Privacy Policy

Effective as of March 17, 2026

Deprompt ("Deprompt", "Company", "we", "us", or "our") operates an AI-powered prompt engineering platform that enables users to create, refine, and optimize prompts for use with various AI models and services. This Privacy Policy describes how Deprompt processes personal information that we collect through our digital properties that link to this Privacy Policy, including our website (depromt.com), related applications, and social media pages (collectively, the "Service"), as well as our marketing activities and other activities described in this Privacy Policy.

Deprompt may provide additional or supplemental privacy policies for specific products or services at the time we collect personal information.

NOTICE TO EUROPEAN USERS: Please see the Notice to European Users section below for additional information relevant to individuals located in the European Economic Area (EEA) or United Kingdom (UK).

Information you provide to us

Personal information you may provide through the Service or otherwise includes:

• Contact data, such as your name, email address, billing and mailing addresses, and phone number.
• Profile data, such as the username and password you set to create an Account, biographical details, preferences, and any other information you add to your profile.
• Communications data, including the contents of messages when you contact us through the Service, email, social media, or otherwise.
• Transactional data, such as information relating to your orders, including order numbers, transaction history, and purchased Token Packs or Subscriptions.
• Payment data needed to complete transactions, including payment card information or bank account number. Payment data is collected and stored by our payment processor (e.g., Stripe) and not by Deprompt directly.
• Marketing data, such as your preferences for receiving marketing communications and details about your engagement with them.
• User-uploaded media, such as images, photographs, graphics, and other files that you upload to the Service as inputs or references, along with associated metadata (information about how, when, where, and by whom content was created or modified).
• Prompt and query data, such as text prompts, commands, descriptions, configuration settings, and other content you generate, transmit, or make available through the Service, along with associated metadata.
• Feedback data, such as information regarding your experiences with the Service, including surveys, reviews, and suggestions.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

YOU SHOULD NOT PROVIDE US WITH ANY CONFIDENTIAL, SENSITIVE, UNLICENSED PROPRIETARY, OR BIOMETRIC INFORMATION THROUGH THE SERVICE.

Third-party sources

We may combine personal information we receive from you with information we obtain from other sources, such as:

• Public sources, including government agencies, public records, and social media platforms.
• Service providers that provide services on our behalf or help us operate the Service.
• Third-party authentication services, such as Google, that you use to log into or link to your Account. Our use and disclosure of information received from Google's APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Automatic data collection

We, our service providers, and our business partners may automatically log information about you, your device, and your interactions with the Service, including:

• Device data, such as operating system type and version, browser type, screen resolution, IP address, unique device identifiers, language settings, and general location information (city, region, or country).
• Online activity data, such as pages or screens viewed, time spent on pages, navigation paths, access times, and whether you have opened our emails or clicked links within them.
• Location data, when you authorize the Service to access your device's location.
• Communication interaction data, such as your interactions with our emails, including opens and clicks, which may be tracked through pixel tags or similar technologies.

Cookies and similar technologies

Some of our automatic data collection is facilitated by cookies and similar technologies. We will store a record of your preferences in respect of the use of these technologies in connection with the Service.

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations

• Provide, maintain, and operate the Service;
• Establish and maintain your Account;
• Process your transactions and manage Token Packs and Subscriptions;
• Facilitate the upload, processing, and storage of user-uploaded media and prompt data;
• Communicate with you about the Service, including service announcements, updates, security alerts, and support messages;
• Respond to your requests, questions, and feedback.

Service personalization

• Understand your needs and interests;
• Personalize your experience with the Service;
• Remember your preferences and settings.

Service improvement and analytics

• Analyze usage of the Service to improve functionality and user experience;
• Use prompt data, usage patterns, and feedback to improve the platform and develop new features;
• Understand how visitors navigate and use the Service.

Marketing

We and our service providers may send you direct marketing communications. You may opt out at any time as described in the "Your Choices" section below.

Compliance and protection

• Comply with applicable laws, legal process, and government requests;
• Protect rights, privacy, safety, or property of Company, users, or others;
• Enforce the terms of this Agreement;
• Prevent, detect, and investigate fraud, abuse, or other harmful activity.

Aggregated and de-identified data

We may create aggregated, de-identified, or anonymized data from your personal information. This data cannot be used to identify you and may be used for any lawful business purpose.

General

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements, and to establish or defend legal claims.

Retention factors

To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the information, the risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.

When information is no longer needed

When we no longer require the personal information we have collected, we will delete it, anonymize it, or isolate it from further processing.

