Privacy Policy

We collect the following categories of information:

Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We do not store your Google password.

Usage Data: We log API requests, tool usage (type of tool used, style selected), and prompt generation history to provide you with prompt history features and to improve our service.

Payment Information: Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details. We only store your Stripe Customer ID and subscription status.

Images: Images you upload are processed in real-time by our AI engine and are immediately discarded after processing. We do not store your images on our servers.

Affiliate Tracking: If you arrive via an affiliate link (?ref=CODE), we store the affiliate code in a cookie for 30 days to attribute a potential conversion.

Cookies: We use essential cookies for authentication sessions and analytics cookies to understand platform usage.

We use collected information to: - Provide, operate, and maintain the PromptShot AI platform - Process your payments and manage your subscription - Save and display your prompt generation history (when logged in) - Send transactional emails (account confirmation, billing receipts) - Detect and prevent abuse, fraud, and violations of our Terms - Improve our AI models and tool quality - Calculate and pay affiliate commissions

We do not sell your personal data. We share your data only with:

Service Providers: - Supabase — Database hosting and authentication - Stripe — Payment processing - Vercel — Application hosting - OpenRouter — AI model routing - Google OAuth — Authentication - Google AdSense — Advertising (see Section 5)

All service providers are contractually obligated to process your data only on our instructions and in accordance with applicable data protection laws.

PromptShot AI displays advertisements served by Google AdSense, an advertising service operated by Google LLC. To deliver these advertisements:

What Google does: - Google, as a third-party vendor, uses cookies (including the DART cookie) to serve ads based on your prior visits to this website and other websites on the internet. - Google may use information about your visits to this and other websites to provide personalized advertisements. - Third-party vendors and ad networks may use cookies to serve ads based on prior visits.

Your choices: - You may opt out of personalized advertising at any time by visiting Google's Ads Settings at https://www.google.com/settings/ads. - You may opt out of third-party vendors' use of cookies for personalized advertising at https://www.aboutads.info. - For users in the European Economic Area (EEA), the United Kingdom, or Switzerland, Google participates in the IAB Transparency & Consent Framework — your consent (or lack thereof) controls whether personalized ads are shown. - Even if you opt out of personalized ads, you will still see advertisements — they will just be non-personalized (contextual).

More information: - Google's advertising privacy practices: https://policies.google.com/technologies/ads - Google's main privacy policy: https://policies.google.com/privacy - How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites

We are not responsible for the content of advertisements or the practices of advertisers. Clicking on an advertisement will direct you to the advertiser's website, governed by their own privacy policy.

- Account data: Retained for as long as your account is active - Prompt history: Retained for 12 months from creation - Payment records: Retained for 7 years (legal requirement) - Uploaded images: Not retained — deleted immediately after processing - Affiliate cookies: Expire after 30 days

Depending on your location, you may have the following rights: - Access: Request a copy of your personal data - Correction: Request correction of inaccurate data - Deletion: Request deletion of your account and associated data - Portability: Request export of your data in a machine-readable format - Opt-out: Unsubscribe from marketing emails at any time

To exercise any of these rights, email us at contact@promptshotai.com.

We use the following cookies: - Session cookies: Required for authentication (NextAuth) - Affiliate cookie (affiliate_ref): Tracks referral attribution for 30 days - Analytics cookies: Anonymous usage analytics to improve our service - Google AdSense cookies (DART, IDE, NID): Used by Google to deliver advertisements. May be personalized unless you opt out via https://www.google.com/settings/ads - IAB TCF (EEA / UK / Switzerland): Stores your advertising consent state when applicable

You can disable cookies in your browser settings; however this may affect your ability to log in. To control advertising cookies specifically, see Section 5 (Advertising) above.

PromptShot AI is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

As a UAE-based company using global cloud providers, your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for all international data transfers.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the new policy.

For any privacy-related questions or requests: - Email: contact@promptshotai.com - Company: NADRA GLOW - FZCO, Dubai, UAE - Website: www.nadraglow.ae