Privacy Policy

1. Introduction

PromptVault ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

Please read this privacy policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using PromptVault, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Scope

This Privacy Policy applies to:

• Our website (PromptVault.com and all subdomains)
• All related applications, services, and tools
• All interactions with PromptVault personnel

2. Information We Collect

A. Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Account Information: Full name, email address, username, and password (if you create an account)
• Submission Information: When submitting prompts, we collect the prompt text, images, topic, style, AI generator used, and quality rating
• Communication Data: Email communications, support tickets, feedback, and inquiries
• Contact Information: Phone number, mailing address (if you choose to provide it)
• Portfolio Information: Links to your website or portfolio when submitting prompts

B. Information Collected Automatically

When you use PromptVault, we automatically collect certain information:

• Device Information: Device type, operating system, browser type, and unique device identifiers
• Usage Data: Pages viewed, features used, search queries, time spent on site, and interactions with content
• Log Data: IP address, access times, pages visited, referrer information, and click data
• Location Information: Approximate location based on IP address (country/city level, not precise)
• Performance Data: Load times, error rates, and technical performance metrics

C. Information from Third Parties

• Analytics Providers: Google Analytics provides aggregated usage data
• Social Media: If you share content on social platforms, we may receive limited data
• Service Providers: Payment processors and email services may share relevant information

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• Providing, maintaining, and improving PromptVault
• Processing and responding to prompt submissions
• Sending confirmation emails and transactional messages
• Troubleshooting technical issues and bugs

Communication

• Responding to your inquiries and support requests
• Sending service updates and announcements (with your consent)
• Notifying you about changes to our policies or services
• Sharing educational content about prompt engineering

Analysis & Improvement

• Analyzing usage patterns to improve user experience
• Understanding feature popularity and user preferences
• Conducting research on prompt effectiveness
• Identifying and fixing technical issues

Legal & Security

• Enforcing our Terms of Service and other agreements
• Protecting against fraud, security threats, and abuse
• Complying with legal obligations and regulations
• Defending our rights and the rights of our users

Quality Assurance

• Moderating and curating prompt submissions
• Verifying that submitted prompts meet our quality standards
• Crediting creators appropriately for their contributions

4. Data Protection & Security

Security Measures

We implement comprehensive technical, administrative, and physical safeguards to protect your personal information:

• Encryption: All data transmitted is encrypted using industry-standard SSL/TLS protocols
• Access Controls: Only authorized personnel have access to personal data, under strict confidentiality obligations
• Secure Storage: Data is stored on secure, password-protected servers with automatic backups
• Firewalls: We use firewalls and intrusion detection systems to monitor for threats
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Data Minimization: We only collect data that is necessary for our services

Limitations on Security

While we implement strong security measures, no online transmission is 100% secure. We cannot guarantee absolute security of your data. You use PromptVault at your own risk. We are not responsible for unauthorized access to your account caused by:

• Sharing your password with others
• Using weak or easily guessable passwords
• Compromised personal devices or networks
• Phishing attacks or social engineering

Data Retention

Data Type	Retention Period
Account Information	Until account deletion + 30 days
Submitted Prompts	Indefinitely (to maintain library quality)
Usage Analytics	24 months
Support Tickets	12 months after resolution
Log Files	90 days

5. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and improve your experience.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality (login, security)
• Performance Cookies: Track usage patterns to understand how users interact with PromptVault
• Preference Cookies: Remember your settings and preferences (theme, language)
• Analytics Cookies: Help us understand which features are most popular

Tracking Technologies

• Google Analytics: Aggregated, anonymized usage data for service improvement
• Pixel Tags: Used to track email opens and engagement
• Session Recording: Anonymized recordings of interactions (optional, with consent)

Managing Cookies

You can control cookies through your browser settings:

• Most browsers allow you to refuse cookies or alert you when cookies are being set
• You can set preferences for accepting cookies from specific websites
• Disabling cookies may affect functionality of some features

6. Your Privacy Rights

You have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, and portable format.

Right to Correct

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update your account information at any time through your account settings.

Right to Delete

You may request deletion of your personal data, except where we have a legitimate reason to retain it (legal obligations, fraud prevention). Account deletion is available through your account settings.

Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy or assess your request.

Right to Object

You can object to:

• Marketing communications (unsubscribe links in all emails)
• Analytics and tracking (opt-out through your browser settings)
• Processing based on legitimate interests

Right to Data Portability

You can request your data in a portable, machine-readable format to transfer to another service.

Right to Withdraw Consent

If we process your data based on your consent, you can withdraw it at any time without affecting the legality of processing before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with clear details of your request. We will respond within 30 days.

7. Third-Party Services & Links

Third-Party Integrations

PromptVault may integrate with or link to third-party services, including:

• Google Analytics: For aggregated usage analysis
• Email Services: For sending transactional and promotional emails
• Social Media Platforms: If you choose to share content
• Payment Processors: If we offer premium features in the future

Disclaimer

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies. When you click external links, you leave our site and are subject to their terms.

Social Media Links

If you share PromptVault content on social media, those platforms will collect data according to their own privacy policies. We do not control these practices.

8. GDPR & International Compliance

GDPR Compliance (EU Users)

If you are a resident of the European Union, United Kingdom, or European Economic Area, additional protections apply:

Legal Bases for Processing

Processing Type	Legal Basis
Account Creation & Service Delivery	Contract Performance
Marketing Communications	Your Explicit Consent
Security & Fraud Prevention	Legitimate Interest
Legal Compliance	Legal Obligation
Service Improvement	Legitimate Interest

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with supervisory authorities

Data Processing Agreement

If you are a business processing data through PromptVault, we can provide a Data Processing Agreement (DPA) outlining our obligations.

International Data Transfers

If you are outside the United States, your data may be transferred to and processed in the United States. By using PromptVault, you consent to this transfer. We implement appropriate safeguards to protect your data.

9. Contact & Data Protection Authority

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Email notification (if applicable)
• Prominent notice on our website
• Requesting your consent if required by law

Your continued use of PromptVault after changes constitutes acceptance of the updated Privacy Policy.