1. Overview
This Privacy Policy explains how Promptalyst (“we”, “us”, “our”) collects, uses, and protects your information when you use Promptalyst (the “Service”). By using the Service you agree to the practices described here.
2. Information we collect
Account data: your name, email, and authentication identifiers (via Supabase, including Google sign-in or SAML SSO where used).
Content data: the prompts, descriptions, folders, tags, and versions you create, and the variable values you enter when running a prompt.
Billing data: subscription details processed by Paddle, our Merchant of Record. Payment details are handled entirely by Paddle — we never see or store card numbers.
Usage data: product analytics and diagnostics, including pages viewed and features used.
3. How we use your information
To provide and operate the Service, authenticate you, sync your data across devices, process payments and payouts, send transactional email, prevent abuse, and improve the product.
4. AI processing of prompts
When you run a prompt, the filled prompt text is sent to the AI provider you have configured (Anthropic) using your own API key, which we store encrypted and never expose to the client. Your prompt content is processed to generate the response and is subject to that provider’s terms and privacy practices. We do not use Your Content to train models.
5. How we share information
We share data with service providers who help us operate the Service — including AI model providers you connect, Paddle (payments and billing), Supabase (auth and database), Upstash (rate limiting), Resend (email), and product-analytics and error-monitoring tools — only as needed to provide their functions. We may disclose information to comply with law or protect rights and safety. We do not sell your personal information.
6. Public sharing and the marketplace
If you enable a public share link or list a prompt on the marketplace, the content you choose to publish becomes accessible to others as described in those features. You control whether and what you publish.
7. Data storage and security
Data is stored with our infrastructure providers and protected with industry-standard measures, including encryption of sensitive secrets such as API keys. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Cookies and analytics
We use essential cookies for authentication and session management, and privacy-conscious product analytics to understand usage. You can control cookies through your browser settings.
9. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile in settings or contact us to exercise these rights.
10. Data retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Deleted prompts are soft-deleted and removed in due course.
11. International transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
12. Children’s privacy
The Service is not intended for anyone under 16, and we do not knowingly collect data from children.
13. Changes to this policy
We may update this Policy from time to time. Material changes will be notified through the Service or by email, and the “last updated” date will reflect the revision.
14. Contact
Questions about your privacy? Email us at hello@promptalyst.app.