Privacy Policy

This policy explains what Promptnator collects, why, and how we handle it. We keep it short and readable. Soft-launch practices may improve over time; we will update this page when they do.

1. Who we are

Promptnator is operated at promptnator.xyz. Contact: hello@promptnator.xyz.

2. What we collect

• Account data: identity from our auth provider (Clerk) such as user id, email, and display name when you sign up.
• Product data: prompts, versions, folders, visibility settings, and share links you create.
• Usage data: generation counts, plan limits, approximate timestamps, and security logs (e.g. rate limits).
• Payment data: handled by Dodo Payments. We receive plan status and webhook events; we do not store full card numbers.
• Technical data: cookies/session tokens needed for login and free-trial fairness, browser type, and IP for abuse prevention.
• Optional analytics/errors: if PostHog or Sentry are configured, they may receive anonymized or account-linked events and crash reports.

3. Why we use data

• Provide Magic Polish, Vault, Explore, and billing.
• Enforce free-trial and plan limits fairly.
• Secure the Service (fraud, abuse, rate limits).
• Improve reliability and fix bugs.
• Communicate about your account or material service changes.

4. AI processing

When you generate a prompt, your input may be sent to third-party AI providers (for example DeepSeek depending on configuration). Those providers process content under their own privacy terms. Avoid pasting highly sensitive personal data unless necessary.

Voice dictation (Rant to mic): when cloud dictation is enabled, short audio clips you record are sent to our servers and then to Deepgram for speech-to-text. We use the transcript to fill the Magic Polish box. Audio is processed to produce text and is not stored as a permanent media library. A browser-only fallback may be used when cloud dictation is unavailable.

5. Sharing

We share data only as needed with:

• Infrastructure and auth: hosting (e.g. Vercel), database (Supabase), authentication (Clerk).
• Payments: Dodo Payments for checkout and subscriptions.
• AI providers: as described above.
• Speech-to-text: Deepgram when you use cloud dictation on Rant to mic.
• Analytics/error tools: only if enabled.
• Legal: if required by law or to protect rights and safety.

We do not sell your personal information.

6. Public prompts

If you set a prompt to Public (or Unlisted with a shared link), its published content, title, and creator display name may be visible on share pages and Explore. Private vault items are not listed publicly.

7. Retention

We keep account and vault data while your account is active. You can delete your account from Settings (where available); we then remove or de-identify associated data within a reasonable period, except records we must keep for legal, security, or billing purposes.

8. Security

We use HTTPS, signed session cookies for trial limits, server-side secrets, and access controls on the database. No method is 100% secure; please use a strong password with your auth provider and avoid sharing secrets in prompts.

9. Your choices

• Access or update profile details via your account provider / Settings.
• Delete account via Settings when available, or email us.
• Change prompt visibility anytime.
• See our Cookies page for cookie controls.

10. Children

Promptnator is not directed at children under 13 (or the minimum age in your region). If you believe a child has provided data, contact us and we will take appropriate steps.

11. International users

The Service may be hosted in regions different from yours. By using Promptnator you understand your data may be processed in those locations with appropriate safeguards where required.

12. Changes

We may update this policy. The “Last updated” date will change. Significant changes may be highlighted in the product or by email when practical.