Privacy Policy

1. Introduction

PromptCache ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI prompt management platform and services (the "Service"). By using PromptCache, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we may collect the following personal information:

• Name and email address (through Clerk authentication)
• Profile information and avatar image
• Organization name and details
• Contact information for billing and support
• Communication preferences

2.2 Prompt and Content Data

• AI prompts and templates you create
• Prompt variables, descriptions, and metadata
• Version history and change logs
• Tags and categorization data
• Public prompts you choose to share
• Usage analytics for your prompts

2.3 Technical Information

• IP address and device information
• Browser type and version
• Operating system and device characteristics
• API usage patterns and performance metrics
• Log data and error reports
• Cookies and tracking technologies

2.4 Usage Data

• Feature usage and interaction patterns
• API key usage and rate limiting data
• Organization membership and role information
• Audit logs for security and compliance
• Performance and analytics data

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Provide and maintain the PromptCache platform
• Process API requests and manage rate limiting
• Enable prompt creation, editing, and management
• Facilitate organization and team collaboration
• Support version control and rollback functionality

3.2 Account Management

• Create and manage user accounts
• Authenticate users and maintain security
• Process payments and billing
• Manage subscriptions and usage limits
• Provide customer support

3.3 Communication

• Send transactional emails and notifications
• Provide technical support and assistance
• Communicate service updates and maintenance
• Send security alerts and important notices

3.4 Improvement and Analytics

• Analyze usage patterns to improve our services
• Monitor performance and reliability
• Develop new features and functionality
• Conduct research and development

4. Data Sharing and Disclosure

4.1 Public Prompts

When you choose to make a prompt public, the following information becomes publicly accessible:

• Prompt name, description, and template content
• Variables and configuration
• Tags and metadata
• Author name and organization (if provided)
• Usage statistics (views, forks, ratings)

4.2 Service Providers

We may share your information with trusted third-party service providers:

• Clerk: User authentication and identity management
• MongoDB Atlas: Database hosting and management
• Redis: Caching and session management
• Resend: Transactional email delivery
• Vercel: Application hosting and deployment
• Analytics providers: Usage analytics and monitoring

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations and court orders
• Protect and defend our rights and property
• Prevent fraud and ensure platform security
• Protect the personal safety of users and the public

5. Data Security

We implement industry-standard security measures to protect your information:

• Data encryption in transit and at rest
• API key hashing and secure storage
• Multi-factor authentication options
• Regular security audits and monitoring
• CSRF protection and secure headers
• Rate limiting and DDoS protection
• Audit logging for compliance and security

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Account data: Until account deletion or as required by law
• Prompt data: Until manually deleted by users
• API logs: Up to 90 days for monitoring and debugging
• Audit logs: Up to 7 years for compliance purposes
• Public prompts: Until removed by the original author

7. Your Rights and Choices

7.1 Access and Control

• Access and download your personal data
• Update or correct your account information
• Delete your prompts and content
• Control public/private visibility of prompts
• Manage API keys and access permissions

7.2 Account Deletion

You can delete your account at any time through your account settings. Upon deletion:

• Your personal information will be permanently deleted
• Your private prompts will be removed
• Public prompts may remain for community benefit
• Some data may be retained for legal or security purposes

7.3 Communication Preferences

• Opt out of marketing communications
• Control notification preferences
• Update contact information

8. Cookies and Tracking

We use cookies and similar technologies to:

• Essential cookies: Authentication and session management
• Analytics cookies: Usage statistics and performance monitoring
• Preference cookies: Remember your settings and preferences

You can control cookie settings through your browser, but disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Regional Privacy Rights

13.1 GDPR Rights (EU/UK)

If you are in the European Union or United Kingdom, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making

13.2 CCPA Rights (California)

California residents have additional rights under CCPA:

• Right to know about personal information collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination