Privacy Policy

At Prompt Builder ("we", "us", "our") we are committed to protecting your privacy. This Privacy Policy explains, comprehensively and in full, what data we collect, how we use it, how we store and protect it, and every party we share it with. It applies to the Prompt Builder website (promptbuilder.cc and app.promptbuilder.cc) and to the Prompt Builder browser extension ("the Extension"). By using Prompt Builder you agree to the practices described below.

1. Information We Collect

We collect only the data needed to provide and improve the service. The categories below cover everything we collect.

Account and Authentication Information

When you create an account you can register with your email address or sign in with Google. We collect your name and email address, and, if you register with email and password, the credentials needed to create and maintain your sign-in session. Passwords are stored only in hashed form; we never store them in plain text. We retain a session token so you stay signed in across the website and the Extension.

Content You Submit ("Website Content")

To generate or optimize a prompt, we process the content you choose to submit, which may include:

The prompt text you type or that exists in the composer box on a supported AI site when you click Generate or Optimize.
Files you attach (such as documents, spreadsheets, PDFs, and code) to provide context.
Voice input you choose to dictate, which is converted to text.
Prompts you save to your library and any standing instructions you configure.

The Extension reads the prompt text in the composer, and any files or voice input you provide, only at the moment you take an action (clicking Generate, Optimize, or the toolbar/floating button). It does not read, collect, monitor, or transmit any other page content, your browsing history, or your keystrokes. There is no background tracking of the pages you visit.

Technical Data

We collect limited technical information such as IP address, device type, operating system, and browser type, used for security, abuse prevention, and to operate the service reliably.

Usage Data

We collect data about how you use the service — for example, prompts generated, features used, and aggregate interaction metrics — to operate, debug, and improve the product.

2. How We Use Your Data

We use the data above to:

Provide the core service: generate, optimize, save, and insert prompts.
Authenticate you and maintain your signed-in session.
Process payments and manage subscriptions for paid plans.
Maintain security, prevent abuse, and comply with legal obligations.
Analyze usage to debug, improve, and develop the service.

We do not use your data to train our own large language models, and we do not use it for advertising profiling.

We share data only with the service providers required to operate Prompt Builder, and only as described here. This is the complete list of parties we share user data with.

AI Model Providers

When you generate or optimize a prompt, the content you submit (your prompt text, attached files, and voice transcript) is sent to the AI provider that powers the selected model in order to return a result. Depending on the model you choose, this may include:

Anthropic (Claude)
OpenAI (GPT)
Google (Gemini)
DeepSeek
xAI (Grok)

Depending on the model you select, requests to OpenAI, Google, and xAI models may be routed through OpenRouter, an AI gateway that forwards your request to the provider operating that model. OpenRouter states that it does not use your inputs or outputs for model training.

These providers process the content you submit solely to return a response to your request. We access them through their commercial APIs, whose terms state that content submitted via API is not used to train their models (where such controls are offered, we rely on them). Providers may retain API content for a limited period — typically up to 30 days — for abuse monitoring and trust-and-safety purposes, after which it is deleted in accordance with their policies. For details, see each provider's data-usage documentation:

Payment Processing

Stripe processes payments for paid plans. We do not store full payment card details ourselves; Stripe receives the payment information necessary to complete a transaction, subject to Stripe's privacy policy.

Infrastructure Subprocessors and Analytics

Your account data, saved prompts, and related records are stored and processed by the following infrastructure providers, located in the United States:

Vercel — application hosting (US East region, USA).
Neon — managed PostgreSQL database storing account data, saved prompts, and prompt history (AWS us-east-2, USA).
MongoDB Atlas — supplementary datastore for operational data (USA).
Amazon Web Services (SES) — transactional email delivery (US West region, USA).
Analytics providers (including Google Analytics) help us understand aggregate usage so we can improve the service.

Together with the AI model providers and payment processor named above, these are the subprocessors we use to operate Prompt Builder. We keep this list current in this Policy and update the "last updated" date when it materially changes.

Legal and Business Transfers

We may disclose data if required by law, legal process, or to protect our rights, and we may transfer data as part of a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.

No Sale of Data

We do not sell your personal data, and we do not transfer your data to third parties for purposes unrelated to providing Prompt Builder. We do not use or transfer your data to determine creditworthiness or for lending purposes.

4. Data Storage, Retention, and Protection

Your data is stored on secured cloud servers located in the United States, operated by the infrastructure providers listed in Section 3. Data is encrypted in transit (TLS) and at rest (AES-256, applied by our infrastructure providers). We additionally apply technical and administrative safeguards including access controls and regular review. We retain personal data only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

5. Your Rights and Choices

You have the right to access, correct, export, or delete your personal data. You can manage local Extension preferences (such as the selected model and whether the floating button is shown) at any time, and you can sign out to remove the stored session.

Data Export and Account Deletion

To request an export of your data (including your prompt library and prompt history) or full deletion of your account, email us at support@promptbuilder.cc from the address associated with your account. After we verify the request, we will complete it within 30 days, or any shorter period required by applicable law. Account deletion permanently removes your saved prompts, prompt history, and account records from our systems.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases: performance of our contract with you (providing the service), our legitimate interests (security, abuse prevention, and service improvement), and your consent where required. You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with your local supervisory authority. Your data is processed in the United States; where required, international transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Data Processing Agreement (DPA)

If you require a GDPR Data Processing Agreement, a signed DPA is available on request — contact us at support@promptbuilder.cc. The subprocessors we use are listed in Section 3 of this Policy.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and analyze usage. You can control cookies through your browser settings, though some features may not function without them.

7. Children's Privacy

Prompt Builder is not directed to children under 13, and you must be at least 13 to use it. Users under 18 should have parental consent. We do not knowingly collect personal data from children under 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the current version on this page and update the "last updated" date, and we will notify users of significant changes. Continued use of the service after changes take effect indicates acceptance of the updated Policy.

9. Contact Us

For any questions, requests, or concerns about this Privacy Policy or your data, contact us at support@promptbuilder.cc.