may transfer information to the successor and will give notice of the change. We do not sell personal information or share it for advertising that follows people across different businesses’ websites or apps.
4.1 Social mixer posts
We write suggested social posts from your approved release and, if you grant the optional website permission, from content on your website. We do not ask for your social network logins, and we do not store them. We do not post to a social network for you. You copy or download the posts and publish them on your own accounts.
5. Journalists and editorial outlets
We use outlet websites, mastheads, submission pages and direct correspondence to identify professional contacts and the topics they cover. For each submission, we record the outlet, pitch, date, relevant replies and any publication link we verify. The ordering customer can see the outreach for their release. We limit what appears in their Submission Log to information relevant to that order.
A pitch mentions a recent story only when we have that story's real title and link on file for that outlet. If we do not, the pitch uses a local angle and does not invent coverage. We greet a named editor only when the name has been checked and is reliable. Otherwise we use a role greeting, such as Hello news desk. Some outlets take a submission form instead of email.
An outlet’s reply or a link to a published article tells us what happened after a pitch. We do not use invisible images to detect email opens, or embed visitor trackers in the website Q&As we provide. A pitch link may be redirected through our site so we can record the first click on that link. A verified publication link means we found the public article.
To stop all outlet pitches, use the unsubscribe link in a pitch or email support@citypressrelease.com. We apply a full opt-out across all customers within ten business days. If you ask us to stop sending a particular topic, we record that narrower preference. It cannot override a full opt-out. We keep the minimum contact record needed to avoid sending unwanted pitches again.
6. Cookies and browser privacy settings
We use cookies needed for sign-in and account security. Blocking them may prevent you from using the dashboard.
Analytics is separate and optional. The Google tag for City Press Release does not run until you choose Allow analytics. If you allow it, Google Analytics may receive page views, scrolls and outbound clicks so we can understand site traffic. You can withdraw that choice at any time on the Cookie choices page. Do Not Sell or Share My Personal Information records the same opt-out. A browser Global Privacy Control signal is treated as that opt-out, and the tag does not run while the signal is present.
We do not use advertising pixels, remarketing tags or newsletter open-tracking. We do not sell personal information or share it for advertising that follows people across different businesses’ websites or apps.
A browser’s Do Not Track signal does not change these practices. Global Privacy Control does. It communicates a choice to opt out of sale or sharing for cross-context behavioral advertising, and we also keep the Google tag off when we receive it.
7. How long we keep information
We delete voice audio as soon as we first publish or send the release. If a writing-only order closes sooner, we delete its audio at completion. We close unfinished projects after 45 days without customer activity on the project and delete their audio. We exclude raw voice recordings from backups. The editable transcript remains in your knowledge base. You can email us to request earlier deletion without waiting for the order to close.
Transcripts and other saved working material remain in your knowledge base while you use the service. We delete the knowledge base after 12 months of inactivity or, if you ask sooner, within 30 days of your verified request. We remove it from live systems, instruct relevant providers to delete it and confirm completion by email. Backup copies of text and other saved material age out through the backup cycle, subject to legally required retention.
8. Records kept separately
We keep billing, subscription consent, cancellation and release approval records for as long as needed to document transactions, resolve disputes and meet legal obligations. We retain support messages and attachments as needed to resolve and document the issue, and submission records as needed to report on an order or address a dispute. Security logs are kept as needed to investigate faults or misuse. A legal preservation requirement may extend retention of the affected records.
Deleting a knowledge base or closing an account leaves published releases in place. To request removal, send us the release URL and identify the material involved. For a customer’s removal request, we respond within five business days, remove the release from our pages, stop further sends and ask outlets that published it to update or remove it. Each outlet, archive and search provider controls its own copies. If someone else submitted information about you, we review your concern and may request details to locate the material and verify your connection to it.
9. Access and privacy requests
Use your dashboard to review, correct, download or delete saved business information. You may also email support to request access, correction, a copy, deletion or account closure. Identify the account email or public release URL so we can find the right record. Avoid sending identification documents or payment details unless we specifically request a secure verification step.
We may verify control of an account or ask for information proportionate to the request. If you use an authorized agent, we may ask for proof of their authority. We reply to privacy requests within 30 days and explain any information we must retain. We do not penalize you for exercising your privacy choices. Additional rights may apply where you live.
Use the unsubscribe link in marketing email to stop promotions. We may still send necessary order, account security and billing messages. Journalists can stop editorial pitches separately as described in section 5.
10. Security, children and policy changes
We use safeguards such as encrypted connections and restricted access to protect personal information. The service is intended for adults acting for businesses and organizations. We do not knowingly collect personal information directly from children under 16. If a child has submitted information, contact us so we can investigate and remove it where appropriate.
We post the effective date of each policy update. For material changes, we give account holders 30 days’ notice by email and in the dashboard. We obtain additional consent when required.
The Google Analytics description in this edition is a material change. Notice is given on November 9, 2026, in this policy and in the account dashboard. Email sending is off, so the email notice is not sent. The notice period runs through December 9, 2026. The Google tag still runs only after you allow analytics, and it stays off if you withdraw that choice or your browser sends Global Privacy Control.
Email support@citypressrelease.com or use Message support in your dashboard. If a privacy control or page is difficult to use, tell us which one. We can help you make the same request by email. Mailing address: 1684 Whittier Ave, Space 42, Costa Mesa, CA 92627
Changelog
Additions to the November 9, 2026 edition, made November 10, 2026:
- Social posts are now described as a series of different posts per network.
- Section 4.1 was added to state that we write suggested social posts, that we do not ask for or store social network logins, and that we do not post to a social network for you.
- Section 5 now states the recent-story and named-greeting rules, and that some outlets take a submission form instead of email.
- The social mixer is copy and paste, and the connected-accounts text was removed.

