1. Introduction
Prompterless ("we," "our," or "us") operates the Prompterless platform (the "Service"), accessible at https://prompterless.com. We are committed to protecting your personal data and your right to privacy.
This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using our Service, you agree to the collection and use of information in accordance with this policy.
If you have any questions, please contact us at dpo@prompterless.com.
2. Information We Collect
2.1 Personal Data You Provide
- Account Information: name, email address, and password when you register.
- Profile Information: organization name, role, and preferences you set.
- Communications: messages you send through contact forms or support tickets.
- Content: documents you upload, chat messages, and prompts you create.
- Payment Information: billing details processed through our payment provider (we do not store full payment card numbers).
2.2 Usage Data
- Log Data: IP address, browser type and version, pages visited, time and date of visits, time spent on pages.
- Device Data: device type, operating system, unique device identifiers.
- Chat Analytics: number of conversations, response times, feature usage patterns (anonymized).
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. For detailed information, see our Cookie Policy.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your requests and transactions
- Send you technical notices and support messages
- Respond to your inquiries and provide customer support
- Generate AI responses using your documents and chat context
- Monitor and analyze usage trends to improve user experience
- Detect, prevent, and address security issues and abuse
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
| Legal Basis | Purpose |
|---|---|
| Contract Performance | Providing the Service, managing your account, processing transactions |
| Legitimate Interests | Improving the Service, analytics, fraud prevention, security |
| Consent | Marketing communications, non-essential cookies, analytics tracking |
| Legal Obligation | Compliance with applicable laws and regulations |
5. Data Sharing and Third Parties
We do not sell your personal data. We may share your information with:
5.1 AI Service Providers
Your chat messages and document content may be sent to AI providers (such as OpenAI, Cloudflare AI, or other configured providers) to generate responses. These providers process data according to their own privacy policies and data processing agreements.
5.2 Infrastructure Providers
We use Cloudflare for hosting, CDN, and security services. Your data is processed on Cloudflare's infrastructure in accordance with their privacy policy.
5.3 Payment Processors
We use Stripe, Inc., PayPal, Inc., and Paddle.com Market Ltd to process subscription payments. When you make a purchase, your email address, billing address, payment method details, and IP address are shared directly with the relevant processor. We do not store full credit card numbers on our servers.
For certain transactions, Paddle acts as the Merchant of Record (reseller), meaning Paddle is the legal seller and an independent data controller for your purchase data. Paddle collects and processes your personal data (name, email, billing address, payment details, IP address, and device information) in accordance with its own privacy policy and the Paddle Data Sharing Addendum. Prompterless receives limited order information from Paddle (email, transaction ID, subscription status) to fulfil the service.
- Stripe Privacy Policy: https://stripe.com/privacy
- PayPal Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full
- Paddle Privacy Policy: https://www.paddle.com/legal/privacy
- Paddle Data Sharing Addendum: https://www.paddle.com/legal/data-sharing-addendum
5.4 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Account data: retained while your account is active, plus 30 days after deletion request.
- Chat history: retained while your account is active. You can delete conversations at any time.
- Documents: retained until you delete them or close your account.
- Usage analytics: aggregated and anonymized data may be retained indefinitely.
- Support tickets: retained for 2 years after resolution for quality purposes.
7. Your Rights
Under GDPR and other applicable privacy laws, you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Request that we limit the processing of your personal data.
Object to our processing of your personal data for specific purposes.
To exercise any of these rights, contact our Data Protection Officer at dpo@prompterless.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
9. International Data Transfers
Your data may be processed on servers located outside your country of residence, including in the United States and other countries where Cloudflare operates data centers.
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
10. Children's Privacy
Our Service is designed for educational purposes and may be used by students of various ages. However, we do not knowingly collect personal data from children under 13 (or 16 in the EEA) without parental consent.
If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at dpo@prompterless.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
We encourage you to review this page periodically for any changes. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us: