Privacy Policy

1. Who we are

PromptFlux is operated by Jingmao Wang, an individual developer ("PromptFlux", "we", "us", or "our"). We are the controller of personal information collected through the service, except where a third-party provider processes information under its own terms.

For privacy questions or requests, contact [email protected].

2. Information we collect

We collect only the information needed to operate the current service:

• Account information: your name, email address, password, account identifier, and account timestamps when you register.
• Authentication information: a one-way password hash and a signed session cookie. We do not store your password in readable form.
• Prompt content: the requests, clarification answers, settings, and other text you choose to enter into the Home workspace.
• Output and history information: generated prompts, analysis, and optimization results that are stored in your account so you can revisit them across signed-in devices.
• Technical information: information that may be provided by your browser, hosting provider, or security systems, such as IP address, device/browser type, timestamps, and error logs. The exact fields depend on our infrastructure provider.

3. How we use information

We use information to provide, maintain, and improve PromptFlux, including to:

• create and manage your account;
• authenticate you and keep Home and History available only to signed-in users;
• receive your prompt and clarification answers, run the requested optimization, and return the result;
• save authentication and security records, detect abuse, troubleshoot failures, and protect the service;
• respond to support, privacy, and account requests; and
• comply with applicable law and enforce our Terms of Service.

4. AI processing and model providers

When you use optimization, your prompt and any clarification answers are sent from the PromptFlux server to the model provider configured for the service. The current integration supports OpenAI and DeepSeek. The selected provider may process the content in accordance with its own privacy policy and service terms.

Do not enter passwords, payment-card information, government identifiers, health information, trade secrets, or other sensitive personal information into a prompt unless you have a lawful reason and are comfortable sending it to the configured model provider. Review the provider terms and retention settings before using confidential material.

5. Legal bases for processing

Where data-protection law requires a legal basis, we generally rely on performance of our contract with you to create your account and provide the service; our legitimate interests in security, reliability, and service improvement; your consent where we ask for it; and legal obligations where processing is required by law. You may withdraw consent where consent is the basis, without affecting processing that occurred before withdrawal.

6. Cookies and browser storage

PromptFlux uses a signed, HttpOnly session cookie to keep you signed in. It is set with SameSite protection and, in production, Secure transport. The session cookie is intended to expire after approximately 30 days or sooner when you sign out.

Optimization history is stored in your account database and is available on signed-in devices. The browser may temporarily cache the page, but that cache is not the source of truth. The current application does not use advertising cookies or third-party analytics cookies.

7. How we share information

We may share information with the following categories of recipients:

• Infrastructure and hosting providers that run the website, database, logs, and security systems.
• The configured AI model provider, when you submit a prompt for optimization.
• Professional advisers, authorities, or other parties when required by law, necessary to protect rights and safety, or involved in a lawful corporate transaction.
• Other recipients only at your direction or with your consent.

8. International transfers

PromptFlux and our providers may process information in countries other than the country where you live. Those countries may have different data-protection rules. Where required, we will use an appropriate transfer mechanism and contractual safeguards. You can contact us to ask for more information about applicable safeguards.

9. Retention and deletion

We keep account information and optimization history while your account is active and for as long as reasonably necessary for security, legal, dispute-resolution, and record-keeping purposes. We keep password hashes rather than readable passwords. Prompts sent to an AI provider may be retained according to that provider's terms and settings. Operational logs are retained according to our infrastructure and security needs.

You can request account deletion or ask us to delete personal information by contacting [email protected]. We may retain limited information where required by law or reasonably necessary to prevent fraud, enforce agreements, or resolve disputes.

10. Security

We use reasonable safeguards appropriate to the service, including password hashing with scrypt, signed HttpOnly sessions, access controls, and encrypted transport where supported by the deployment. No method of transmission, storage, or security control is completely secure, so we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information; object to certain processing; withdraw consent; and complain to a data-protection authority. To make a request, contact [email protected]. We may need to verify your identity and will respond within the period required by applicable law.

If you are a California resident and applicable law covers our processing, you may also have rights to know, correct, delete, opt out of sale or sharing, and receive equal service. PromptFlux does not currently sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising a privacy right.

12. Children

PromptFlux is not directed to children under 13, or the higher minimum age required in your jurisdiction. We do not knowingly collect personal information from children below that age. If you believe a child has provided information, contact [email protected] so we can review and delete it where appropriate.

13. Changes to this policy

We may update this Privacy Policy when the service, law, or data practices change. We will post the revised version on this page and update the date above. If a change is material, we will provide additional notice where required.