Privacy Policy
This Privacy Policy explains how Prompt AI ("we", "us", "our") collects, uses, stores, and protects personal data when you use https://prmptly.dev ("Service").
Last updated: May 29, 2026
1. Data Controller
The data controller for personal data processed through the Service is Prompt AI, operating at prmptly.dev.
Contact: support@prmptly.dev
If you are located in Türkiye, our KVKK Aydınlatma Metni provides additional information under Turkish law.
2. Data We Collect
Account data: email address, name (optional), password (stored hashed by our authentication provider), account identifiers, and sign-in timestamps.
Usage data: prompts you submit, uploaded files, generated outputs, credit balance, transaction history, and feature usage needed to operate the Service.
Payment data: purchase amounts, product IDs, transaction references, and payment status. Card details are collected and processed directly by Dodo Payments; we do not store full payment card numbers.
Technical data: IP address, browser type, device information, request logs, and security/rate-limiting metadata.
Support communications: information you send when contacting us by email.
3. How We Use Your Data
We process personal data to:
- create and manage your account;
- provide AI prompt generation and file analysis features;
- manage credits, reservations, purchases, and refunds;
- secure the Service, prevent abuse, and enforce our Terms;
- respond to support requests and legal obligations;
- improve reliability and performance of the Service.
4. Legal Bases (GDPR / UK GDPR)
Where applicable, we rely on:
- Contract: to provide the Service you request.
- Legitimate interests: security, fraud prevention, and service improvement.
- Legal obligation: tax, accounting, and regulatory requirements.
- Consent: where required for non-essential cookies or optional communications.
5. AI Processing
When you generate prompts or upload files, your input may be transmitted to third-party AI providers to produce results. Do not submit sensitive personal data, confidential business information, or unlawful content unless you accept the associated risk.
AI outputs may be inaccurate or incomplete. You are responsible for reviewing outputs before use.
6. Subprocessors
We use trusted service providers, including:
Supabase
Authentication, database, and file storage
Location: United States / EU (region-dependent)
Privacy policy →Dodo Payments
Payment processing and refunds
Location: United States
Privacy policy →OpenRouter / Google Gemini
AI prompt generation
Location: United States
Privacy policy →Upstash
Rate limiting and abuse prevention
Location: United States / EU
Privacy policy →Vercel
Application hosting
Location: United States / EU
Privacy policy →
7. International Transfers
Your data may be processed in countries outside your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.
8. Retention
We retain account and transaction data for as long as your account is active and as needed to comply with legal obligations, resolve disputes, and enforce agreements. You may request account deletion by contacting us; some records may be retained where required by law.
9. Your Rights
Depending on your location, you may have rights to access, rectify, erase, restrict, object to processing, and data portability. You may also withdraw consent where processing is consent-based and lodge a complaint with a supervisory authority.
To exercise your rights, email support@prmptly.dev. We respond within 24–48 hours.
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
11. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.
13. Governing Law
This Privacy Policy is governed by the laws of the Republic of Türkiye, without prejudice to mandatory consumer protection rules in your country of residence.