Privacy Policy
Last updated: 27 October 2026
This policy explains how GULI Shots LTD, trading as PressRun (“we”, “us”, “our”), collects and uses personal data when you visit our website or use the PressRun app (the “Service”). We are a company registered in England and Wales and the controller of your personal data under the UK GDPR and the Data Protection Act 2018.
1. Information we collect
Information you give us
- Account details: your name and email address when you sign up, and the sign-in codes we send you.
- Billing details: your plan, billing history and billing address. Card details are collected and held by Stripe; we never see or store your full card number.
- Your content: prompts, images you upload, generated artwork, mockups and listing text.
- Support messages: anything you send us when you get in touch.
Information from connected services
- Etsy: when you connect your shop we receive access tokens, shop details, listings and order (receipt) data. Tokens are stored encrypted.
- Gelato: the API key you provide (stored encrypted) and the status of print orders.
- Stripe: payment status and subscription events.
Information collected automatically
Server logs that record IP address, browser type, pages requested and timestamps, used for security and to fix problems. We do not use advertising or third-party analytics trackers.
2. Your customers' data
When one of your Etsy orders is fulfilled through PressRun, we receive your buyer’s name, shipping address and order details from Etsy and pass them to Gelato so the order can be printed and delivered. For this data you are the controller and we act as your processor: we use it only to fulfil and track your orders, and you are responsible for telling your buyers how their data is used.
3. How we use your information
| Purpose | Lawful basis |
|---|---|
| Create and run your account, generate artwork, publish listings and fulfil orders | Performance of our contract with you |
| Take payments, keep accounting and tax records | Contract; legal obligation |
| Send sign-in codes, receipts, service and security notices | Contract; legitimate interests |
| Keep the Service secure, prevent abuse and fix errors | Legitimate interests |
| Improve the Service using aggregated, de-identified usage information | Legitimate interests |
| Send product news and offers | Consent, which you can withdraw at any time |
We do not use your prompts or artwork to train AI models, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Information sharing
We do not sell your personal data. We share it only with service providers who help us run PressRun, with services you choose to connect, and with authorities where the law requires it. Our main providers are:
- Supabase: Account sign-in, database and file storage
- Railway: Application hosting
- Stripe: Subscription payments and billing
- Resend: Sign-in codes and account emails
- fal.ai: Running the AI image models that generate and upscale your artwork
- Mockupanda: Rendering your artwork into room mockups
- Etsy: Publishing listings to, and importing orders from, the shop you connect
- Gelato: Printing and shipping orders through the print account you connect
Prompts and images sent to fal.ai may be processed by the underlying model provider for the model you choose. If our business is sold or reorganised, your data may transfer to the new owner under this policy.
5. International transfers
Some of our providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum to protect your data.
6. Data retention
- Account data and your content are kept while your account is open.
- When you close your account we delete your account data and content within 30 days, except where we must keep it longer by law. Backups are overwritten on a rolling basis.
- Billing and transaction records are kept for six years to meet UK tax and accounting rules.
- Buyer order data is kept for as long as you need it to fulfil and support your orders, then deleted.
- Server logs are kept for up to 90 days.
7. Data security
We use encryption in transit, encrypted storage of connection tokens and keys, access controls and private file storage to protect your data. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the ICO of a breach where the law requires.
8. Cookies
We use only strictly necessary cookies, which keep you signed in and secure your session. These do not need your consent. We do not use advertising, tracking or third-party analytics cookies. If that changes we will update this policy and ask for your consent first.
9. Third-party services
PressRun connects to and links to services we do not control, including Etsy, Gelato and Stripe. Their own privacy policies govern how they use your data, and we encourage you to read them.
10. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we process it, including for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time where we rely on it.
To use any of these rights, email gulishots@gmail.com. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve your concern first.
11. Children
PressRun is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the date above, and tell you by email or in the app if the changes are significant.
13. Contact us
GULI Shots LTD, trading as PressRun — gulishots@gmail.com