Stop rewriting the same
AI prompts over and over

Effective Date: June 7, 2025

1. Introduction

PromptFlow ("the extension," "we," "us," or "our") is an AI Prompt Manager Chrome extension. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

2. Information We Collect

We collect the minimum information necessary to provide and improve PromptFlow:

a) Locally Stored Data

All your prompts, folders, and extension preferences are stored locally on your device using Chrome's built-in storage API (chrome.storage.local). This data never leaves your device and is never transmitted to our servers or any third party. We have no access to this data. If you uninstall the extension, this data is automatically deleted.

b) Personal Information (Pro Upgrade Only)

If you purchase a PromptFlow Pro license, we collect your email address to process the transaction and manage your license. This is the only personal information we collect.

c) Anonymous Usage Analytics

We collect anonymous, non-personally-identifiable usage data ("funnel events") to understand how features are used and improve the extension. This data includes actions taken within the extension (such as feature usage counts) and does not include any personal information, prompt content, or browsing activity.

3. Information We Do Not Collect

We want to be transparent about what we do not do:

• We do not collect or access your browsing history
• We do not read, access, or transmit your prompt content
• We do not use cookies or tracking technologies
• We do not track you across websites
• We do not sell, trade, or rent your personal information
• We do not use your data for advertising

4. How We Use Your Information

• Email address: To process your Pro license purchase and manage your license (validation, activation, deactivation)
• Anonymous analytics: To understand feature usage patterns and improve the extension

5. Third-Party Services

We use the following third-party services:

Stripe, Inc. — We use Stripe to process payments. When you purchase a Pro license, your email address is sent to Stripe. Card details (card number, expiration, CVC) are collected directly by Stripe through their secure checkout page and never touch our servers. Stripe may collect additional data for fraud prevention, including your IP address, browser information, and device characteristics. Stripe is a PCI Level 1 certified payment processor. See Stripe's Privacy Policy.

Our backend API is hosted by Railway. Data transmitted to our API (license validation requests, anonymous analytics) is sent over HTTPS encryption.

6. Extension Permissions

We request only the minimum permissions necessary for PromptFlow to function:

• storage: Stores your prompts, folders, and preferences locally on your device
• sidePanel: Provides the main extension interface for managing your prompts
• contextMenus: Enables right-click access to your prompts for quick insertion
• clipboardWrite: Allows copying prompts to your clipboard
• activeTab: Used solely to interact with the current tab when you choose to paste a prompt into an AI chat interface
• scripting: Required to auto-paste prompts into AI chat input fields (such as ChatGPT, Claude, Gemini) on the active tab when you select a prompt

7. Data Security

All data transmitted between the extension and our backend API is encrypted using HTTPS/TLS. All payment processing is handled by Stripe's PCI-compliant infrastructure — card data never touches our servers. Your prompt and folder data is stored locally on your device and is not transmitted anywhere.

8. Data Retention

• Local data (prompts, folders, settings): Persists until you delete it or uninstall the extension. We have no access to this data.
• Email and transaction records: Retained as required by tax and accounting regulations (typically 7 years).
• Anonymous analytics: Retained in aggregate form. No personally identifiable information is stored.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request deletion of your personal data
• Request portability of your data
• Opt out of anonymous analytics (contact us)

To exercise any of these rights, contact us at the email address below.

10. GDPR (European Users)

If you are located in the European Economic Area:

• Legal basis: Contract performance (processing payment to fulfill your license purchase); Legitimate interest (anonymous analytics to improve the extension); Legal obligation (retaining transaction records for tax compliance)
• Data controller: PromptFlow (the developer)
• International transfers: Our API is hosted in the United States. Data is transferred under Standard Contractual Clauses and the EU-US Data Privacy Framework.
• You have the right to lodge a complaint with your local data protection supervisory authority.

11. CCPA (California Residents)

If you are a California resident:

• Categories of personal information collected: Identifiers (email address), commercial information (purchase history)
• We do not sell your personal information.
• You have the right to know, request deletion, and opt out. We do not discriminate against users who exercise their privacy rights.

12. Children's Privacy

PromptFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

13. Chrome Web Store Compliance

PromptFlow's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Effective Date" at the top. Continued use of the extension after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: [email protected]