Privacy Policy

Overview

Promptery is designed with privacy in mind. This policy explains what data we collect, how we use it, and your rights under applicable privacy laws including GDPR and CCPA.

Data We Collect

Account Information

When you sign in with Google OAuth, we receive and store:

• Your email address
• Your name (if provided by Google)
• Your profile picture URL (if available)

Usage Data

We process account and service information needed to provide Promptery, including:

• Your subscription tier and purchase history
• Cloud Add On subscription status and AI credit usage and balance
• Shared-link information, such as expiration and revocation settings

Content You Create

Local library: Your local library is stored on your device and remains the primary copy. If you use the optional Cloud Add On, prompts, contexts, and Skills in your library can also be synced to our servers for cloud backup. We therefore may process the content you choose to sync.

Contexts and shared links: Contexts that you sync or share are processed and stored on our servers to provide those features. A share link is a bearer link: anyone with the URL may be able to access its content while the link is valid. You can configure expiration and revoke links. Expiration or revocation stops access through the link; it does not by itself guarantee immediate deletion of every stored copy or of copies obtained by third parties.

Analytics and Cookies

Our website uses Vercel Analytics for website usage and performance metrics. We may also load Google Analytics when configured. Our cookie preference controls the Google Analytics consent setting; it does not control Vercel Analytics. The technologies and data used by these providers are also subject to their own policies.

• Google Analytics – Website analytics when configured, with analytics consent settings
• Vercel Analytics – Website usage and performance metrics

Cookie preference: The site stores your analytics preference in your browser's local storage. You can change it by clearing this site's local storage. Some essential browser storage or session technologies may also be used to provide site functionality and sign-in.

We use local storage and analytics technologies to:

• Remember your cookie preference
• Measure website usage and performance as described above

How We Use Your Data

We use your data to:

• Provide and maintain your account
• Process purchases and manage subscriptions
• Enable context sharing features
• Sync prompts, contexts, and Skills when you use the Cloud Add On
• Track AI credit usage
• Process content you submit to AI features and return generated or transformed results
• Understand website usage and performance
• Send important service updates (rarely)

We never sell your personal data.

Third-Party Services

We use the following third-party services:

• Supabase – Account authentication, database, and storage of service data and synced content. Privacy Policy
• Polar – Payment processing. Privacy Policy
• Vercel – Website hosting and analytics. Privacy Policy
• Cloudflare R2 – Hosting app download and update files.
• Google Analytics – Website analytics when configured, subject to the analytics consent setting. Privacy Policy
• Google Gemini and OpenAI – AI processing for features such as prompt optimization and context creation. Content you submit to an AI feature is sent to the provider used for that request. Their handling of submitted data is governed by their applicable terms and privacy policies; we do not make a blanket claim here about their retention practices.

Data Retention

• Account, purchase, and service records are retained as needed to operate the service and meet applicable obligations.
• Shared-link expiration or revocation ends access through that link; stored content and records may remain for a period as part of service operation and data lifecycle processes.
• Cloud-synced content may be marked for pruning when the Cloud Add On ends and the applicable grace period has passed. Deletion follows our cloud data lifecycle process; timing may vary.
• Your local library remains on your device unless you remove it.
• Analytics providers handle analytics data under their own retention and privacy practices.

AI Assistants, Crawlers & Share Links

Shared context links provide access to content you choose to share. We use technical measures intended to limit caching and indexing, but cannot control what third parties do with content they access.

• AI assistants or other recipients given a share URL may access and process its content while the link is valid. Their use and retention of content is governed by their own services and policies.
• Search-engine indexers and bulk AI training crawlers receive crawler directives and response headers intended to discourage indexing and archival. These measures cannot guarantee that every crawler or recipient will comply.
• Shared-link responses use cache and indexing directives, including no-store and noindex. These directives request that recipients do not cache or index the content.
• Once a link expires or is revoked, it no longer provides content through Promptery. This does not erase copies previously accessed or saved by recipients.
• We cannot guarantee the behavior of crawlers that ignore these directives. For highly sensitive content, use the optional password-protection feature when creating a share link.

Your Rights (GDPR/CCPA)

Depending on your location and applicable law, you may have rights to:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Request deletion of your data ("right to be forgotten")
• Portability – Receive your data in a portable format
• Object – Opt out of certain data processing
• Withdraw Consent – Revoke consent for analytics at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Database access restricted with row-level security
• Authentication tokens stored securely
• Regular security reviews

Children's Privacy

Promptery is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

Updates to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Significant changes will be communicated via email.

Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at [email protected].