Privacy Policy

1. Introduction

Welcome to Prompt Builder. We at Prompt Builder ("we," "us," "our," or "Company") are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at promptbuilder.space (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you register via Google OAuth, we collect your name, email address, and Google profile picture. We only request the minimum necessary information for authentication.
• User Content: All prompts, blocks, folders, and custom tags you create are stored securely in our database. This content remains your property and is used solely to provide the Service.
• Communication Data: When you contact our support team, we collect your email address and the content of your messages.
• Payment Information: For Pro subscriptions, payment information is collected and processed directly by Stripe. We do not store credit card numbers or other sensitive payment details on our servers.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with our Service, including pages visited, features used, and actions taken.
• Device Information: We collect device-specific information such as browser type, operating system, IP address, and device identifiers.
• Log Data: Our servers automatically record information including IP address, browser type, referring/exit pages, and timestamps.

3. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your account
• To provide, maintain, and improve our Service
• To save and sync your prompts, blocks, and settings
• To process payments and manage subscriptions
• To send important service-related communications
• To respond to your support requests and inquiries
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations and protect our rights
• To analyze usage patterns and improve user experience

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our Service

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe such disclosure is necessary to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of users or the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmissions are encrypted using SSL/TLS protocols
• Secure Infrastructure: We use trusted cloud providers with robust security certifications
• Access Controls: Strict access controls limit who can access user data
• Regular Updates: We regularly update our systems and dependencies
• Authentication: Secure OAuth 2.0 authentication via Google

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

6. Data Retention & Deletion

6.1 Retention Period

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Active account data is retained for the duration of your account
• Shared prompt links are retained until they expire or are deleted
• Support communications are retained for up to 2 years
• Payment records are retained as required by financial regulations (typically 7 years)

6.2 Data Deletion

You can request deletion of your account and associated data at any time through:

• Account Settings → Delete Account option in the app
• Contacting support at support@promptbuilder.space

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records, abuse prevention).

7. Your Rights & Choices

You have the following rights regarding your personal information:

To exercise any of these rights, please contact us at support@promptbuilder.space. We will respond to your request within 30 days.

8. Google Services Integration

Our Service uses Google OAuth for authentication. When you sign in with Google:

• We only request access to your basic profile information (name, email, profile picture)
• We do not access your Google Drive, Gmail, or other Google services
• We do not share your Google user data with third parties
• You can revoke our access at any time through your Google Account settings

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

9. Payment Processing

All payment processing is handled by Stripe, a PCI-compliant payment processor. When you subscribe to our Pro plan:

• Your payment information is sent directly to Stripe
• We do not store credit card numbers or banking information
• We only receive a token from Stripe to manage your subscription
• Stripe's processing of your payment data is governed by Stripe's Privacy Policy

You can manage your payment methods and billing information through the Stripe Customer Portal accessible from your account settings.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

Our service providers operate globally:

• Supabase processes data in accordance with GDPR and maintains data centers in multiple regions
• Stripe complies with the EU-U.S. Data Privacy Framework
• Netlify maintains global infrastructure with appropriate safeguards

Regardless of where your data is processed, we apply the same protections described in this policy and ensure appropriate safeguards are in place for international transfers.

11. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@promptbuilder.space.

If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via email or through a notice in the Service
• We will obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.