Privacy Policy

PromptDeploy ("we", "us", "our") operates the promptdeploy.com website and service. This policy explains what data we collect, how we use it, and your rights.

1. What we collect

Account information

When you sign up we collect your name, email address, and (if you sign in with GitHub) your GitHub username and avatar. If you're invited to an organisation, we store your membership role and the invitation details.

Billing information

Payments are processed by Stripe. We do not store your card number or bank details. We retain Stripe customer and subscription identifiers so we can manage your plan.

Usage data

We collect standard server logs (IP address, browser type, pages visited) and may use privacy-respecting analytics to understand how the service is used. We do not sell or share this data with advertisers.

GitHub integration data

When you install the PromptDeploy GitHub App, we receive the installation ID, the repositories you grant access to, and repository metadata (name, owner, default branch). We use the GitHub API to read and write prompt files on your behalf.

2. What we do NOT collect

We do not store your prompt content. When an editor opens a prompt file, the content is fetched from GitHub via our server and displayed in their browser. When they save, it's written back to GitHub via the API. Prompt text passes through our server to broker these calls, but is never persisted, cached, or logged.

We do not access files beyond those explicitly configured as editable prompts by your team's developers.

3. How we use your data

• To provide and operate the service
• To manage your account, organisation, and billing
• To send transactional emails (invitations, password resets, billing receipts)
• To monitor and improve service reliability and security
• To respond to support requests

We will not send you marketing emails unless you explicitly opt in.

4. Data sharing

We do not sell your personal data. We share data only with:

• Stripe: for payment processing
• GitHub: to read/write prompt files via the GitHub App
• Infrastructure providers: for hosting, email delivery, and error monitoring (e.g. our hosting provider, transactional email service)

All third-party processors are bound by data processing agreements and handle your data in accordance with their own privacy policies.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. billing records).

Server logs are retained for up to 90 days for security and debugging purposes.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), secure authentication, and regular security reviews. GitHub integration uses the official GitHub App framework. We never ask for or store personal access tokens.

7. Cookies

We use essential cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising or tracking cookies.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email privacy@promptdeploy.com.

9. International transfers

Our servers and third-party processors may be located outside your country of residence. Where we transfer data internationally, we rely on standard contractual clauses or equivalent safeguards to protect your data.

10. Children

PromptDeploy is not intended for use by anyone under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy, email privacy@promptdeploy.com.