Privacy Policy

Last updated: June 8, 2026

This is a working template. It requires legal review and completion of the data controller details before you rely on it.

This policy explains what personal data Prompt Panel processes, for what purpose, on what legal basis, and what rights you have under the GDPR (EU Regulation 2016/679).

1. Data controller

The controller of your data is [Administrator danych — do uzupełnienia: nazwa, adres, NIP]. For any data protection matters, contact contact@promptpanel.ai.

2. What data we process

Account data: your email address and your password stored as an irreversible hash. We never store your password in plain text.

Content you create: projects, prompts, snippets, and their version history.

Technical data: essential logs and session information needed to run and secure the service.

3. Purposes and legal bases

Providing the service (creating and operating your account, storing content) — Art. 6(1)(b) GDPR (performance of a contract).

Transactional emails (email verification, password reset) — Art. 6(1)(b) GDPR.

Security, abuse prevention, and service maintenance — Art. 6(1)(f) GDPR (legitimate interest).

4. Recipients and processors

Hosting and database: Railway (infrastructure provider).

Transactional email delivery: SendGrid.

These parties process data solely on our behalf under appropriate data processing agreements.

5. Retention

We keep your account data and content for as long as your account exists. After you delete your account, data is removed, subject to short periods arising from backups and legal obligations.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object.

You also have the right to lodge a complaint with your data protection authority (in Poland: PUODO).

To exercise your rights, write to contact@promptpanel.ai.

7. Cookies

We use essential cookies only. See the Cookie Policy for details.