Privacy Policy

Introduction

PrompTessor ("we," "our," or "us") provides an AI prompt workspace through our website, mobile applications, and Chrome Extension. This Privacy Policy explains what data these products collect, how we use and store it, when it is shared, and the choices available to you.

Information We Collect

Depending on the products and features you use, we collect the following categories of information:

• Account and profile information, including your name, email address, profile image, plan, account status, and preferences.
• Authentication information, including session cookies or tokens used to keep you signed in. We do not store your password in plain text.
• Prompt workflow content, including prompts, selected text, active-input text, additional context, feedback, prompt versions, generated outputs, and output-language choices.
• User-selected website content and references, including URLs, page content, images, uploaded image files, sampled video frames, file names, and related metadata submitted for a PrompTessor workflow.
• Prompt Library and History data, including titles, descriptions, categories, model tags, visibility, saves, pins, votes, examples, and generated, analyzed, optimized, refined, or reverse-engineered records.
• Billing and subscription records, including plan, billing status, transaction identifiers, currency, and amount. Payment processors collect payment instrument details; PrompTessor does not store full card numbers.
• Support communications and attachments that you choose to send us.
• Operational data, including feature usage counts, request timestamps, IP address and server logs, browser or device information, error diagnostics, and security events necessary to operate and protect the Service.
• Website analytics and cookie information, where enabled, as described in the Cookies section below.

Where Data Is Stored

PrompTessor stores different data in different locations according to the feature being used:

• On your device: the Chrome Extension uses chrome.storage.local for its authentication token, a limited account profile, language choice, output language, appearance, sidebar position, toolbar preferences, and per-site enable or disable settings.
• On PrompTessor systems: account records, subscription status, usage records, prompts, workflow history, generated versions, library records, and support records are stored in our application database.
• In object storage: image attachments and other supported workflow or support files are stored in private cloud object storage and accessed through time-limited signed links.
• Public or community prompts: content you deliberately mark public or submit to a community area may be visible to other users together with displayed author information and engagement data. Private prompts are not made public unless you change their visibility.

How We Use Your Information

• Authenticate you and synchronize your account, plan, settings, usage limits, and entitlements across PrompTessor products.
• Provide user-requested prompt generation, analysis, optimization, refinement, reverse prompting, direct insertion, history, and Prompt Library features.
• Process the text, URLs, images, video frames, attachments, context, and feedback you deliberately submit to a workflow and return the requested output.
• Create, display, save, organize, version, and reuse prompts and workflow records at your direction.
• Operate subscriptions and payments, send transactional messages, answer support requests, and provide important service notices.
• Measure feature reliability and aggregate usage, enforce usage limits, troubleshoot errors, secure accounts, and prevent fraud or abuse.
• Comply with applicable law and enforce our agreements.

Data Sharing and Service Providers

We do not sell personal information. We disclose only the data needed for a provider or recipient to perform the applicable service, and the parties involved depend on the feature, sign-in method, payment method, or sharing choice you select:

• Google: optional Google account sign-in, reCAPTCHA fraud and abuse protection, and Google Analytics for website analytics where enabled. Browser workflow content is not sent to Google Analytics.
• Cloudflare R2: private object storage for supported image and file attachments.
• Stripe, Paddle, Midtrans, Polar, and NOWPayments: payment and subscription processing, depending on the payment method available and selected. These providers receive the account, transaction, and billing information needed to process payment.
• Our contracted application hosting, network, database, and security infrastructure providers: hosting PrompTessor, storing application records, serving requests, backups, monitoring, and protecting the Service.
• Other PrompTessor users and the public: only when you intentionally publish a prompt, choose public or community visibility, or otherwise direct us to share content.
• Professional advisers, law enforcement, regulators, courts, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or complete a corporate transaction subject to applicable notice and consent requirements.
• Any other party when you give us specific consent or direct us to make the disclosure.

Data Retention and Deletion

We retain data only for as long as needed for the purposes described in this Policy, using the following criteria:

• Chrome Extension settings and locally stored account data remain on your device until you sign out, clear Extension storage, remove the Extension, or the browser removes that storage.
• Account, prompt, workflow history, library, and attachment records are retained while your account or the related record remains active so you can reopen, version, save, and reuse them. You can delete supported records or request account deletion.
• When you delete your account, associated application records are deleted or de-identified, except information we must retain for legal, tax, accounting, payment-dispute, fraud-prevention, security, or backup purposes.
• Authentication, verification, password-reset, and signed file-access links expire according to their configured security periods.
• Operational, security, payment, and audit records are retained only for the period reasonably necessary for security, dispute resolution, legal compliance, and enforcement, then deleted or de-identified.

Data Security

PrompTessor transmits user data between its products and our servers over HTTPS. We use authentication safeguards, access controls, private object storage, time-limited attachment links, operational monitoring, and other reasonable administrative and technical measures. No system is completely secure, so we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

• Access, correct, or obtain a copy of your personal information.
• Delete supported prompt and workflow records or request deletion of your account and associated data.
• Change a Prompt Library item's visibility or remove content you published, subject to copies already lawfully shared by others.
• Opt out of marketing communications while continuing to receive necessary service and security messages.
• Object to or restrict certain processing and request data portability where applicable.
• Manage locally stored product settings, including disabling browser tools on individual websites, clearing Extension storage, signing out, or uninstalling the Extension.

Cookies and Tracking Technologies

We use cookies and similar technologies on the PrompTessor website for authentication, security, preferences, analytics, and permitted campaign measurement. Connected PrompTessor products may use our authentication cookies to access your signed-in account.

Children's Privacy

PrompTessor is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

International Data Transfers

PrompTessor and its service providers may process data in countries other than your own. Where required, we use appropriate safeguards for international transfers and require providers to protect data consistently with their contractual and legal obligations.

Browser Extension Data

The PrompTessor Chrome Extension provides user-invoked prompt tools on websites you visit. Its page access is used to display the floating avatar, smart toolbars, and overlay sidebar; insert a prompt into the active input; and process content only when you choose a PrompTessor action.

• The Extension may read selected text, the active input, an image or video you choose, or the current page URL and relevant page content only when you invoke a generation, analysis, optimization, refinement, insertion, or reverse-prompt workflow.
• The Extension does not continuously collect or store your browsing history, the list of websites you visit, or unrelated page content.
• Per-site toolbar settings are stored locally so the Extension can remember where you enabled or disabled a browser tool.
• Content submitted through a workflow is transmitted to PrompTessor over HTTPS and is handled as described in this Policy.
• PrompTessor does not sell browser data or use Extension data for personalized, retargeted, or interest-based advertising.

Chrome Web Store Limited Use Disclosure

PrompTessor's use and transfer of information received through Chrome Extension permissions complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

• We use Extension data only to provide or improve the user-facing prompt workspace features described in the Extension interface and Chrome Web Store listing, and for related security, reliability, and support operations.
• We do not use or transfer Extension data for personalized advertisements, retargeting, interest-based advertising, creditworthiness, lending, or sale to data brokers.
• We do not allow humans to read submitted Extension content except when you give specific consent for support, when necessary for security or abuse investigation, when required by law, or when data has been aggregated and de-identified for internal operations.
• We transfer Extension data only when necessary to provide or improve the disclosed features, protect the Service, comply with law, or complete a permitted corporate transaction subject to applicable requirements.

Contact Us

For questions, privacy requests, or account-deletion assistance, contact us at: