Privacy Policy

Last updated: March 31, 2026

This Privacy Policy explains how PromptBucket (“PromptBucket,” “we,” “our,” or “us”) collects, uses, discloses, and otherwise processes personal information when you access or use our website, waitlist, web application, browser extension, and related products, services, content, and features (collectively, the “Service”).

PromptBucket is operated by an individual based in California, United States. This Privacy Policy is available at /privacy-policy.

By accessing or using the Service, you acknowledge the practices described in this Privacy Policy.

This document is provided in English. If translated versions are provided, the English version shall prevail in the event of any inconsistency or conflict.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect through the Service, including when you visit our website, join our waitlist, communicate with us, or use product features that may become available over time.

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with the Service. Those third parties have their own privacy policies and practices.

2. Information We Collect

We may collect the following categories of information, depending on how you interact with the Service.

2.1 Information You Provide to Us

We may collect information you provide directly, such as:

• Your email address when you join the waitlist;
• Any additional information you submit through waitlist forms, surveys, or questionnaires, such as prompt usage details, workflow preferences, or product feedback;
• Information you provide when contacting us;
• Information you provide when creating an account or profile, if account features become available;
• Content you submit, store, create, upload, or share through the Service, such as prompts, project data, tags, feedback, messages, or collaboration-related information, if such features become available.

We may use third-party form and workflow tools, such as Tally, to collect and process some submissions.

2.2 Information We Collect Automatically

When you access or use the Service, we may automatically collect certain technical and usage information, such as:

• IP address;
• Browser type and version;
• Device type and operating system;
• Referring URL;
• Pages viewed and features used;
• Dates and times of access;
• General interaction and usage information.

This information may be collected using cookies, analytics tools, logs, pixels, local storage, or similar technologies.

2.3 Information from Third Parties

We may receive information from third-party services that help us operate the Service, such as analytics providers, infrastructure providers, authentication providers, form tools, payment processors, AI service providers, or browser platform providers.

3. Cookies and Similar Technologies

We may use cookies and similar technologies to operate, secure, analyze, and improve the Service.

These technologies may help us:

• Remember user preferences;
• Understand website traffic and product usage;
• Measure marketing or site performance;
• Maintain security and reliability.

We currently use Vercel Analytics. We may also use additional analytics providers such as PostHog in the future.

You can usually control cookies through your browser settings. However, disabling certain cookies or similar technologies may affect the functionality of the Service.

4. How We Use Information

We may use personal information for the following purposes:

• To operate, maintain, secure, and improve the Service;
• To manage the waitlist and related communications;
• To send launch notices, product updates, onboarding messages, and other service-related communications;
• To respond to inquiries, support requests, and feedback;
• To understand user needs, preferences, and product usage;
• To personalize and improve the user experience;
• To detect, investigate, prevent, or address fraud, abuse, security issues, or technical problems;
• To comply with legal obligations and enforce our terms, policies, and rights;
• To develop, test, and improve current and future product features.

We do not sell your personal information.

5. AI Processing

The Service may include AI-powered features now or in the future. To provide these features, we may send user-submitted inputs, prompts, instructions, or related content to third-party AI service providers for processing.

If you use AI-related features:

• Your inputs and related content may be processed by those providers as needed to deliver the requested functionality;
• Those providers may have their own terms, privacy policies, and data handling practices;
• You should avoid submitting sensitive personal information, confidential information, or other highly sensitive data into AI features unless you are comfortable with the associated risks, and we expressly indicate that such use is supported.

Where appropriate, we may also use service providers to help us improve AI-related functionality in an aggregated and/or de-identified form.

6. How We Share Information

We may share personal information in the following circumstances:

6.1 Service Providers

We may share information with vendors, contractors, and service providers that perform services on our behalf, such as:

• Hosting and infrastructure providers;
• Form and workflow providers;
• Analytics providers;
• Authentication providers;
• Email and communications providers;
• Payment providers, if paid features become available;
• AI service providers;
• Customer support or operations tools.

These parties are authorized to process information only as reasonably necessary to provide services to us or on our behalf.

6.2 Legal Compliance and Protection

We may disclose information if we believe doing so is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or governmental request;
• Enforce our Terms of Service or other agreements;
• Detect, investigate, or prevent fraud, abuse, security incidents, or illegal activity;
• Protect the rights, property, or safety of PromptBucket, our users, or others.

6.3 Business Transfers

We may disclose or transfer information as part of an actual or proposed merger, acquisition, financing, asset sale, corporate reorganization, bankruptcy, or similar transaction.

6.4 With Your Direction or Consent

We may share information with third parties when you ask us to do so, direct us to do so, or otherwise consent.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide and operate the Service;
• Manage the waitlist and communications;
• Maintain business and legal records;
• Resolve disputes;
• Enforce our agreements;
• Comply with legal obligations;
• Protect against fraud, abuse, and security incidents.

For example, we may retain your waitlist email address until you unsubscribe, request deletion, or until we determine it is no longer needed for the purposes described in this Privacy Policy, subject to any legal or operational need to retain certain information for a longer period.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. Our infrastructure relies on reputable third-party providers, including Vercel (hosting and deployment) and Supabase (database and backend services). We may also use additional security and reliability services such as Cloudflare in the future.

However, no method of transmission over the internet or method of electronic storage is completely secure. As a result, we cannot guarantee absolute security.

9. International Data Transfers

We are based in the United States, and personal information may be processed, stored, or accessed in the United States or other jurisdictions where our service providers operate.

If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in jurisdictions that may not provide the same level of data protection as your home jurisdiction.

10. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the right to:

• Access personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Object to or request restriction of certain processing;
• Withdraw consent where processing is based on consent;
• Request portability of certain data, where applicable.

To exercise any applicable privacy rights, please contact us at: legal@promptbucket.app

We may need to verify your identity before responding to certain requests. We may also deny or limit requests where permitted by law.

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• The right to know what personal information we collect, use, disclose, or sell;
• The right to delete personal information we hold about you, subject to certain exceptions;
• The right to correct inaccurate personal information;
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information as described in this Privacy Policy);
• The right not to be discriminated against for exercising your privacy rights.

To submit a California privacy rights request, please contact us at legal@promptbucket.app.

Note: Some CCPA/CPRA obligations apply only to businesses that meet certain revenue, data volume, or data purchasing thresholds. PromptBucket is a small, individually operated service and may not be subject to all such obligations. However, we are committed to respecting your privacy and will respond to requests in good faith.

11. Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal information, such as the European Economic Area or the United Kingdom, our legal bases may include:

• Your consent;
• Performance of a contract or steps taken at your request before entering into a contract;
• Our legitimate interests, such as operating, securing, improving, and understanding the Service;
• Compliance with legal obligations.

12. Marketing Communications

If you join our waitlist or otherwise opt in to receive updates, we may send you product updates, launch notifications, and related communications.

You can unsubscribe from non-essential marketing emails at any time by using the unsubscribe link in the email or by contacting us.

Even if you opt out of marketing messages, we may still send service-related, legal, security, or administrative communications where necessary.

13. Children's Privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. By using the Service, you represent that you are at least 18 years of age.

If you believe a child under 18 has provided personal information to us, please contact us so we can take appropriate steps.

14. Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is no universally accepted standard for how to respond to Do Not Track signals, we do not currently respond to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make changes, we will update the “Last updated” date at the top of this Privacy Policy and, where required by law, provide additional notice or obtain consent.

Your continued use of the Service after the effective date of the updated Privacy Policy is subject to the revised policy.

16. Contact

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: legal@promptbucket.app