Introduction
At PromptForge, we value your privacy and are committed to transparency about how we collect, use, and protect your data. This Privacy Policy explains what information we gather when you use our AI-powered prompt generator service and how we handle it.
Information We Collect
Account Information
When you create an account using Better Auth with OAuth providers (Google, GitHub, or Facebook), we collect:
- Your name
- Email address
- Profile picture (if provided by OAuth provider)
- OAuth provider identifier
Prompt Data
We store the prompts you generate through our service, including:
- Your input text and selected category
- Generated prompts and questions
- Timestamps of generation
- Usage counts for daily and monthly limits
Usage Analytics
We use PostHog for product analytics and session replay to understand how users interact with our service. This includes:
- Page views and navigation patterns
- Button clicks and UI interactions
- Session recordings (with input masking enabled)
- Device and browser information
- General location data (country/city level)
Payment Information
Payment processing is handled by Lemon Squeezy. We do not store your credit card details. Lemon Squeezy collects payment information directly and shares only transaction status and subscription details with us.
How We Use Your Data
- Service Delivery: To provide prompt generation, manage your account, and enforce usage limits
- Analytics: To understand user behavior, improve the product, and identify bugs
- Communication: To send service-related notifications, subscription updates, and respond to support requests
- AI Processing: Your input prompts are sent to OpenRouter (GPT-4o Mini or Claude Sonnet) to generate outputs. OpenRouter processes data according to their terms and does not retain prompts for training purposes
Cookies and Tracking
We use cookies for the following purposes:
- Authentication: Session cookies to keep you logged in via Better Auth
- Anonymous Tracking: A cookie to track free-tier usage for users without accounts
- Analytics: PostHog sets cookies to track sessions and user behavior
You can disable cookies in your browser settings, but this may limit functionality such as staying logged in.
Third-Party Services
We share data with the following third-party services to provide our functionality:
- Better Auth: OAuth authentication (Google, GitHub, Facebook)
- Lemon Squeezy: Payment processing and subscription management
- PostHog: Product analytics and session replay
- Turso: Database hosting (SQLite)
- OpenRouter: AI model API (GPT-4o Mini, Claude Sonnet) for prompt generation
Each service has its own privacy policy governing how they handle data. We recommend reviewing their policies if you have specific concerns.
Data Retention
We retain your account information and generated prompts for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it longer.
Analytics data is retained by PostHog according to their retention policy, typically 7 years for aggregated data.
Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Request an export of your generated prompts in a machine-readable format
- Objection: Object to certain processing activities, such as analytics tracking
To exercise any of these rights, please contact us at support@prompt4orge.xyz.
Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (HTTPS/TLS)
- Secure OAuth authentication via Better Auth
- Database access controls and encryption at rest (Turso)
- Regular security audits and updates
However, no system is completely secure. If you believe your account has been compromised, contact us immediately.
Children's Privacy
PromptForge is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us, and we will delete it promptly.
International Data Transfers
Your data may be transferred to and processed in countries outside your own. We ensure that such transfers comply with applicable data protection laws and that your data remains protected.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or by posting a notice on our website. Continued use of the service after changes indicates acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at:
Email: support@prompt4orge.xyz