Privacy Policy

Introduction

PromptOT is a prompt management platform that helps developers manage, version, evaluate, and deliver LLM system prompts via API. This Privacy Policy describes how we collect, use, and protect your information when you use our platform and services. By using PromptOT, you agree to the practices described in this policy.

Information We Collect

We collect the following types of information to provide and improve our services:

• Account information — Your email address, display name, and profile information provided during sign-up or profile configuration.
• Usage data — Pages visited, features used, session duration, browser type, device information, and general interaction patterns.
• Prompt content — The prompts, blocks, and variables you create and store on the platform. This content is stored encrypted at rest.
• API usage logs — Request metadata including timestamps, endpoints accessed, API key identifiers (not the keys themselves), and response status codes.

How We Use Your Data

• Service delivery — To operate the platform, authenticate your sessions, compile and deliver prompts, and manage your organization.
• Analytics — To understand how the platform is used, identify areas for improvement, and measure feature adoption.
• Service improvement — To fix bugs, improve performance, develop new features, and enhance the overall user experience.

Third-Party Services

We use the following third-party services to operate and improve PromptOT:

• Supabase — Database hosting, authentication, and storage infrastructure.
• Google Analytics — Web analytics to understand usage patterns and traffic sources.
• Microsoft Clarity — Session replay and heatmaps to understand user interactions and improve UX.
• OpenRouter — LLM processing for AI-powered features such as prompt rewriting and evaluation.

Each of these services has its own privacy policy. We encourage you to review their policies for details on how they handle data.

Cookies

We use essential cookies to maintain your authentication session and ensure the platform functions correctly. We also use analytics cookies via Google Analytics 4 to collect anonymized usage data. You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

Data Security

We take the security of your data seriously. All data is encrypted at rest and in transit using industry-standard encryption protocols. We implement strict access controls, ensuring that only authorized personnel and systems can access your data. API keys are hashed using SHA-256 and are never stored in plain text. For more details on our security practices, visit our Security page.

Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Deletion — Request deletion of your account and associated data.
• Export — Export your prompts, blocks, and project data at any time.
• Correction — Update or correct inaccurate personal information.

To exercise any of these rights, contact us at privacy@promptot.com.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. API usage logs are retained for 90 days for debugging and analytics purposes, after which they are automatically purged.

Children's Privacy

PromptOT is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete the data.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of PromptOT after changes are posted constitutes your acceptance of the updated policy.

Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@promptot.com.