Privacy Policy

Prompty (the desktop app, the website at useprompty.com and the Prompty API) is provided by [Your full legal name], an individual based in [your state], United States (“we”, “us”). This policy explains what Prompty collects, why, who it's shared with, and the choices you have. Questions or requests: support@useprompty.com.

In short

• Prompty acts only when you ask it to, and only on the text you chose.
• Our servers never store the text of your prompts. Your rewrite history stays on your PC.
• We don't sell your personal information or use it for advertising.
• You can download everything we keep, or delete your account and all of it, from Dashboard → Profile.

What Prompty does not collect

• Your keystrokes. Prompty acts only when you press one of its shortcuts or click its orb, on the text you selected or the box you clicked in. To place the orb, the app checks only what kind of box you are typing in and where it is on screen, never what is in it. The prompt palette reads nothing from the app it opens over; it only pastes the prompt you pick.
• Anything in password fields. The desktop app detects them and refuses to read them.
• Your prompt text, on our servers. Prompts are passed to our AI provider to be rewritten and are not stored by Prompty.

What we collect

• Account details: your email address and sign-in information, handled by Clerk.
• Billing details: handled by Stripe. We never see or store your card number; we keep your Stripe customer ID, your plan and your subscription status.
• Usage records for each rewrite: time, mode, category, the name of the app you used (for example “ChatGPT”), token counts and timing. These power your stats and plan limits.
• Your profile, if you fill it in (“About you” and “Always”), which is sent along with each rewrite to tailor it.
• Prompts you choose to save to your library. The desktop app loads them to show in its prompt palette and keeps that copy only in memory while it runs.
• Signed-in PCs and API keys: a name for each (for a PC, its Windows computer name), when it was created and last used. Keys and sign-in tokens are stored only as SHA-256 hashes.
• Technical data: IP addresses, briefly, to limit how many requests one address can make, and standard server logs kept by our host for a short time.

Cookies: the website uses only the cookies that keep you signed in. There are no advertising or analytics cookies.

How we use it

To provide Prompty (rewrites, your library, your stats and your desktop sign-ins), to bill Pro, to enforce plan limits and prevent abuse, to answer you when you write to us, and to meet legal obligations. Where the law asks for a legal basis, these are: performing our contract with you; our legitimate interest in keeping Prompty secure and working; your consent, for things you choose to do such as “Find patterns with AI”; and legal obligations, such as keeping billing records.

How rewriting works

When you sharpen a prompt, the selected text, the mode, the app name and your profile are sent to Anthropic's Claude API to produce the rewrite. The result comes straight back to you. Anthropic processes this data under its commercial terms, which don't allow it to train models on it, and may keep it for a limited time for safety and abuse monitoring.

On your computer

The desktop app keeps a local history of your rewrites (original and rewritten text) in its app-data folder so you can review and reuse them. You can turn this off or clear it in Settings. When you sign in, the app keeps its sign-in token in Windows Credential Manager. You can sign any PC out from the Devices page of your dashboard. The app checks GitHub for updates, which lets GitHub see your IP address when it does.

Learning from you

Prompty learns from your local history on your PC: which rewrites you keep or dismiss and which modes you pick. It suggests changes, and nothing changes until you approve one. If you choose “Find patterns with AI”, your recent prompts and rewrites are sent once to Claude to suggest profile entries; they are not stored. Profile entries you approve are saved to your account, like the ones you write yourself.

Who we share it with

Only the providers that run Prompty for us, each for its own part:

• Anthropic: AI rewriting.
• Clerk: accounts and sign-in.
• Stripe: payments and subscriptions.
• Neon: our database.
• Vercel: website and API hosting.
• GitHub: desktop app downloads and updates.

We may also disclose information when the law requires it, or to a successor if Prompty is ever sold or transferred, under this policy. We don't sell personal information or share it for cross-context behavioral advertising.

How long we keep it

• Account data, profile, library and usage records: while your account is open.
• When you delete your account, it's removed from our database at once; copies in database backups expire within 30 days.
• Billing records: kept by Stripe for as long as tax and accounting laws require.
• Rate-limit records: about a minute. Server logs: a few days at most.

Your rights and choices

• Access and portability: Dashboard → Profile → Download my data gives you a file with everything we keep.
• Correction: edit your profile in the dashboard, and your email in your account settings.
• Deletion: Dashboard → Profile → Delete account removes your account and its data, and ends any subscription. You can also clear the desktop app's history in its Settings.
• You can withdraw a consent at any time, for example by not using “Find patterns with AI”.

Depending on where you live, you may have further rights, such as to object to or restrict processing, under laws like the GDPR (European Union and United Kingdom), the LGPD (Brazil) and US state privacy laws such as California's. Californians have the right to know, delete and correct their personal information and not to be discriminated against for using these rights; we don't sell or share it, so there's nothing to opt out of. To use any right, write to support@useprompty.com. We answer within 30 days (45 for California requests) and may need to confirm the request comes from you. You can also complain to your data protection authority.

Where your data is processed

We and our providers process data in the United States. If you use Prompty from elsewhere, your data is transferred to the United States under the safeguards our providers offer, such as the European Commission's standard contractual clauses.

Security

The app and the website talk only over HTTPS, sign-in tokens and API keys are stored as hashes, and on your PC your sign-in lives in Windows Credential Manager. No system is perfectly secure, so if you think your account has been misused, sign out your PCs from the Devices page and write to us.

Children

Prompty isn't meant for children under 13, or under 16 where the law sets that age for consent. If we learn that a child has an account, we delete it.

Changes

We'll post any change here and update the date above. If a change is significant, we'll also email account holders before it takes effect.

Contact

[Your full legal name], [your state], United States. support@useprompty.com