Privacy Policy
Last updated 14 October 2026
Prompier LLP ("Prompier", "we") is the controller of the personal data described here. This page says what we collect, why, who sees it, how long we keep it and what you can do about it. We have tried to keep it plain.
What we collect
| Data | Why we need it | Legal basis |
|---|---|---|
| Account details: name, email address, a hash of your password (never the password itself), or the ID from Google or Microsoft if you sign in with them; if you turn on two-step sign-in, the authenticator secret (stored encrypted) and hashes of your recovery codes, never the codes themselves | To create and secure your account, and to contact you about it | Contract |
| Your content: prompts and their versions, folders, tags, snippets, comments, review decisions, settings | It is the Service you asked for | Contract |
| Workspace activity: who created, edited, approved or invited, and (for owners and admins) the audit log, which also shows the IP address each recorded action came from. If you delete your account, those addresses are removed from the log | Team accountability and security | Contract, legitimate interest |
| Usage events: when a prompt is copied, opened or inserted by the browser extension | To show you analytics | Contract |
| Sign-in records: a session token (stored hashed), IP address and browser type, last-seen time. We also use your IP address to rate-limit requests and slow down abuse, for example repeated community reports or sign-in attempts | To keep you signed in, show your active sessions and detect abuse | Contract, legitimate interest |
| Getting-started tips: whether you saved a prompt and whether you used one outside the web app, checked on day 3 and day 10 after you sign up to decide whether a short tip email would help. We send at most two, ever, and you can switch them off in your notification settings | To help new accounts get started | Legitimate interest |
| Billing: plan, number of seats, subscription status and invoices. Card details go directly to Stripe; we never see or store your card number | To charge for paid plans and handle tax | Contract, legal obligation |
| AI provider keys and test runs (only if you use the prompt tester or Improve with AI): the API keys you add, stored encrypted and never shown again, and the prompts you test with their answers, sizes and estimated costs | To run the tests you ask for, with your own provider account | Contract |
| Apps and their results (only if you use apps): what you type into an app's form, the text the AI returns (and the Word, PDF, Excel or data files built from it), your saved runs and schedules, and, when an owner or admin adds a team AI key, the team's API key (stored encrypted and never shown again) and a ledger of what each call cost, which holds amounts and names only, never text | To run the apps you ask for, keep your results, send them to the people you choose and keep AI spending within the limits your team sets | Contract |
| Community activity: prompts you submit, your name shown as author (and the optional job title from your profile, shown only beside prompts you chose to be credited for), ratings, reports and moderator decisions | To run a moderated public library | Contract, legitimate interest |
| Support requests: what you write to us, your name and email address, the workspace and plan you asked from, and the technical details you chose to include (page, browser, app version, the reference of the last error you saw, and a summary of your account at that moment: your role, plan and its state, seats, team settings, which AI providers have a key and whether it worked, limits reached, two-step sign-in and sign-in method, whether the browser extension is connected, and the codes of your own recent errors; never your prompts, names, email addresses or keys. You see this summary before you send). From the public contact form: the name and email you give us | To answer you and keep a record of what we said | Contract, legitimate interest |
| Free-trial record: only if you used a team free trial and then delete your account: a one-way hash of your email address (a scrambled value that cannot be turned back into the address, with no name, content or other detail). We keep nothing else about you | To stop the same address from starting a second free trial by deleting its account and signing up again | Legitimate interest (preventing abuse of the free trial) |
| Emails we send: verification, password reset, security alerts (such as two-step sign-in turned on or off), invitations, notifications you have not turned off, billing notices | To run the Service | Contract |
We do not read your AI chats or the pages you visit. The browser extension reads prompts from your Prompier account and puts text into the box on the AI tool you are using when you ask it to. It never presses send and never sends the content of those pages to us.
We do not use advertising or cross-site tracking, and we do not sell personal data.
Who sees your data
- You and the people you share with. In a team workspace, members see what their role allows. Owners and admins see members' names, emails, roles and the audit log. Community submissions are public once published, with your display name.
- Service providers that process data for us under contract: hosting and database, email delivery, Stripe (payments), and Google or Microsoft if you choose to sign in with them. Where they are outside your country, we rely on the transfer protections the law provides, such as standard contractual clauses.
