Privacy Policy

Last updated: April 18, 2026 · Effective immediately

1. Introduction

This Privacy Policy describes how PromptCollege ("PromptCollege", "we", "us", or "our"), a company organized under the laws of the United States, collects, uses, discloses, and protects personal information when you visit prompt.college, create an account, subscribe, or otherwise use our website, prompt library, AI tools, generators, and related services (collectively, the "Service"). By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

We collect the following categories of personal information:

  • Account information. When you sign up, we collect your email address, hashed password, and (if you sign in with a third-party provider such as Google) the identifiers and basic profile data that provider returns.
  • Billing information. When you subscribe, our payment processor (Stripe) collects your payment method, billing address, and transaction details. We receive only limited data such as the last four digits of your card, card brand, country, subscription status, and customer ID — we never see or store full card numbers.
  • User content. Prompts you customize, text you submit to our generators or chat tools, and any other content you create or send through the Service.
  • Usage data. Pages visited, features used, prompts viewed or copied, clicks, referring URLs, search queries within the Service, and timestamps.
  • Device and log data. IP address, browser type and version, operating system, device identifiers, language, and crash or error logs.
  • Cookies and similar technologies. See Section 7 below.
  • Communications. Information you provide when you contact support or respond to surveys.

We do not knowingly collect Social Security numbers, government IDs, precise geolocation, biometric data, or information about children under 13.

3. How We Use Information

We use personal information to:

  • Provide, operate, and maintain the Service;
  • Authenticate users, manage accounts, and process subscriptions and payments;
  • Generate AI outputs in response to your prompts, which may involve sending your inputs to third-party AI model providers;
  • Personalize and improve the Service, including developing new features and fixing bugs;
  • Communicate with you about the Service, security alerts, and administrative messages;
  • Send marketing emails (only where permitted, and you can unsubscribe at any time);
  • Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
  • Comply with legal obligations and enforce our rights.

4. How We Share Information

We do not sell your personal information for money. We share information only as described below:

  • Service providers. Vendors who process data on our behalf under contract, including hosting and database infrastructure (Supabase), payment processing (Stripe), AI model providers (e.g., Google, OpenAI), email delivery, and analytics. These providers are permitted to use your data only to perform services for us.
  • Legal and safety. We may disclose information when required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.
  • With your consent. We may share information for any other purpose with your consent.

5. AI Inputs and Outputs

When you use our generators or chat tools, the prompts and content you submit ("AI Inputs") are sent to third-party AI model providers to produce AI outputs. Those providers process AI Inputs in accordance with their own privacy and data-use policies. We do not use your AI Inputs to train third-party foundation models, and we instruct our providers not to do so where they offer that option, but we cannot guarantee provider behavior. Do not submit personal information about others, confidential business data, health information, financial account numbers, or other sensitive data into AI Inputs.

6. Legal Bases (where applicable)

Where required by law (e.g., for users outside the U.S.), we rely on the following legal bases to process personal information: performance of a contract (to provide the Service), our legitimate interests (to operate, secure, and improve the Service and prevent fraud), your consent (for marketing or optional features), and compliance with legal obligations.

7. Cookies and Tracking

We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the Service, measure usage, and improve performance. You can control cookies through your browser settings; disabling cookies may break parts of the Service (for example, you may not be able to stay signed in). We do not currently respond to "Do Not Track" browser signals because no consistent industry standard exists.

8. Data Retention

We retain personal information for as long as your account is active, as needed to provide the Service, and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. Backups may persist for a limited additional period in the ordinary course of operations.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, hashed passwords, and role-based access controls. However, no system is 100% secure. You use the Service at your own risk and are responsible for keeping your account credentials confidential.

10. Your Privacy Rights

Subject to applicable law, you may have rights to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your account and personal information;
  • Opt out of marketing emails (use the unsubscribe link in any message);
  • Restrict or object to certain processing;
  • Request a portable copy of certain data;
  • Withdraw consent where processing is based on consent.

To exercise these rights, email privacy@prompt.college. We may need to verify your identity before responding. We will not discriminate against you for exercising any privacy right.

11. California Privacy Notice (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the rights described in Section 10, plus the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it; the right to correct inaccurate personal information; the right to delete personal information (subject to exceptions); and the right to limit use and disclosure of "sensitive personal information."

"Sale" and "sharing". We do not "sell" personal information for money and do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

You may designate an authorized agent to make a request on your behalf. We will require written authorization and may still verify your identity. You may also appeal a denied request by replying to our response email.

12. Other U.S. State Rights

Residents of other U.S. states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale of personal data, and certain profiling. We honor verifiable requests submitted to privacy@prompt.college.

13. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information, contact us and we will delete it.

14. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have different data-protection laws than your jurisdiction.

15. Third-Party Links

The Service may contain links to third-party sites or services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing any information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by posting a notice in the Service or by email. Your continued use of the Service after the effective date constitutes acceptance.

17. Contact

Questions, requests, or complaints about this Privacy Policy or our handling of your personal information? Contact us at privacy@prompt.college.

← Back to home