Privacy Policy

1 Introduction

This Privacy Policy explains how Promptmagicpro ("we," "our," or "us") collects, uses, and protects your information when you use our website, our Chrome extension, and our AI prompt enhancement service.

By using Promptmagicpro, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2 Information We Collect

Information you provide directly

• Account information: Your name and email address when you register for an account.
• Payment information: Billing details for Pro subscriptions. Payment card data is handled exclusively by our payment processor and is never stored on our servers.
• Prompts: Text prompts you submit for AI enhancement while using the service.
• Support communications: Messages you send to our support team via email or contact forms.

Information collected automatically

• Usage data: IP address, browser type and version, pages visited, features used, and timestamps of interactions, collected via our analytics provider.
• Device information: Operating system, screen resolution, and general geographic region (country/city level).

Information stored in your browser (not our servers)

Information from third parties

• OAuth sign-in: If you sign in using a third-party identity provider, we receive your name, email address, and profile avatar from that provider's authentication service.
• Payment processor: We receive your subscription status and payment confirmation from our payment processor. We do not receive full card details.

3 How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To operate the prompt enhancement service and provide features based on your subscription tier.
• Account management: To create and maintain your account, including authentication and session management.
• Payment processing: To manage subscriptions and billing through Stripe.
• Transactional email: To send account confirmations, subscription receipts, and service notifications.
• Analytics: To understand how users interact with the service and improve product features.
• Security: To detect, investigate, and prevent fraudulent activity, abuse, and unauthorized access.
• Legal compliance: To meet applicable legal obligations, including tax and regulatory requirements.

We do not use your information for advertising, profiling for third-party marketing, or any purpose beyond what is described above.

Legal basis for processing (GDPR Art. 6)

• Contractual necessity: Processing your prompts, managing your account, and delivering the enhancement service, required to perform the service you signed up for.
• Legitimate interest: Product analytics, security monitoring, and fraud prevention, balanced against your privacy rights with minimal data collection.
• Legal obligation: Retaining payment records for tax and financial compliance as required by Portuguese and EU law.
• Consent: Sending non-essential communications, if any. You may withdraw consent at any time.

4 AI Processing Disclosure

• Promptmagicpro does not read, review, or sell your prompt data. Prompts are transmitted directly to our AI processing provider and the enhanced result is returned to you.
• All users: Prompt text is not stored on our servers. We log anonymized usage metadata (e.g. protocols used, processing time) for billing and service improvement purposes, but never the content of your prompts.
• No automated decision-making: We do not make automated decisions about you with legal or similarly significant effects based on your prompt content.

5 Cookies and Tracking

Analytics

We use a third-party analytics provider for product analytics. Our analytics infrastructure is hosted within the EU, and anonymous visitors are not individually profiled. Analytics data is only linked to a person when you are signed in.

Browser localStorage

We store authentication tokens in your browser's localStorage to maintain your signed-in session. This data is used solely to authenticate your requests to our servers and is cleared when you sign out. No prompt content is persisted to localStorage.

What we do not use

• No advertising cookies or tracking pixels
• No third-party retargeting cookies
• No cross-site tracking

6 Browser Extension

The Promptmagicpro extension for Chrome works inside ChatGPT (chatgpt.com and chat.openai.com), Claude (claude.ai) and Gemini (gemini.google.com). This section covers what it reads, sends and stores. The rest of this policy applies to it too.

What it sends to our servers

• Your draft: The text in the message box, sent when you ask for an enhancement. Our servers pass it to our AI processing provider (see section 4) and return the rewrite. If you are signed in, the draft and the rewrite are sent once more to get the reason for each change.
• An anonymous trial token: If you are not signed in, the extension creates a random token and sends it with each enhancement, so free tries are counted per browser rather than per network. It contains nothing about you, and it is replaced when you sign in.
• Your access token: If you are signed in, it is sent with each enhancement and when you open the extension's toolbar window to see how many enhancements you have left. Your refresh token is sent only to renew an expired session.

The extension sends data only to our own servers. It contains no analytics or advertising code.

What it stores on your device

• Your session: When you sign in on our website, the extension copies your access token, refresh token, account ID and email address from it, so you stay signed in on the chat sites. Signing out of the website deletes them.
• Trial counters and the anonymous trial token described above.
• Layout counts: How often its button fitted into each chat site's layout, which we use to fix display problems. These counts never leave your device.

Removing the extension from Chrome deletes everything it stored.

Permissions it asks for

• Storage: To keep the data listed above on your device.
• Access to the chat sites listed above: To show the pen button in the message box, read your draft when you ask, and write the result back.
• Access to promptmagicpro.com and ai-prompt-enhancer.fly.dev (our website): To copy your session after you sign in.
• Access to ai-prompt-enhancer-backend.fly.dev (our API server): To send the requests described above.

Our use of data from the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell it, use it for advertising, or use it for anything other than enhancing your prompts.

7 Data Sharing and Third Parties

We do not sell your personal data. We share data only with the sub-processors required to deliver the service, under data processing agreements where applicable.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Promptmagicpro, our users, or the public.

8 Data Retention

When your account is deleted, we remove your personal data within 30 days, except where retention is required for legal compliance (e.g. payment records).

9 Data Security

• Data in transit: All communication between your browser and our servers is encrypted via TLS/HTTPS.
• Data at rest: Pro users' prompt history is encrypted at rest in our database.
• Payment security: Payment card data is handled exclusively by our payment processor, which is PCI-DSS compliant. We never store card numbers.
• Breach notification: In the event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours as required by applicable law.

No method of transmission over the internet is 100% secure. While we implement industry-standard measures, we cannot guarantee absolute security.

10 Your Privacy Rights

GDPR rights (EU/EEA and UK users)

If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request that we limit how we process your data.
• Right to portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.

CCPA rights (California residents)

• Right to know: What personal information we collect, use, and share about you.
• Right to delete: Request deletion of your personal information.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale: We do not sell your personal information, so this right does not apply, but we will honor any such requests.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

Supervisory authority

If you are not satisfied with our response to a privacy request, you have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Portuguese data protection authority:

• CNPD: Comissão Nacional de Proteção de Dados
• Website: www.cnpd.pt

11 Children's Privacy

Promptmagicpro is not intended for users under the age of 16 in the EU, or under 13 in the United States. We do not knowingly collect personal data from children below these ages.

Additionally, use of the underlying AI processing service may require users to meet minimum age requirements as specified in the applicable terms of service.

If you believe we have inadvertently collected information from a child under the applicable minimum age, please contact us at promptmagicpro@gmail.com and we will delete it promptly.

12 International Data Transfers

Promptmagicpro is operated from Portugal, a member state of the European Union. Your data is primarily processed within the EU/EEA. However, some of our sub-processors are based outside the EU, and your data may be transferred to those jurisdictions as described below.

We rely on the following safeguards for international transfers:

• AI processing: Our AI processing provider is certified under applicable data transfer frameworks for transfers of prompt data outside the EU/EEA.
• Analytics: Analytics data is processed on EU infrastructure, keeping it within the European Union.
• Payment processing: Our payment processor is certified under applicable international data transfer frameworks.
• Other sub-processors: Where transfers outside the EU/EEA occur, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, or adequacy decisions where applicable.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update it, we will revise the "Last Updated" date at the top of this page.

For material changes, meaning changes that significantly affect your rights or how we use your data, we will provide at least 30 days' advance notice via email to the address associated with your account before the new policy takes effect.

We encourage you to review this policy periodically. Your continued use of Promptmagicpro after any changes indicates your acceptance of the updated policy.

14 Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: