1. Introduction
PromptArch ("we," "us," or "our") operates the website at promptarch.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Account Information
When you create an account via Google OAuth, GitHub OAuth, or magic link, we collect your email address, display name, and profile picture URL as provided by the authentication provider.
2.2 Usage Data
We collect information about how you use PromptArch, including prompts you build (domain, inputs, generated output), quality scores, credit transactions, and feature usage patterns.
2.3 Payment Information
Payments are processed by Paddle, our Merchant of Record. We do not store your credit card number, CVV, or full card details. We receive and store transaction metadata (package purchased, amount, transaction ID) for accounting and support purposes.
2.4 Automatically Collected Data
We may collect standard web analytics data through Cloudflare Web Analytics, including page views, referrer URLs, country, and device type. Cloudflare Web Analytics is privacy-focused and does not use client-side cookies or track individual users.
3. How We Use Your Information
- Provide the service: authenticate your account, process prompt builds, manage credits, and store your prompt library.
- Process payments: fulfill credit purchases, issue refunds, and prevent fraud.
- Improve the product: analyze aggregate usage patterns to enhance domain coverage, quality scoring, and user experience.
- Communicate: send transactional emails (magic link sign-in, payment receipts) and respond to support requests.
- Security and compliance: detect abuse, enforce rate limits, and comply with legal obligations.
4. Data Sharing
We do not sell your personal data. We share information only with:
- Supabase: database and authentication provider (stores your profile and prompt data).
- Anthropic: AI model provider (receives your prompt inputs to generate outputs; inputs are not used for model training per Anthropic's API terms).
- Paddle: Merchant of Record (handles payment processing, tax, and compliance).
- Cloudflare: hosting and web analytics provider.
- Sentry: error monitoring (receives anonymized error reports, not prompt content).
5. Data Retention
Your account data and saved prompts are retained for as long as you maintain an active account. Credit transaction history is retained for accounting purposes. If you delete your account, we will remove your profile and prompt data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., payment records).
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict processing of your data.
- Request a portable copy of your data.
To exercise any of these rights, contact us at support@promptarch.ai.
7. Cookies
PromptArch uses essential cookies for authentication session management (Supabase auth tokens). We do not use advertising or tracking cookies. Cloudflare Web Analytics does not use cookies.
8. Security
We use industry-standard security measures including HTTPS encryption, Row Level Security on all database tables, webhook signature verification for payments, and rate limiting on API endpoints. However, no method of electronic transmission or storage is 100% secure.
9. Children's Privacy
PromptArch is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at support@promptarch.ai.