Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and password (stored as a bcrypt hash). When you sign up via Google OAuth, we receive your Google email and name. We also collect prompt data you create (titles, content, variables, and test results).

2. How We Use Your Data

Your data is used to provide the PromptWright service — storing, testing, and managing your prompts. We use email addresses to send service notifications and optional newsletter content if you subscribe.

3. Data Storage

All data is stored in a PostgreSQL database on our own infrastructure. Passwords are hashed using bcrypt with 12 rounds. Session cookies are signed with HMAC-SHA256. We do not store payment card details — all payments are processed by Stripe.

4. Third-Party Services

• Stripe — payment processing (we never see your card details)
• Google — OAuth authentication
• OpenAI — AI model testing for Pro-tier models
• Umami — privacy-focused, cookieless analytics

5. Analytics

We use Umami, a privacy-focused analytics tool that does not use cookies or collect personal data. We track aggregate page views and visitor counts only.

6. Data Deletion

You can delete your prompts at any time from the dashboard. To delete your account, contact us at [email protected] and we will remove all your data within 30 days.

7. Contact

Questions about privacy? Email us at [email protected]