Privacy Policy

Summary

PromptPilot is local-first: the ideas, answers, and blueprints you create are stored in your browser's local storage on your own device by default. On deployments where accounts are enabled, AI features require signing in (so usage limits can be applied fairly), and while you're signed in your projects are also synced to your account automatically so they're available across your devices. AI actions send your text to an AI provider only when you explicitly trigger them — never in the background. We never sell your data. We apply the same strong privacy standard to everyone, in every country.

What we collect, and where

• On your device (local storage): your projects, answers, generated blueprints, version history, a display name you optionally enter, and preferences (workspace mode, tour state, cookie choice, and your latest usage meter).
• In your account — when accounts are enabled and you sign in: your email address (to authenticate you), your projects (synced to your account automatically while you're signed in, so they work across devices), and a usage record of your AI actions (to apply fair-use limits).
• Billing — only if you subscribe to a paid plan: payments are processed by Stripe on Stripe's own checkout pages. We never see or store your card number. We store only your subscription plan and status, a Stripe customer/subscription reference, your billing country/tax status, and the current billing period — enough to know what your account is entitled to.
• Sent to an AI provider — only when you trigger an AI action: the text you submit (your idea, answers, and prompts) is sent server-side to the configured AI provider solely to produce that result. Outputs are generated suggestions, not human-reviewed advice.
• Sent to a speech-to-text provider — only if voice input is enabled on this deployment and you confirm a recording: the audio is transcribed and used as your input.
• Error diagnostics — only if monitoring is enabled on this deployment: when the app hits an error, a technical crash report (a stack trace plus non-personal context) is sent so we can fix it. Only actual errors are sent — no performance, session, or browsing telemetry — and it is never used to build a profile of you or tied to your IP address.
• Analytics — only if you consent: if analytics is configured, product-usage events are collected only after you accept analytics cookies. You can decline or withdraw at any time (see Cookies).

If a given deployment has no accounts, AI key, voice key, billing, monitoring, or analytics configured, those steps simply don't happen — the app runs fully on your device.

Who processes your data (sub-processors)

We don't sell data. We share it only with the service providers ("processors") needed to run the features you use, each bound to process it only on our instructions:

• Supabase — accounts (authentication) and the database that stores your synced projects and usage record.
• Vercel — application hosting and delivery.
• AI providers — Google (Gemini), OpenAI, and Anthropic — process the text you submit when you trigger an AI action, to generate your result.
• AssemblyAI — speech-to-text, only where voice input is enabled and you confirm a recording.
• Cloudflare (R2) — storage for share links, only if you create one.
• Stripe — subscription billing and tax calculation.
• Resend — sending account/authentication emails.
• Sentry — crash/error diagnostics only (no performance or usage tracking), where monitoring is enabled.
• PostHog — product analytics, only after you consent.

Please review those providers' own privacy terms. We keep this list current as our providers change.

Why we process it (lawful bases)

• To deliver the service you asked for (produce results, save/sync your work) — performance of our agreement with you.
• To keep the service secure and available (fair-use limits, abuse prevention, diagnostics) — our legitimate interests.
• To process subscriptions you buy and meet tax/accounting duties — contract and legal obligation.
• Analytics — your consent (which you can withdraw anytime).

Your rights (all countries)

Wherever you live, you can ask us to: access a copy of your data, correct it, delete it (erasure), export/port it, restrict or object to processing, and withdraw consent for anything based on consent. You will never be treated differently for exercising these rights. You can also complain to your data-protection authority (for example the ICO in the UK, your EU supervisory authority, or your local regulator). Most of these are self-serve: Download my data and Delete account live in Settings → Account. For anything else, contact us below and we'll respond promptly.

Cookies & analytics

• Strictly-necessary cookies keep you signed in and the app working — these are always on and need no consent.
• Analytics cookies (PostHog) are off by default and load only after you accept them in the cookie banner. You can change your choice anytime in Settings → General (the "Analytics cookies" toggle); declining or withdrawing means no analytics cookies are set and no product-usage events are collected.

Do Not Sell or Share

We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising. There is nothing to opt out of because we never do this.

International data transfers

Our providers may process data in countries other than yours (for example the United States). Where required, such transfers rely on recognised safeguards — Standard Contractual Clauses, an adequacy decision, or the EU-US/UK/Swiss Data Privacy Framework.

How long we keep it

• Local data stays in your browser until you delete it (or clear your browser's site data).
• Synced projects stay in your account until you delete the projects or your account.
• AI usage records are kept only as long as needed to apply fair-use limits across billing periods.
• Subscription records are kept while active and as required for tax/accounting afterwards. If your plan lapses, your access narrows but your projects are never deleted for that reason.

Children

PromptPilot is not directed to children under 16 (or the minimum age in your country), and we do not knowingly collect their data.

Your controls

• Download my data (Settings → Account) exports the data we hold for your account as a file.
• Delete account (Settings → Account) permanently deletes your account and its synced projects, usage records, and subscription reference, and cancels any active subscription. This is self-serve — no email required. Some records may be retained where the law requires (for example billing/tax records), and residual copies may persist in encrypted backups for a limited period before they are cycled out.
• Delete all data (Settings → Account) permanently removes everything PromptPilot stored in this browser. It does not delete projects you synced to an account — use Delete account for that.
• You can delete individual projects from the project list at any time (deleting a synced project removes the synced copy too).
• Subscriptions are managed through the billing portal on the pricing page — cancelling stops future charges; your projects remain.

Who we are & how to contact us

The service is provided by AUVI FZE · Trade licence 20582/2026 · licensed by Fujairah Creative City – Free Zone Authority, UAE · Fujairah – Twin Towers, P.O. Box 4422, Fujairah, United Arab Emirates. We are the controller of your personal data. For privacy questions, access/export requests, deletion, or to exercise any right above, contact: prabeeshpk05@gmail.com. (A dedicated privacy contact address is being set up; this inbox is monitored in the meantime.) If you are in the UAE, you can also raise a consumer complaint with the UAE Ministry of Economy consumer-protection service.

Applies worldwide

This policy grants the same strong protections to every user and is written to meet, as a single baseline, the EU GDPR, UK GDPR, California CCPA/CPRA, Brazil LGPD, Canada PIPEDA, Australia's Privacy Act, India's DPDP Act 2023, and the UAE PDPL. Where your local law grants you more, that law applies.