Privacy Policy
Last updated: July 15, 2026
1. Who we are
This Privacy Policy explains how Paulo Mendes ("we", "us") collects and uses personal data when you use Prompt Builder (the "Service"). We are the data controller for the personal data described here. For any privacy request, contact support@promptbuilderlabs.com.
2. What we collect
- Account data — your email address and, for Google sign-in, your basic Google profile, provided through Firebase Authentication. We do not publish that identity automatically.
- Subscription status — whether your account is Pro, your plan, and its expiry date, so we can unlock features.
- Your configuration ("config") — if you explicitly enable cloud sync (a Pro feature), your button/macro library and folder layout are stored so they follow you between devices.
- Community data — the public profile identity, posts, comments, workflows, and packs you choose to publish, plus interactions and reports you submit.
- Limited technical data — basic logs needed to operate and secure the Service.
Your private workspace stays in your browser or on your device. Even with Pro cloud sync, we do not sync positive or negative prompt text, API keys, or local generator URLs. Image generation runs directly against the provider or server you choose and does not pass through us; images reach our servers only when you choose to publish them publicly.
3. Payment data
Purchases are handled by Stripe and/or Lemon Squeezy. They collect and process your payment details under their own privacy policies; we receive only confirmation of your purchase and subscription status. We never see or store your full card number.
4. How we use your data
- to provide the Service and your account;
- to sync your configuration across your devices (Pro);
- to process purchases and unlock Pro features;
- to operate the community marketplace and respond to reports;
- to secure the Service, prevent abuse, and comply with legal obligations.
5. Legal bases (GDPR)
Where the GDPR applies, we rely on: contract (to provide the Service and your account), legitimate interests (to secure and improve the Service), legal obligation (e.g. tax/accounting via our payment partners), and consent where specifically requested.
6. Service providers we share data with
- Google Firebase — authentication and the database/storage that hold your account, opt-in synced config, and community content.
- Stripe, Lemon Squeezy — payment processing (Lemon Squeezy as merchant of record).
- GitHub — hosts the downloadable desktop installers.
7. International transfers
Our providers may process data outside your country, including in the United States. Where required, such transfers are covered by appropriate safeguards (such as the EU Standard Contractual Clauses) operated by those providers.
8. Data retention
We keep account and opt-in configuration data while your account is active. Account deletion removes private cloud data and lets you delete or anonymise public contributions. Payment providers may retain transaction records where required by law.
9. Your rights
Depending on where you live (e.g. under the GDPR or the CCPA), you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. We do not sell your personal data.
From Account settings, you can download your account data together with the local workspace on that device, disable and erase cloud sync, erase local app data, or delete your account. You may also email support@promptbuilderlabs.com. You have the right to complain to your local data-protection authority.
10. Cookies & local storage
We use browser local storage to remember preferences, keep you signed in, and store your analytics choice. If you explicitly allow anonymous product analytics, Google Analytics measures page and feature usage; we disable advertising storage and never include prompt text, images, API keys, local endpoints, or private content. You can refuse without losing any product functionality.
11. Children
The Service is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
12. Security
We use industry-standard measures provided by our infrastructure partners to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will update the date above and, for material changes, take reasonable steps to notify you.
14. Contact
For any privacy question or request, email support@promptbuilderlabs.com.
Help improve Prompt Builder
Allow anonymous usage analytics so we can see which pages and product actions help. We never send prompt text, images, keys, or private content.