Privacy Policy

Last updated: March 10, 2026

1. Data We Collect

We collect: email address, hashed password (never plain text), usage count per day, IP address (via server logs), and the prompt inputs you submit. We do not collect payment card details (handled by Stripe).

2. How We Use Your Data

Email and password: to provide your account (legal basis: contract performance). Prompt inputs: sent to Anthropic's API to generate outputs (legal basis: contract performance). Usage count: to enforce free tier limits (legal basis: legitimate interest). We do not sell your data.

3. Third-Party Services (Sub-Processors)

Your data is shared with: Anthropic (prompt processing — their privacy policy), Stripe (payment processing — their privacy policy). We have Data Processing Agreements with both.

4. Your Rights (GDPR / CCPA)

You have the right to: access your data, correct inaccurate data, delete your account and all associated data (available in Account Settings), and opt out of any data sale (we don't sell data). California residents: we do not sell personal information.

5. Data Retention

We retain your data while your account is active. When you delete your account, all personal data is permanently deleted within 30 days.

6. Cookies

We use one session cookie to keep you logged in. No third-party tracking cookies.

7. Contact

Privacy questions: privacy@promptcraft.app