PromptPal
1. Our Principle
PromptPal is designed with a privacy-first approach. Your prompt templates and personal data stay on your device. We collect the absolute minimum needed to operate the service.
2. What Data We Collect
| Data | Purpose | Processed By |
|---|---|---|
| Email (Pro only) | License verification and recovery | Our server and the Merchant of Record |
| Feedback submissions | Bug reports, suggestions, support requests | EmailJS — transmitted to our team |
| Prompt content (during AI optimization) | Sent to the AI provider to perform optimization | Built-in: via our Worker → AI provider; BYOK: direct to your provider. Never stored. |
| API keys (BYOK, optional) | Authenticate with your own AI provider | Stored locally on your device in an encoded form; sent directly to your AI provider, never to us |
Payment is processed by our Merchant of Record. We receive only your email and payment confirmation — never your card details. Their privacy policy applies to payment data they collect.
When submitting feedback, you may optionally include diagnostic information (extension version, browser info, and the current page URL). This is sent only if you check the “Include diagnostics” option. Your API keys and prompt content are never included.
3. What We Do NOT Collect
- Your prompt templates or content
- Your browsing history or activity
- Personal information beyond what is listed above
- Analytics or tracking data tied to your identity — we only keep anonymous, aggregated service-reliability logs (see Section 5)
- Cookies for advertising
4. Local Data Storage
All your templates, categories, and settings are stored locally in your browser using chrome.storage.local. This data never leaves your device unless you explicitly enable cross-device sync (Pro feature), which uses chrome.storage.sync — a built-in Chrome feature that syncs through your Google account under Google’s privacy policy, not through our servers.
5. AI Optimization Feature
PromptPal offers AI-powered prompt optimization through two methods:
- Built-in AI: Free users get a limited number of AI optimization trials. Pro users have broader access to built-in AI. When using built-in AI, your prompt text is forwarded through our server (hosted on Cloudflare) to third-party AI providers (e.g., Google Gemini, Groq, Zhipu GLM). We do not store, log, or use your prompt content for training or any purpose beyond delivering the optimization result.
- Your own API key (BYOK): PromptPal acts solely as a software interface. You can configure your own API key from supported AI providers (e.g., OpenAI, Anthropic, Google, DeepSeek). Your prompts and API key are sent directly from your browser to the AI provider you select. We never see, store, or relay this data. Each provider’s privacy policy applies to data they receive.
For reliability monitoring of the built-in AI feature, our server logs aggregated usage statistics (success/failure rate, which model was used). No prompt content is ever logged. BYOK requests go directly to your provider and do not pass through our server.
6. License Verification
For Pro users, the extension contacts our server (hosted on Cloudflare) to verify your license status when needed. This request contains only your email address — which is immediately hashed (SHA-256) on arrival; only the irreversible hash is stored, and the plaintext email is never persisted or written to logs. No other data is sent. The extension works offline using a cached license status.
7. Data Retention
- Local data: Persists until you uninstall the extension or clear browser data. We have no access to it.
- License records: Retained indefinitely so you can restore your Pro license at any time.
- Email hash (not plaintext): Only the irreversible SHA-256 hash is retained with your license record for recovery purposes. Plaintext email is never stored. You can request deletion by contacting us.
- Feedback data: Retained for as long as needed to address your submission. You can request deletion at any time.
8. Your Rights
You can:
- Export all your data at any time using the built-in export feature.
- Delete all local data by uninstalling the extension.
- Request deletion of your license record, email, or feedback data from our server by contacting us.
9. Children’s Privacy
PromptPal is not directed at children under 13. We do not knowingly collect data from children.
10. Changes
We may update this policy from time to time. Material changes will be communicated via the extension or this page.
11. Contact
For privacy questions or data deletion requests, please use the feedback feature built into PromptPal, contact us through the extension’s settings page, or email [email protected].