Privacy

PrivacyΒ Policy

Your privacy matters to us. This policy explains what data we collect, how we use it, and the choices you have over your information.

πŸ“…Last updated: June 7, 2026⚑Effective: June 7, 2026
πŸ“Š

Information We Collect

We collect information you provide directly, information collected automatically when you use our services, and information from third parties.

  • Account data: name, email address, profile photo, and password hash.
  • Transaction data: purchase history, seller earnings, and payment method details (processed by our payment partner β€” we never store full card numbers).
  • Usage data: pages visited, prompts viewed, search queries, and feature interactions.
  • Device & log data: IP address, browser type, operating system, and access timestamps.
  • Communications: support messages, feedback, and email correspondence with us.
🎯

How We Use Your Information

We use the information we collect to operate, improve, and secure PromptVault β€” never to sell your data to third parties.

  • Provide and personalize platform features, recommendations, and search results.
  • Process purchases, payouts, and refunds securely.
  • Send transactional emails: verification, receipts, payout confirmations, and security alerts.
  • Detect fraud, abuse, and security threats.
  • Analyze aggregate usage trends to improve the product.
  • Comply with legal obligations and enforce our Terms of Service.
🀝

Information Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:

  • Service providers: payment processors, email delivery, cloud hosting, and analytics β€” bound by confidentiality agreements.
  • Sellers: when you purchase a prompt, the seller receives your display name and purchase confirmation (not your email or payment details).
  • Legal requirements: when required by law, court order, or to protect our rights and safety.
  • Business transfers: in the event of a merger or acquisition, data may be transferred subject to the same privacy commitments.
πŸ—“οΈ

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

  • Account data: retained until account deletion, then purged within 30 days.
  • Transaction records: retained for 7 years to meet financial and legal obligations.
  • Usage logs: retained for 90 days, then anonymized.
  • Support communications: retained for 2 years after resolution.
πŸ›‘οΈ

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any right, contact us at privacy@promptvault.app.

  • Access: request a copy of the personal data we hold about you.
  • Correction: update inaccurate or incomplete data in your account settings.
  • Deletion: request erasure of your personal data (subject to legal retention requirements).
  • Portability: receive your data in a machine-readable format.
  • Objection: opt out of certain processing activities, including marketing emails.
  • Restriction: request we limit processing of your data in certain circumstances.
πŸ”

Security

We implement industry-standard security measures to protect your data including TLS encryption in transit, bcrypt password hashing, JWT-based authentication with short-lived access tokens, and regular security audits.

No system is 100% secure. If you discover a vulnerability, please report it to security@promptvault.app and we will respond within 48 hours.

πŸͺ

Cookies & Tracking

We use essential cookies required for authentication and security (e.g. refresh token cookies set as HttpOnly). We do not use third-party advertising trackers.

  • Strictly necessary cookies: session management and CSRF protection.
  • Analytics (optional): anonymized usage statistics via privacy-friendly analytics.
  • Preference cookies: theme (light/dark) and UI preferences stored in localStorage.
πŸ‘Ά

Children's Privacy

PromptVault is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with information, please contact us at privacy@promptvault.app.

πŸ“

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, sending you an email notification.

The 'Last Updated' date at the top of this page indicates when this policy was last revised. We encourage you to review this policy periodically.

πŸ“¬

Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection team at privacy@promptvault.app. We respond within 5 business days.

For urgent security concerns: security@promptvault.app