Privacy Notice

Who we are

PromptStudio is operated by promtee. promtee is the data controller for personal data described in this notice.

What we collect

• Account data: email address, authentication identifiers, and (if provided) display name and avatar.
• Usage data: prompt counts, timestamps, and feature usage needed to enforce fair-use limits and improve the Service.
• Prompt content: the prompts you submit and the outputs returned during your session.
• Support communications: messages you send us.
• Technical data: IP address, device and browser information, and log data used for security and reliability.

Why we use it

• Provide, secure, and improve the Service (contract, legitimate interests).
• Authenticate you and manage your account (contract).
• Enforce usage limits and prevent abuse (legitimate interests).
• Communicate service updates and respond to support requests (contract, legitimate interests).
• Comply with legal obligations (legal obligation).

Who we share it with

• Hosting and backend: Lovable Cloud (Supabase-based) for authentication, database, and application hosting.
• AI model providers: requests you submit are routed through the Lovable AI Gateway to third-party model providers to generate a response. Prompts and any inputs are transmitted to those providers as necessary to produce output.
• Payments: Paddle acts as our Merchant of Record and processes payments, subscriptions, taxes, and invoicing. Payment card data is handled by Paddle; we do not store card details.
• Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Our subprocessors may process data outside your country. Where applicable, appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are relied upon.

Retention

We retain personal data for as long as needed to provide the Service and to meet legal, accounting, or reporting requirements. Account data is deleted or anonymized after account closure, subject to lawful retention periods. Usage logs are kept for a limited period necessary for security and abuse prevention.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise your rights, contact promtee through the support channel available in the Service.

Security

We use appropriate technical and organizational measures, including encryption in transit, access controls, and audit logging, to protect personal data. No system is perfectly secure; we work to remediate issues promptly when they arise.

Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember basic preferences. We do not use advertising cookies. You can clear cookies and local storage through your browser settings.

Changes

We may update this notice from time to time. Material changes will be communicated through the Service.

Contact

To contact promtee about privacy, use the support channel available in the Service.