Privacy Notice

1. Who we are

PromptForge is operated by YZO ("we", "us"), trading as PromptForge. YZO is the data controller for the personal data described in this notice. You can contact us about privacy at support@promptforges.live.

2. What we collect and why

• Account data — email address, login credentials managed by our authentication provider, and an optional display name and company name. Used to create and secure your account and to provide the service. Legal basis: performance of our contract with you.
• Content data — the prompts, versions, notes, and model results you store. Used only to provide the workspace to you. Legal basis: performance of our contract.
• Usage and technical data — run counts, plan limits, timestamps, log data, device and browser information, and IP address. Used for billing limits, security, fraud prevention, troubleshooting, and improving the product. Legal basis: legitimate interests, and legal obligation where applicable.
• Support messages — anything you send us by email. Used to answer you. Legal basis: legitimate interests.

We do not sell your data, we do not publish user profiles or directories, and we do not use your stored prompts to advertise to you.

3. Who we share it with

• Service providers / subprocessors — hosting, database, authentication, and AI model providers that process prompts you choose to run.
• Merchant of Record — Paddle, which handles the sale of our subscriptions, payments, subscription management, tax compliance, and invoicing. Payment card details are collected and processed by Paddle, not by us.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to disclose by law.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep account and content data for as long as your account is active. If you delete content it is removed from the live database, and if you close your account we delete or anonymise your personal data once we no longer need it, subject to any legal or accounting retention requirements.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. Under UK and EU GDPR you also have the right to complain to your supervisory authority. Email support@promptforges.live and we will respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level database rules so each account can only read its own records, and server-side handling of model API keys so they are never exposed to the browser. No system is perfectly secure, but we work to keep your data protected.

8. Cookies

We use strictly necessary cookies and similar browser storage to keep you signed in and to keep the service secure. We do not use advertising cookies. You can clear or block cookies in your browser settings, but the service may not work correctly without the essential ones.