Privacy policy.
Last updated: July 6, 2026
01What we collect
Account data: your email address and authentication metadata (magic-link and OAuth sign-ins). Purchase data: plan type, order identifiers, and entitlement status received from our payment partner — never card numbers. Waitlist data: the email (and optional plan interest) you submit. Usage data: product analytics events (page views, prompt copies, checkout starts) and technical logs (IP address, user agent) needed to run, rate-limit, and secure the service.
02What we use it for
To provide the service (accounts, unlocking premium content, downloads), to process purchases and prevent abuse, to send transactional email (sign-in links, receipts, waitlist confirmation), to understand aggregate product usage, and to comply with legal obligations. We do not sell personal data, and we do not use it for third-party advertising.
03Cookies
We use strictly necessary cookies for authentication sessions and, when analytics is enabled, a first-party analytics identifier. We do not use advertising cookies.
04Processors we rely on
Supabase (database & authentication), Vercel (hosting), Cloudflare (DNS, CDN, media storage), our merchant-of-record payment partner (such as Polar or Whop — checkout, taxes, refunds), Resend (transactional email), PostHog (product analytics), and Sentry (error monitoring). Each receives only the data required for its function and processes it under its own data-protection terms. Data may be processed outside your country, including in the United States.
05Retention
Account and purchase records are kept while your account exists and as required for tax and accounting. Waitlist entries are kept until launch outreach completes or you ask for removal. Analytics and logs are retained on our processors' standard rolling windows.
06Your rights
You can request access to, correction of, or deletion of your personal data — email hello@promptedsite.com from the address in question. Deleting your account removes your personal data except records we must keep by law (for example, purchase records held by the merchant of record). Depending on your jurisdiction (including the EU/UK GDPR and Indonesia's PDP Law), you may also have rights to portability and to lodge a complaint with a supervisory authority.
07Children
The service is not directed at children under 13, and we do not knowingly collect their data.
08Changes
We may update this policy; material changes will be announced on the site or by email. The "last updated" date above always reflects the current version. See also our Terms of Service.
Questions about this document? Contact hello@promptedsite.com.