Privacy Policy

Effective date: March 30, 2026

1. Who We Are

PromptForge is operated by ECWE Ventures LLC ("we," "us," or "our"). For privacy inquiries, contact us at hello@promptforge.dev.

This Privacy Policy applies to information collected through promptforge.dev and all associated services ("Service").

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, and password when you create an account.
• Payment information: Billing details (name, address, card type, last 4 digits) are collected by our payment processor, Stripe. We do not store full card numbers on our servers.
• User content: Prompts, workflows, and templates you create or save within the platform.
• Communications: Messages you send us via email or support channels.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, prompts run, session duration, and interaction patterns within the Service.
• Device and browser data: IP address, browser type and version, operating system, device type, and referring URL.
• Cookies and similar technologies: We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns (see Section 5).
• Log data: Server logs capturing requests, errors, and performance metrics for operational purposes.

2.3 Information from Third Parties

If you connect third-party accounts or services (e.g., OAuth sign-in), we may receive limited profile information such as your name and email address as permitted by those services.

3. How We Use Your Information

Purpose	Data Used	Legal Basis (GDPR)
Provide and operate the Service	Account info, user content, usage data	Contract performance
Process payments and manage subscriptions	Email, billing info via Stripe	Contract performance
Send transactional emails (receipts, password resets, service notices)	Email address	Contract performance
Send product updates and marketing (with consent)	Email address	Consent / Legitimate interest
Improve and develop the Service	Usage data, aggregated analytics	Legitimate interest
Ensure security and prevent fraud	IP address, usage patterns, log data	Legitimate interest
Comply with legal obligations	As required by law	Legal obligation

4. We Do Not Sell Your Data

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. This applies to all users, including California residents under the CCPA.

5. Third-Party Service Providers

We share data with trusted third-party providers only as necessary to operate the Service:

• Stripe — Payment processing. Stripe handles all payment card data under its own Privacy Policy and PCI DSS compliance. We share your email and billing address with Stripe to process transactions.
• Cloudflare — Infrastructure, DNS, and security (DDoS protection, CDN). Cloudflare processes request-level data including IP addresses under its Privacy Policy.
• Email delivery providers — For transactional and marketing emails. We share your email address and name with our email provider.
• Hosting and cloud infrastructure — Servers and storage providers process data on our behalf under data processing agreements.

We do not allow these providers to use your data for their own purposes beyond providing services to us.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained for the duration of your subscription and up to 12 months after cancellation, unless you request deletion sooner.
• User content (prompts/workflows): Retained while your account is active. You may delete content at any time. Upon account deletion, content is purged within 30 days.
• Billing records: Retained for 7 years to comply with tax and accounting requirements.
• Log data: Retained for up to 90 days for security and operational purposes.

7. Cookies

We use cookies and similar tracking technologies to operate the Service:

• Essential cookies: Required for authentication, session management, and security. Cannot be disabled without breaking the Service.
• Analytics cookies: Used to understand how users interact with the platform in aggregate. You may opt out by adjusting your browser settings or using a browser extension that blocks tracking.

We do not use advertising or cross-site tracking cookies.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encrypted storage for sensitive fields, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a structured, machine-readable format.
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in emails or by contacting us.

European Users (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR including the right to object to processing, restrict processing, and lodge a complaint with your local supervisory authority. Our legal bases for processing are described in Section 3.

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and disclose, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at hello@promptforge.dev. We will not discriminate against you for exercising these rights.

To exercise any of your rights, contact us at hello@promptforge.dev. We will respond within 30 days.

10. Children's Privacy

PromptForge is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected data from a minor, contact us at hello@promptforge.dev.

11. International Data Transfers

ECWE Ventures LLC is based in the United States. If you are accessing the Service from outside the US, your data may be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Service, you consent to this transfer. For EEA users, we rely on appropriate safeguards including Standard Contractual Clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice within the Service at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy questions, requests, or concerns, contact us at:
ECWE Ventures LLC — PromptForge
hello@promptforge.dev

---

This Privacy Policy is effective as of March 30, 2026.