Privacy Policy

We collect only the minimum personal data required to operate the Promptly Digital marketplace. This includes your account name, email address, password cryptographic hash, and creator payout routing information.

We do not collect or store unencrypted financial payment card numbers. All billing is processed securely via PCI-DSS compliant third-party payment gateways.

When you browse prompt galleries, non-identifying telemetry (such as browser type, general geolocation, and performance diagnostics) may be collected to ensure sub-50ms edge caching.

Your information is used strictly to fulfill prompt recipe unlock requests, deliver encrypted DRM payloads, maintain user portfolios, and compute 85% creator royalty disbursements.

We never sell, rent, or trade your personal data or search histories to third-party data brokers, advertising networks, or unauthorized AI training aggregators.

We may use aggregate, anonymized metrics to benchmark prompt model popularity (e.g., Midjourney vs Flux.1 trends) across our ecosystem.

To defend creator intellect, prompt parameter blueprints are cryptographically tokenized and protected against automated web crawlers and scraping bots.

Decryption events are logged to verify legitimate human unlocks and prevent mass-scraping abuses. This telemetry is stored in secure serverless database clusters with restricted access.

All network traffic between client browsers, Next.js edge handlers, and Neon PostgreSQL databases is strictly encrypted via TLS 1.3 encryption.

Promptly Digital utilizes essential HTTP-only cookies and browser LocalStorage to maintain your authenticated login session, active theme preference (Dark/Light mode), and clipboard caching.

We do not utilize invasive cross-site tracking cookies or third-party behavioral analytics trackers.

You can control or clear cookie storage via your browser settings at any time, though session authentication may require re-login.

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you maintain full sovereign control over your personal data.

You have the right to request a complete machine-readable export of all data associated with your profile, transaction logs, and authored prompts.

You may request permanent account deletion and data scrubbing at any time by contacting our privacy compliance desk.