This policy explains the main categories of information Prompt Manager processes when you create an account, use a workspace, contact support, or use billing features.
Effective 11 September 2026The service may process account details such as name, username, email address, password hash, profile settings, workspace membership information, prompts and prompt content, tags and categories, knowledge documents, support messages, billing contact details, and other content you choose to store.
The service may record sign-in and session information, workspace activity, API-key metadata, audit events, usage counters, webhook delivery results, evaluation and retrieval records, notification activity, and technical error information needed to operate and protect the product.
Hosted payment flows may send the details required for a transaction to the configured payment provider. The application stores payment, invoice, provider reference, status, and webhook records needed to reconcile billing. Do not store full card data in Prompt Manager.
Information is used to provide the requested product features, authenticate users, apply workspace permissions, maintain prompt history, deliver notifications, provide support, operate billing, prevent abuse, troubleshoot problems, and improve service reliability.
Information may be processed by infrastructure, email, payment, or other service providers configured by the operator when those services are required to deliver the feature you use. Workspace content can also be shared with other authorized workspace members according to their roles and the visibility settings you choose.
The application uses controls such as password hashing, server-managed sessions, CSRF protection, optional two-factor authentication, scoped API keys, role checks, and request safeguards. No online service can guarantee absolute security, so production credentials and access should be managed carefully.
Operational data is retained as needed to provide the service, preserve history, meet billing or security needs, and satisfy configured operational requirements. Account or workspace deletion may be limited by legitimate recordkeeping, backup, dispute, security, or legal needs.
Depending on your account permissions, you can update profile information, change your password, enable two-factor authentication, revoke API keys, manage workspace content, and contact support about access or account questions.
Use the Contact page for privacy questions or requests related to the information associated with your account.