We may share your personal information with the following categories of parties:

• Affiliates. Our corporate parent, subsidiaries, and affiliates.
• Service providers. Third parties that provide services on our behalf, including hosting, analytics, customer support, email delivery, and AI processing through Third-Party AI Providers.
• Payment processors. Payment card information is collected and processed by our payment processor (e.g., Stripe) in accordance with its own privacy policy.
• Third-Party AI Providers. To process your prompts and generate outputs, we may transmit your Inputs (including prompt text and reference images) to Third-Party AI Providers. These providers process data in accordance with their own terms and privacy policies.
• Third parties designated by you. We may share information where you have instructed us or consented to do so.
• Professional advisors. Lawyers, auditors, bankers, and insurers as necessary for their professional services.
• Authorities and others. Law enforcement, government authorities, or private parties as required by law or as we believe necessary for compliance and protection purposes.
• Business transferees. In the context of actual or prospective business transactions, such as mergers, acquisitions, or sales of assets.
• Other users and the public. If you choose to make Content publicly available through the Service, it may be visible to other users and the public.

Storage of uploaded images and media

When you upload images, photographs, graphics, or other media files to the Service (whether as reference images, inputs for AI generation, or otherwise), Company stores these files on servers located in the European Union (or other jurisdictions as necessary to operate the Service).

No responsibility for ownership or copyright

Company does not verify, evaluate, or assume any responsibility for the ownership, licensing status, copyright clearance, or legal rights associated with any images or media uploaded by users. By uploading images or media to the Service, you represent and warrant that you possess all necessary rights, licenses, and permissions to use, upload, and process such content, or that the content is not subject to copyright or other restrictions (e.g., it is in the public domain or used under a valid license).

User responsibility

You are solely responsible for ensuring that any images or media you upload to the Service do not infringe the intellectual property rights, privacy rights, or other rights of any third party. Company shall not be liable for any claims, damages, or losses arising from your upload or use of images or media through the Service.

Deletion of uploaded media

You may request deletion of your uploaded images and media by contacting support@depromt.com or through your Account settings (where available). Upon Account termination, Company will delete your uploaded media from active systems. Copies may persist in backups for a limited period as described in our data retention practices.

Access or update your information

You may review and update certain Account information by logging into your Account on the Service.

Opt-out of communications

You may opt out of marketing communications by following the unsubscribe instructions in our emails or by contacting us at support@depromt.com. You may still receive service-related and transactional communications.

Cookies

Most browsers allow you to manage or disable cookies. Please note that disabling cookies may affect the functionality of the Service.

Do not track

We currently do not respond to "Do Not Track" browser signals.

Declining to provide information

If you do not provide information we identify as required, we may not be able to provide certain features of the Service.

Delete your content or close your account

You may request deletion of your Content or closure of your Account by contacting support@depromt.com. Content removed from your Account may persist on active servers for up to 30 days, and in backups for up to 90 days. These periods may be extended for legal purposes.

The Service may contain links to third-party websites, applications, or services. We do not control and are not responsible for these third-party services. We encourage you to review the privacy policies of any third-party services you visit.

We employ technical, organizational, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal information.

Deprompt operates servers in the European Union and plans to incorporate in the United States (Delaware). Your personal information may be transferred to and processed in the United States or other jurisdictions where privacy laws may differ from those of your home jurisdiction. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your personal information during international transfers.

The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe we have collected personal information from a child, please contact us at support@depromt.com. We will take steps to delete such information.

We may modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the effective date and posting the revised version on the Service. We may also notify you by email. Your continued use of the Service after the effective date of any modified Privacy Policy constitutes your acceptance of the revised policy.

General

Applicability

This section applies only to individuals located in the European Economic Area (EEA) or United Kingdom (UK) (collectively, "Europe").

Personal data

References to "personal information" in this Privacy Policy include "personal data" as defined under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR.

Controller

Deprompt is the "controller" of your personal data for the purposes of the GDPR.

Legal bases for processing

We process your personal data on the following legal bases:

• Contractual Necessity. Where processing is necessary to deliver the Service to you or to take pre-contractual steps at your request.
• Legitimate Interests. Where processing is necessary for our legitimate interests (such as operating and improving the Service, ensuring security, and conducting marketing), provided your interests and rights do not override those interests.
• Compliance with Law. Where we need to comply with a legal obligation.
• Consent. Where you have given us specific consent to process your data for a particular purpose.

Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy. When no longer needed, we delete, anonymize, or securely isolate the data.

Your rights (European users)

If you are located in Europe, you may have the following rights under applicable data protection law:

• Access. Request information about how we process your personal data and obtain a copy.
• Correction. Request correction of inaccurate personal data.
• Deletion. Request deletion of your personal data where there is no legitimate reason to continue processing it.
• Portability. Request a machine-readable copy of personal data you have provided to us.
• Restriction. Request restriction of processing of your personal data.
• Objection. Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent. Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@depromt.com. We may request additional information to verify your identity. We aim to respond within one month. If your request is complex, we may extend this period by up to two additional months with notice.

Data processing outside europe

Your personal data may be transferred to and processed in the United States and other countries outside Europe. Where required, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Right to complain

If you are not satisfied with how we handle your personal data, you may lodge a complaint with your local data protection authority:

• EEA: Find your authority at https://edpb.europa.eu/about-edpb/board/members_en
• UK: Contact the ICO at https://ico.org.uk/make-a-complaint/

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@depromt.com

© 2026 Deprompt. All rights reserved.