Privacy Policy

This Privacy Policy describes how Prompt-U ("we," "us," or "our") collects, uses, and discloses your information when you use our website (https://prompt-u.com) and our browser extension (the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy is designed to comply with global data protection regulations, including the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA) in the United States.

1. Data We DO NOT Collect (Browser Extension)

We want to be unequivocally clear:

Specifically, the browser extension DOES NOT collect, transmit, or store any of the following:

• Personally Identifiable Information (PII): We do not collect your name, email address, physical address, phone number, age, gender, or any other information that could directly identify you.
• Prompt Content: The prompts you optimize using the extension are processed locally. We do not have access to, nor do we store, the content of your prompts.
• AI Model Interactions: We do not monitor or record your interactions with AI models (e.g., ChatGPT, Claude, Gemini, Midjourney, DALL-E).
• Web History or Browsing Activity: We do not track the websites you visit or your general browsing behavior.
• Location Data: We do not collect any information about your geographical location.
• User Activity Metrics: We do not track clicks, mouse movements, keystrokes, or other user activity within the extension.
• Financial Information: We do not collect any financial or payment-related data.

All data generated and used by the browser extension, including your prompt history and settings, is stored exclusively on your local device and is never transmitted to our servers.

2. Data We Collect (Website)

When you visit our website (https://prompt-u.com) or interact with our services, we may collect certain information. This collection is primarily for the purpose of providing and improving our services, processing transactions, and communicating with you.

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your email address and a password. You may also choose to provide your name.
• Payment Information: If you make a purchase (e.g., for a subscription or lifetime deal), our third-party payment processors (e.g., Stripe) collect your payment card details. We do not directly store your full payment card information.
• Communications: When you contact us via email or support channels, we collect the content of your communications and your contact information to respond to your inquiries.
• User-Generated Content: If you submit prompts to our Community Prompt Library, create templates, or provide feedback, this content will be stored on our servers.

2.2 Information We Collect Automatically

• Usage Data: We collect information about how you interact with our website, such as the pages you visit, the features you use, and the time and date of your visits. This helps us understand user behavior and improve our services.
• Device Information: We may collect information about the device you use to access our website, including IP address, browser type, operating system, and unique device identifiers.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies (like Google Analytics) to track activity on our website and hold certain information. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Maintain the Service: Operating our website, managing your account, and delivering the features you request.
• To Process Transactions: Fulfilling your purchases and managing subscriptions.
• To Communicate with You: Sending important updates, marketing communications (if you opt-in), and responding to your inquiries.
• To Improve Our Services: Analyzing usage patterns, conducting research, and developing new features.
• For Security and Fraud Prevention: Protecting our services and users from fraudulent activities.
• To Comply with Legal Obligations: Adhering to applicable laws and regulations.

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• With Service Providers: We may share information with third-party vendors who perform services on our behalf, such as payment processing (Stripe), hosting (Vercel, Supabase), analytics (Google Analytics), and customer support. These providers are obligated to protect your information.
• For Legal Reasons: We may disclose your information if required by law, subpoena, or other legal process, or if we believe it's necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly (e.g., authentication, security).
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Functional Cookies: Enable enhanced functionality and personalization.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 GDPR Rights (EU/EEA Residents)

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

6.2 CCPA Rights (California Residents)

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. (Note: Prompt-U does not sell your personal information).
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

To exercise any of these rights, please contact us at [email protected].

7. Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure authentication systems (Supabase)
• Regular security audits and updates
• Limited access to personal data by employees
• Secure payment processing through PCI-compliant providers (Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Information: Retained until you request account deletion
• Transaction Records: Retained for 7 years for tax and legal compliance
• Usage Data: Retained for up to 2 years for analytics purposes
• Communications: Retained for up to 3 years for customer support purposes

When we no longer need your personal information, we will securely delete or anonymize it.

9. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personally identifiable information from children under 13 (or 16 in the EEA).

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 13 (or 16 in the EEA) without verification of parental consent, we take steps to remove that information from our servers.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by Prompt-U. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

We strongly advise you to review the privacy policy of every site you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

For material changes, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

13. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us:

14. Compliance Summary

This Privacy Policy complies with the following regulations:

• GDPR (General Data Protection Regulation): European Union data protection law
• CCPA (California Consumer Privacy Act): California privacy law
• PIPEDA (Personal Information Protection and Electronic Documents Act): Canadian privacy law
• Australian Privacy Principles (APP): Australian privacy law
• UK GDPR: United Kingdom data protection law

We are committed to maintaining compliance with all applicable data protection laws worldwide.