Privacy Policy

The Prompts Library ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we handle your personal data when you visit our website, use our services, or purchase our products, and tells you about your privacy rights and how the law protects you.

This policy applies to information we collect through our website (thepromptslibrary.com), mobile applications, and any other services or products that link to this policy (collectively, the "Services"). This policy applies regardless of the device you use to access our Services.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our Services.

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your email address and any profile information you choose to provide.
• Purchase Information: When you make a purchase, we collect billing information including your name, email address, and payment details. Payment processing is handled by our third-party payment processor (Gumroad), and we do not store your full payment card details.
• Communications: When you contact us, we collect the information you provide, such as your name, email address, and the content of your message.
• Survey Responses: If you participate in surveys, we collect the information you provide.

2.2 Information We Collect Automatically

• Device Information: We collect information about the device you use to access our Services, including device type, operating system, unique device identifiers, and browser type.
• Log Data: Our servers automatically record information when you use our Services, including your IP address, access times, pages viewed, and referring URLs.
• Usage Data: We collect information about how you interact with our Services, such as features used, prompts viewed, and actions taken.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information. See Section 7 for more details.

2.3 Information from Third Parties

• Payment Processors: We receive transaction information from our payment processor (Gumroad).
• Analytics Providers: We receive aggregated analytics data from services like Google Analytics.
• Social Media: If you connect your account to social media platforms, we may receive information from those platforms.

We use the information we collect for the following purposes:

• Provide and Maintain Services: To operate, maintain, and improve our Services, including processing transactions and providing customer support.
• Personalization: To personalize your experience and deliver content and features that match your interests.
• Communication: To send you transactional communications, such as purchase confirmations and account updates. With your consent, to send promotional communications.
• Security: To protect our Services and users from fraudulent, abusive, or unlawful activity.
• Legal Compliance: To comply with legal obligations and respond to legal requests.
• Analytics: To analyze usage patterns and improve our Services.
• Marketing: To send you marketing communications, subject to your preferences and applicable law.

If you are located in the European Union, European Economic Area, or United Kingdom, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to perform our contract with you, including providing our Services and processing transactions.
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our Services, preventing fraud, and marketing (where not overridden by your rights).
• Consent: Processing based on your consent, such as for marketing communications. You can withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with legal obligations.

We may share your information with:

• Service Providers: Third-party vendors who provide services on our behalf, such as payment processing (Gumroad), hosting, analytics, and email delivery. These providers are contractually obligated to protect your information.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: When required by law, subpoena, or other legal process, or to protect our rights, property, or safety.
• With Your Consent: We may share information with third parties when you explicitly consent.

We do not sell your personal information to third parties.

Your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the EU, EEA, UK, or Switzerland to other countries, we use appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved mechanisms

We use cookies and similar tracking technologies to collect and use information about you and your interaction with our Services. Cookies are small data files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the operation of our Services. These include cookies that enable you to log into secure areas.
• Performance Cookies: Help us understand how visitors interact with our Services by collecting anonymous information.
• Functionality Cookies: Enable enhanced functionality and personalization, such as remembering your preferences.
• Targeting Cookies: May be set by advertising partners to build a profile of your interests and show relevant ads.

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

• Account data: Retained for the duration of your account and for a reasonable period thereafter
• Transaction records: Retained for at least 7 years to comply with legal and accounting requirements
• Communication records: Retained for up to 3 years
• Analytics data: Retained in aggregate form indefinitely

When we no longer need your information, we will securely delete or anonymize it.

Depending on your location, you may have the following rights regarding your personal data:

9.1 Rights Under GDPR (EU/EEA/UK)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

9.2 Rights Under CCPA/CPRA (California Residents)

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights
• Right to Correct: Request correction of inaccurate information
• Right to Limit: Limit use of sensitive personal information

9.3 Rights Under Other Jurisdictions

Residents of other jurisdictions (including Brazil under LGPD, Canada under PIPEDA, Australia under the Privacy Act, and others) may have similar rights under their respective laws. Please contact us to exercise these rights.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Our Services are not directed to individuals under the age of 16 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we discover that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.

Our Services may contain links to third-party websites, applications, or services. This privacy policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you by email or through our Services. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

For EU/EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority.