Privacy Notice

What we collect and why

• Account data — your email address, password credentials (stored hashed by our authentication provider), and sign-in method. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
• Profile details — optional information you choose to add, such as a display name, avatar, and appearance preference. Used to personalise the app. Legal basis: performance of our contract.
• Your content — the prompts you write, their version history, ordering, and any reviews you submit. Used to store, version, and display your library and, where you publish a review, to show it on the site. Legal basis: performance of our contract.
• Support and contact messages — the content of messages you send us, and the email address you send them from. Used to answer you. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Subscription data — your plan status, subscription and customer identifiers from our payment provider, and billing period dates. Used to give paid features to the right account. Legal basis: performance of our contract. We never see or store your full card details.
• Technical and usage data — IP address, device and browser information, and error or diagnostic logs. Used to keep the service secure, prevent abuse and fraud, and fix problems. Legal basis: our legitimate interest in operating a secure, working service, and our legal obligations where they apply.
• Integration data — records of the AI assistants you connect (for example ChatGPT, Claude, or Cursor) and the access tokens those connections use. Used to let those assistants read and write your library at your request. Legal basis: performance of our contract.

Your prompts are yours. We do not sell them, and we do not use them to train external AI models.

Who we share data with

We do not sell personal data. We share it only with these categories of recipient:

• Merchant of Record and payment processing — Paddle.com Market Ltd acts as our reseller and Merchant of Record for all orders, and processes your payment, subscription management, invoicing, and tax compliance. See Paddle's privacy notice.
• Service providers and subprocessors — our hosting, database, authentication, and email delivery providers, who process data on our instructions under contract.
• AI assistants you connect — when you connect an assistant, the prompts it requests are sent to that provider at your direction and are then subject to that provider's own terms and privacy notice.
• Professional advisers — legal and accounting advisers, where necessary.
• Authorities — where we are required to disclose data by law, or to protect our rights or the safety of others.

How long we keep data

We keep your account data, profile details, and prompts for as long as your account is open. If you delete your account from the Delete Account section in My Settings, your account, prompts, versions, drafts, and profile are deleted from our live systems immediately and removed from backups within 30 days. Support and contact messages are kept for up to 24 months. Security and diagnostic logs are kept for up to 12 months. Records relating to purchases are kept for as long as tax and accounting law requires, typically up to seven years, largely by Paddle as Merchant of Record. When data is no longer needed, we delete or anonymise it.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encryption of data at rest by our hosting provider, row-level access rules so an account can only read its own prompts, hashed credentials, and restricted internal access on a need-to-know basis. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you suspect a problem with your account.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, transfers rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

Your rights

Depending on where you live, you have rights to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where processing relies on it. You can exercise most of these yourself in My Settings, or email support@fluentprompter.com and we will respond within one month. If you are in the UK or EEA, you can also complain to your local data protection supervisory authority.

Cookies

We use essential cookies and similar browser storage to keep you signed in and to remember preferences such as your appearance setting. See our Cookie Policy for details and how to manage them in your browser.

Changes to this notice

We may update this notice as the service evolves and will post the updated version on this page. Questions? Email support@fluentprompter.com.