Privacy Policy for PromptBuilder

1. Introduction

Welcome to PromptBuilder ("we," "us," "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thepromptbuilder.com and use our services (the "Service"). This policy complies with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

Our registered office is at Pasteurstraat 26 Amsterdam, The Netherlands. We are the data controller for the personal data processed through the Service.

2. Information We Collect

We may collect and process the following types of personal data:

• Personal Identification Information: Name, email address, company name (if provided), billing information (processed by our payment provider, see Section 5).
• Account Information: Username, password (hashed), user preferences, saved prompt templates and related content you create or upload ("User Content").
• Usage Data: Information about how you use the Service, such as features accessed, prompts generated, interaction times, IP address, browser type, operating system, device information, and referring URLs.
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies (see our Cookie Policy for details).
• Communications: Information you provide when you contact us for support or provide feedback.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications).
• Contract: Where processing is necessary for the performance of a contract to which you are party (i.e., providing the PromptBuilder Service under our Terms of Service).
• Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving the Service, analytics, security), provided these interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.

4. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, operate, maintain, and improve the Service.
• To manage your account, including processing registrations and payments.
• To respond to your comments, questions, and requests, and provide customer support.
• To send you technical notices, updates, security alerts, and administrative messages.
• To monitor and analyze trends, usage, and activities in connection with our Service for improvement and optimization (using aggregated or anonymized data where possible).
• To personalize the Service content or features.
• For security purposes, including preventing fraud and abuse.
• With your consent, to send you marketing and promotional communications. You can opt-out at any time.
• To comply with legal obligations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with third parties only in the following circumstances:

• Service Providers: With third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf (e.g., hosting providers, payment processors like Stripe, analytics providers like Google Analytics, customer support tools). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.

6. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions, to protect your data.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. Account data is typically retained as long as your account is active and for a reasonable period thereafter in case you decide to re-activate the Service, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Your Data Protection Rights under GDPR

If you are a resident of the EEA, you have the following data protection rights:

• Right to Access: Request access to your personal data.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request restriction of processing of your personal data under certain conditions.
• Right to Data Portability: Request transfer of your personal data to another organization, or directly to you, under certain conditions.
• Right to Object: Object to the processing of your personal data under certain conditions (e.g., for direct marketing).
• Right to Withdraw Consent: Withdraw consent at any time where we relied on your consent to process your personal data.

To exercise any of these rights, please contact us at legal@thepromptbuilder.com. We will respond to your request within one month.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or electronic storage is 100% secure.

10. Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date." You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• By email: legal@thepromptbuilder.com
• By mail: Pasteurstraat 26 Amsterdam, The Netherlands

You also have the right to lodge a complaint with your local data protection supervisory authority.