Privacy Policy

Effective 18 September 2026

This policy explains what PromptDistill collects, why, and the choices you have. It covers the web application and its API. In this policy, “we”, “us” and “our” mean the team that provides PromptDistill.

1What we collect

  • Account dataName, email address, optional avatar; Google account basics when you sign in with Google.
  • Content you createBriefs, context, generated prompts, saved prompts, shared posts and any prompt sent to the API.
  • Usage dataGenerations, credits used, timestamps, feature usage and error diagnostics.
  • Payment metadataTransaction identifiers and status. Card details are handled only by Gumroad, we don’t see.

2How we use it

We process data to run the Service, and specifically to:

  • generate, store, refine and share your prompts;
  • authenticate you and keep your session secure;
  • apply fair use limits and prevent abuse;
  • diagnose problems, fix bugs and improve quality;
  • contact you about the Service and important changes.

3Artificial intelligence Processing

Your brief and context are transmitted to this process and the result is returned to your account.

Do not submit sensitive personal data, secrets or third party confidential information.

4Cookies and local storage

We use your browser storage to keep you signed in and to remember your preferences. We do not use advertising or analytics cookies.

You can clear this data in your browser at any time, which signs you out.

5Sharing

We do not sell your data. We share data with the processors that run the Service, and where the law requires it:

  • Google sign in.
  • Gumroad.
  • Cloud Run.
  • Cloud SQL.
  • Cloud Storage.
  • Cloud Build and Artifact Registry.

7Your choices

You stay in control of your data:

  • update your name, email and photo in Settings;
  • change your password or disconnect Google sign in;
  • clear local preferences in your browser;
  • export or delete your account by writing to promptdistill@gmail.com.
  • Disconnecting Google sign in requires you to do it manually in your google account management, you can also contact us for any information regarding your data, however, your data will be deleted completely after 30 days and you will lose any unused credits with no ability to refund.

8Security

Passwords are stored hashed, sessions use signed tokens, and traffic is encrypted in transit. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9Changes and consent

We may update this policy. Continued use of the Service means you accept the policy as amended.

10Contact

Questions about privacy polices: promptdistill@gmail.com.