Privacy Policy
How we collect, use, share, and protect your personal data. Last updated June 22, 2026.
Who we are
PromptX (“PromptX”, “we”, “us”) is an independently operated prompt-management service. For any privacy question or to exercise your rights, contact us at contact@promptx.xevos.dev. We act as the data controller for account and usage data, and as a data processor for the prompt content you store on behalf of your own users.
Data we collect
Account data — your name, email address, and profile image, provided through our authentication provider when you sign up.
Content data — the prompts, versions, deployments, teams, and related configuration you create.
Usage & analytics data — pages viewed, features used, and anonymized interaction data, collected only with your consent.
Technical data — IP address, browser/device information, and security and audit logs needed to run the service securely.
Consent records — a log of the cookie choices you make, kept as proof of consent.
How we use your data
To provide and maintain the service; to authenticate you and secure your account; to communicate with you about the service; to understand and improve product usage (with consent); and to comply with legal obligations.
Legal bases (GDPR / UK GDPR)
We rely on performance of a contract, legitimate interests (security and product improvement), consent (analytics cookies and certain communications), and legal obligation where applicable. You can withdraw consent at any time without affecting prior processing.
Service providers & sub-processors
We share data only with providers that help us run the service, under appropriate data-protection terms:
— Authentication (user identity and sign-in)
— Database & application hosting (storage of your account and content)
— Transactional email (account and notification emails)
— Product analytics (EU-hosted usage analytics, consent-based)
— AI processing — for certain features such as evaluations, observability, and insights, relevant content may be processed by leading industry AI providers, solely to deliver the requested output. We do not sell your content.
International transfers
Our analytics data is hosted in the European Union. Some other providers may process data in the United States or other countries. Where data leaves your region, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data retention
We keep account and content data while your account is active. Analytics data is retained for up to 12 months. When you delete your account, we delete your personal data within 30 days, except where we must retain limited information to meet legal obligations. Backups are cycled out within 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent. You can export your data or delete your account from Settings → Your Data & Privacy, or by emailing contact@promptx.xevos.dev. EU/UK users may also lodge a complaint with their data-protection authority.
California privacy (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to correct it. We do not sell or share your personal information for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights. To make a request, email contact@promptx.xevos.dev.
Children
PromptX is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children.
Changes & contact
We may update this policy from time to time; material changes will be reflected by the “last updated” date above. Questions or requests: contact@promptx.xevos.dev.