- The AI provider you choose (Anthropic, OpenAI, Google, Mistral, Groq, Azure OpenAI, AWS Bedrock or Google Vertex AI), only when you press Run in the prompt tester or an app, when a schedule runs, or when you use Improve with AI. We send them the prompt text with your variables filled in, using your own API key, and they handle it under your agreement with them and their privacy terms, not ours. They are not our processors and we are not responsible for what they do with it. When a team has added its own AI key, apps, schedules, the prompt tester and Improve with AI run on that key, through the team's own agreement with the provider. When an app asks for a file, its text, or for a picture or PDF the file itself when the app is set to send it, is sent to the provider with the rest of the prompt. We keep a picture or PDF only until the run ends, and delete a Word, Excel, CSV or text file as soon as its text is read. We do not send anything to an AI provider otherwise. In a team workspace the tester is off until an owner or admin turns it on, and turning it on lets every member send prompt text to those providers.
- Community moderators. If you submit a prompt to the community library, volunteer moderators see the submission (title, text, sample output, license, results of the automated checks), your display name with your community track record (when you joined, how many of your submissions were approved or declined), and the reasons given in reports about it. They do not see your private library, other workspaces, or your email address through the moderation tools.
- Authorities, only when the law requires it.
- Our staff, only as needed to run, secure and support the Service. Staff do not browse private content: we look at it only when you ask us for support, to investigate abuse or a security problem, or to meet a legal duty.
How long we keep it
- Your account and content: until you delete them, or until your workspace is deleted.
- Sessions: removed after 30 days, or after 7 days without use.
- Password-reset and email-verification links: a short time, then deleted.
- Audit log: 12 months, then removed.
- Test answers from the prompt tester: 30 days, unless you saved one as a sample (kept until you remove it, or delete the prompt, your account or workspace).
- Improve with AI suggestions: until you accept or discard them, and never longer than an hour. The text sent to be improved is cleared as soon as the suggestion is ready.
- AI provider keys: until you remove them, or delete your account. A team's key stays until an owner or admin removes it or the team is deleted.
- App runs, their results and the answers you typed: until you delete them, or for the number of days your team chose (30, 90 or 365; or forever), or until you delete your account or the team is deleted. Apps that do not save answers drop what you typed when the run finishes. Test runs of drafts are removed after 30 days. A run left waiting for your review expires after 7 days. A result you sent to a teammate is a read-only copy for them until you delete the run. The spending ledger (amounts and names only) is kept after runs are deleted so that limits stay accurate, and is removed with the team.
- Support requests: 2 years after the request closes, then deleted. If you delete your account, we keep the requests but remove your name, email address and technical details from them.
- Free-trial record (the one-way hash of your email address, only if you used a team trial and then deleted your account): 2 years, then deleted.
- Invoices and tax records: as long as the law requires, which is often 6 to 10 years.
- Backups: kept for a limited time, then overwritten.
- Published community prompts: they stay available under the license you chose, but we remove your name from them if you delete your account.
Your choices and rights
Depending on where you live (for example under the GDPR or UK GDPR, or in California), you can ask us to give you a copy of your data, correct it, delete it, restrict or object to some uses, or move it elsewhere, and you can withdraw consent at any time. You can already do much of this yourself:
- Export your prompts as CSV, JSON or Markdown from Import / export.
- Turn off notification emails by type in your notification settings.
- Disconnect the browser extension, or log out, from the app at any time.
- Delete your account or any other data by writing to [email protected]. We answer within 30 days. If you are not happy with our answer you can complain to your data protection authority.
Security
Passwords are stored with a modern one-way hash (argon2id). Connections use HTTPS. Team data is separated at the database level so one workspace cannot read another's. Session and extension tokens are stored hashed. No system is perfectly secure; if there is a breach that affects you we will tell you and the authorities as the law requires.
Children
Prompier is not meant for people under 16 and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
Changes
If we change this policy in a way that matters we will tell you by email or in the app before it applies. The date at the top shows the latest version.
Contact
Prompier LLP. Privacy questions and requests: [email protected]. See also our terms and cookies page.