Privacy Policy

1. Information we collect

Account information. When you sign up, our authentication provider Clerk collects your email address, name (optional), and password (or OAuth identity from Google / GitHub). We do not store your password directly; Clerk handles authentication on our behalf.

Profile information. Your chosen username (visible publicly on marketplace contributions).

Project content. Project names, descriptions, tech stack, brand vibe, target users — anything you enter into a project.

Prompt content. Rough prompts you submit to PromptStack and the enhanced prompts we produce. Prompts and outputs from the Chrome extension are processed identically.

Usage data. Counters such as your monthly enhance count (used for free-tier limits) and the timestamps of your timeline entries.

Payment data. If you upgrade to Pro, our payment processor Razorpay collects and stores your payment method. We never see or store your card number; we only see a subscription identifier, status, and the last billing date.

Cookies. We use cookies set by Clerk strictly for authentication. We do not use cookies for advertising or third-party tracking.

2. How we use your information

• Operate, secure, and improve the Service.
• Send your prompts to our AI provider (OpenAI) to produce enhanced prompts and return them to you.
• Enforce free-tier limits and process Pro subscriptions.
• Reply to support requests, including refund requests, that you send to arsh22415@gmail.com.
• Comply with legal obligations.

We do not sell your data. We do not train AI models on your prompts. We do not use your data for advertising.

3. Third parties we use

We share data only with these processors, strictly to operate the Service:

• Clerk — authentication, account storage.
• Supabase — database hosting (projects, prompts, saved items, timeline, profile, subscription state).
• OpenAI— the AI model that produces enhanced prompts. Prompt text is sent over HTTPS to OpenAI's API only when you ask for an enhancement.
• Razorpay — payment processing for Pro subscriptions.
• Vercel — hosts the web app and serverless functions.

Each processor has its own privacy policy. We choose providers with strong security practices and process data only for the purposes described above.

4. The Chrome extension

The PromptStack extension reads the contents of the prompt box of supported AI tools (Lovable, Bolt, v0, ChatGPT) only when you click the ✨ Enhance button. It sends that text to our API to be enhanced, then writes the result back into the prompt box. The extension does not passively read the page, browse history, or keystrokes. Your API key is stored locally inside the extension and is never transmitted to anyone other than our API.

5. Data retention

We keep your account data while your account is active. You can delete individual projects, saved prompts, and timeline entries at any time from the dashboard. To delete your account and all associated data, email us at arsh22415@gmail.com and we'll handle it within 30 days.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Export your data in a machine-readable format.
• Object to or restrict processing.

Email arsh22415@gmail.com with the subject line Privacy Request and we'll respond within 30 days.

7. Security

We use industry-standard measures including TLS encryption in transit, row-level security in our database, and server-side handling of all secret keys (we never expose secrets to the browser or extension). No system is 100% secure; if you become aware of a vulnerability please email us promptly.

8. Children

PromptStack is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we discover that we have, we will delete it.

9. Changes to this policy

We may update this Policy from time to time. We'll update the “Last updated” date at the top and, for material changes, notify you by email. Continued use of the Service after an update constitutes acceptance.

10. Contact

Privacy questions, data requests, account deletion: email arsh22415@gmail.com.