Privacy Policy
1 Introduction
This Privacy Policy explains how Promptmagicpro ("we," "our," or "us") collects, uses, and protects your information when you use our website and AI prompt enhancement service.
By using Promptmagicpro, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.
2 Information We Collect
Information you provide directly
- Account information: Your name and email address when you register for an account.
- Payment information: Billing details for Pro subscriptions. Payment card data is handled exclusively by our payment processor and is never stored on our servers.
- Prompts: Text prompts you submit for AI enhancement while using the service.
- Support communications: Messages you send to our support team via email or contact forms.
Information collected automatically
- Usage data: IP address, browser type and version, pages visited, features used, and timestamps of interactions, collected via our analytics provider.
- Device information: Operating system, screen resolution, and general geographic region (country/city level).
Information stored in your browser (not our servers)
Information from third parties
- OAuth sign-in: If you sign in using a third-party identity provider, we receive your name, email address, and profile avatar from that provider's authentication service.
- Payment processor: We receive your subscription status and payment confirmation from our payment processor. We do not receive full card details.
3 How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: To operate the prompt enhancement service and provide features based on your subscription tier.
- Account management: To create and maintain your account, including authentication and session management.
- Payment processing: To manage subscriptions and billing through Stripe.
- Transactional email: To send account confirmations, subscription receipts, and service notifications.
- Analytics: To understand how users interact with the service and improve product features.
- Security: To detect, investigate, and prevent fraudulent activity, abuse, and unauthorized access.
- Legal compliance: To meet applicable legal obligations, including tax and regulatory requirements.
We do not use your information for advertising, profiling for third-party marketing, or any purpose beyond what is described above.
Legal basis for processing (GDPR Art. 6)
- Contractual necessity: Processing your prompts, managing your account, and delivering the enhancement service, required to perform the service you signed up for.
- Legitimate interest: Product analytics, security monitoring, and fraud prevention, balanced against your privacy rights with minimal data collection.
- Legal obligation: Retaining payment records for tax and financial compliance as required by Portuguese and EU law.
- Consent: Sending non-essential communications, if any. You may withdraw consent at any time.
4 AI Processing Disclosure
- Promptmagicpro does not read, review, or sell your prompt data. Prompts are transmitted directly to our AI processing provider and the enhanced result is returned to you.
- All users: Prompt text is not stored on our servers. We log anonymized usage metadata (e.g. protocols used, processing time) for billing and service improvement purposes, but never the content of your prompts.
- No automated decision-making: We do not make automated decisions about you with legal or similarly significant effects based on your prompt content.
5 Cookies and Tracking
Analytics
We use a third-party analytics provider for product analytics. Our analytics infrastructure is hosted within the EU, and anonymous visitors are not individually profiled. Analytics data is only linked to a person when you are signed in.
Browser localStorage
We store authentication tokens in your browser's localStorage to maintain your signed-in session. This data is used solely to authenticate your requests to our servers and is cleared when you sign out. No prompt content is persisted to localStorage.
What we do not use
- No advertising cookies or tracking pixels
- No third-party retargeting cookies
- No cross-site tracking
6 Data Sharing and Third Parties
We do not sell your personal data. We share data only with the sub-processors required to deliver the service, under data processing agreements where applicable.
| Service category | Purpose | Data shared |
|---|---|---|
| AI processing provider | AI prompt enhancement | Prompt text submitted for enhancement |
| Authentication and database provider | Authentication and data storage | Account data, encrypted prompt history (Pro) |
| Payment processor | Payment processing | Billing details, subscription status |
| Analytics provider (EU infrastructure) | Product analytics | Usage events, page visits (anonymized where possible) |
| Email service provider | Transactional email | Name and email address for sending |
| Hosting provider | Application hosting | Request data (IP, headers) processed in transit |
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Promptmagicpro, our users, or the public.
7 Data Retention
| Data type | Retention period |
|---|---|
| Account data | Duration of account, plus 30 days after deletion |
| Prompt text (all users) | Not stored. Prompt content is never persisted on our servers |
| Usage metadata (protocols, processing time) | 12 months rolling |
| Payment records | 7 years (tax and financial compliance) |
| Analytics data | 12 months rolling |
| Server logs | 90 days |
When your account is deleted, we remove your personal data within 30 days, except where retention is required for legal compliance (e.g. payment records).
8 Data Security
- Data in transit: All communication between your browser and our servers is encrypted via TLS/HTTPS.
- Data at rest: Pro users' prompt history is encrypted at rest in our database.
- Payment security: Payment card data is handled exclusively by our payment processor, which is PCI-DSS compliant. We never store card numbers.
- Breach notification: In the event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours as required by applicable law.
No method of transmission over the internet is 100% secure. While we implement industry-standard measures, we cannot guarantee absolute security.
9 Your Privacy Rights
GDPR rights (EU/EEA and UK users)
If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restriction: Request that we limit how we process your data.
- Right to portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: Withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.
CCPA rights (California residents)
- Right to know: What personal information we collect, use, and share about you.
- Right to delete: Request deletion of your personal information.
- Right to correct: Request correction of inaccurate personal information.
- Right to opt out of sale: We do not sell your personal information, so this right does not apply, but we will honor any such requests.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
Supervisory authority
If you are not satisfied with our response to a privacy request, you have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Portuguese data protection authority:
- CNPD: Comissão Nacional de Proteção de Dados
- Website: www.cnpd.pt
10 Children's Privacy
Promptmagicpro is not intended for users under the age of 16 in the EU, or under 13 in the United States. We do not knowingly collect personal data from children below these ages.
Additionally, use of the underlying AI processing service may require users to meet minimum age requirements as specified in the applicable terms of service.
If you believe we have inadvertently collected information from a child under the applicable minimum age, please contact us at promptmagicpro@gmail.com and we will delete it promptly.
11 International Data Transfers
Promptmagicpro is operated from Portugal, a member state of the European Union. Your data is primarily processed within the EU/EEA. However, some of our sub-processors are based outside the EU, and your data may be transferred to those jurisdictions as described below.
We rely on the following safeguards for international transfers:
- AI processing: Our AI processing provider is certified under applicable data transfer frameworks for transfers of prompt data outside the EU/EEA.
- Analytics: Analytics data is processed on EU infrastructure, keeping it within the European Union.
- Payment processing: Our payment processor is certified under applicable international data transfer frameworks.
- Other sub-processors: Where transfers outside the EU/EEA occur, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, or adequacy decisions where applicable.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update it, we will revise the "Last Updated" date at the top of this page.
For material changes, meaning changes that significantly affect your rights or how we use your data, we will provide at least 30 days' advance notice via email to the address associated with your account before the new policy takes effect.
We encourage you to review this policy periodically. Your continued use of Promptmagicpro after any changes indicates your acceptance of the updated policy.
13 Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Promptmagicpro
Email: promptmagicpro@gmail.com
For privacy-specific requests, include "Privacy Request" in the subject line. We respond within 30 days.