Privacy Policy

What we collect

• Account details: your email address and, if you sign up with a password, a securely hashed version of it (we never see or store your actual password). If you choose “Continue with Google”, we receive your email address and name from Google.
• Subscription details: a Stripe customer reference, your subscription status and renewal date. Your card details are entered on Stripe's pages and are never seen or stored by us.
• Your activity in the library: the prompts you save as favourites.
• Free resource sign-ups: your first name and email address, if you request one of our free guides.
• Usage and device information: pages visited, referring site, browser and device type, and approximate location, collected through analytics and our hosting provider's logs.
• Messages: anything you send us when you contact us.

How and why we use it

• To create and run your account, let you sign in, and provide the content you have paid for (to perform our contract with you).
• To take payments, manage your subscription and prevent fraud (contract and legitimate interests).
• To send the free guides you ask for and, where you agree, emails about our products. You can unsubscribe at any time using the link in any email (consent).
• To send essential service emails such as sign-in links and password resets (contract).
• To understand how the site is used and improve it (legitimate interests, or consent where the law requires it).
• To keep the site secure and comply with legal obligations.

We do not sell your personal data.

Who we share it with

We use trusted providers to run the site. They only process data on our behalf:

• Supabase — database and sign-in.
• Stripe — payments and billing.
• Vercel — website hosting.
• Kit (ConvertKit) — email sign-ups and newsletters.
• Google — “Continue with Google” sign-in, and Google Tag Manager for analytics.

Some of these providers are based outside the UK and EEA, including in the United States. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.

Cookies and similar technologies

• Essential: a sign-in session cookie that keeps you logged in, and a setting that remembers your light or dark theme.
• Analytics: Google Tag Manager and tags loaded through it may set cookies to measure traffic. You can block or delete cookies in your browser settings.

How long we keep it

We keep your account data while your account is open. If you ask us to delete your account we will remove your personal data, except where we must keep records (for example payment records held by Stripe) for legal or accounting reasons. Email subscribers stay on our list until they unsubscribe.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. To use any of these rights, email sam@promptllm.co. If you are in the UK or EEA you can also complain to your data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk).

Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No system is completely secure, so we cannot guarantee absolute security.

Children

The site is not intended for anyone under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes we will let you know in a suitable way.