Last updated: January 2026
The data controller is PromptBearer. For any questions about your data, contact us at contact@promptbearer.com.
Your data is processed based on your consent (when creating an account) and contract execution (for providing our services).
We collect information you provide directly: name, email address, payment data (via Stripe). We also collect anonymized usage data to improve our service.
We use essential cookies and trackers required for the Service to function (authentication, preferences, security, usage limits). They do not require your prior consent.
Subject to your consent, we also use audience measurement trackers: Google Analytics 4 and Vercel Analytics. You may withdraw or change your consent at any time via the cookie consent banner (Manage cookies button in the footer).
The Sentry monitoring service collects technical error data, including over a limited sample of sessions (masked session replay — 10% of sessions and 100% of error sessions), based on our legitimate interest in ensuring the stability of the Service.
Refusing non-essential trackers does not affect how the Service works. For details on the cookies and trackers we use, see our Cookies page.
We use your data to: provide and improve our services, process your payments, communicate with you, and comply with our legal obligations.
Your data is protected by technical and organizational measures that meet industry standards (TLS encryption in transit, encryption at rest, access control, logging).
It is hosted with providers located in the European Union and, for certain processing, in the United States, in both cases based on contractual safeguards compliant with the GDPR (standard contractual clauses — see the Data Processors and Transfers article).
It is retained for the duration of your subscription, then in accordance with applicable legal time limits (in particular tax and accounting).
To provide the Service, we use the following processors, which act solely on our documented instructions:
| Processor | Purpose | Data concerned | Location |
|---|---|---|---|
| Stripe Inc. | Card payment, billing, subscription management | Billing identity, payment data | EU/US (standard contractual clauses) |
| Groq, Inc. | AI generation (Qwen 3.8 27B model) | Content of the submitted prompt | US (standard contractual clauses) |
| Resend (RSKD, Inc.) | Sending transactional and marketing emails | Email address, email content | US (standard contractual clauses) |
| Functional Software, Inc. (Sentry) | Error monitoring, server/client logging, session replay | Technical errors, usage data, sample of page content (masked replay) | US (standard contractual clauses) |
| Vercel Inc. | Website hosting, CDN, traffic analytics | Request logs, aggregated usage data | US (standard contractual clauses) |
| Google LLC (Google Analytics 4) | Audience measurement (if you accept analytics cookies) | Pseudonymized usage data | US (standard contractual clauses) |
| Neon (Postgres database) / Redis | Application storage and cache | Account data, prompt content | EU/US (depending on region) |
| GitHub, Inc. | Continuous integration and automation | Source code, environment secrets | US (standard contractual clauses) |
Transfers to countries outside the European Union are governed by the European Commission's standard contractual clauses (SCCs), supplemented by technical and organizational safeguards (encryption in transit and at rest, impact assessments where necessary). You may obtain a copy of the applicable safeguards by writing to the address indicated in the Contact article.
You have the following rights: access to your data, rectification, erasure, restriction of processing, objection, and data portability. To exercise your right to data portability, you can export your data directly from your account settings (Data section). For other requests, contact us at contact@promptbearer.com. You may also file a complaint with the CNIL at www.cnil.fr.
At your request, we provide you with a copy of your personal data in a structured, commonly used, machine-readable format. The export includes the data you provided and the data generated by your use of the Service: profiles, prompts and versions, templates, presets, invoices, teams and memberships, overrides.
The export excludes: technical logs (error logs, security traces), which are necessary for the security of the Service; organizational prospecting data (companies contacted as part of our commercial campaigns), processed on the basis of our legitimate interest and kept on our suppression list in case of objection; residual copies held by our processors after deletion (Stripe, Resend, Sentry), retained in accordance with their legal obligations.
Deleting your account triggers the purge of our local data, without prejudice to applicable legal retention obligations.
For any questions about this policy: contact@promptbearer.com