Privacy Policy

1. Introduction

AI Prompt Generator ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. This policy complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password (encrypted)
• Payment Information: Processed securely by Stripe (we do not store complete card details)
• Profile Data: Subscription plan, usage preferences, settings
• User Content: Prompts you create and save in our system
• Contact Information: When you contact us via our contact form

2.2 Automatically Collected Information

• Usage Data: Features used, prompts generated, login times
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our service
• Process payments and manage subscriptions
• Send service-related communications and updates
• Respond to your inquiries and support requests
• Enforce our Terms of Service and prevent fraud
• Comply with legal obligations
• Analyze usage patterns to enhance user experience

4. Third-Party Services

4.1 Stripe (Payment Processing)

We use Stripe for payment processing. Stripe collects and processes payment information according to their privacy policy (https://stripe.com/privacy). We do not store your complete payment card information on our servers. Stripe is GDPR and CCPA compliant.

4.2 Supabase (Database & Authentication)

We use Supabase to store and manage user data and authentication. User data is stored securely in cloud servers and is encrypted both in transit and at rest. Supabase maintains data processing agreements (DPA) for GDPR compliance. For more information, visit https://supabase.com/privacy.

4.3 OpenAI API

We use OpenAI's API to generate optimized prompts. Your input data is sent to OpenAI for processing but is not used to train their models. See OpenAI's privacy policy at https://openai.com/privacy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 90 days to comply with legal obligations and resolve disputes. You can request immediate deletion of your data by contacting us.

6. Your Rights (GDPR & CCPA)

6.1 GDPR Rights (EU Residents)

If you are in the European Union, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

6.2 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know: Request disclosure of personal information collected, used, and shared
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: Exercise your rights without discriminatory treatment

To exercise your rights, contact us at support@promptgentool.com or use our contact form. We will respond within 30 days.

7. Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. This includes compliance with CCPA requirements.

8. Data Security

We implement industry-standard security measures including encryption (SSL/TLS), secure authentication, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EU.

10. Children's Privacy

Our service is not intended for children under 13 years old. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or prominent notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data access requests, or to exercise your rights, contact us at: