Privacy Policy

1. Data collected

We collect only the information strictly necessary to operate the service, including account data (email, name), usage preferences, and technical data related to feature execution (activity logs, errors, performance metrics).

2. Use of data

Data is used to: provide the service, secure accounts, improve the platform, handle billing when applicable, and comply with our legal obligations.

3. Retention

Data is retained according to defined periods: inactive account up to 24 months after last activity (unless legal obligations apply), technical logs 12 months, billing data 7 years, support tickets 24 months. After that, data is deleted or anonymized, unless a legal obligation requires otherwise.

4. Data sharing

We do not sell your personal data. We may share certain data with processors acting on our behalf (hosting, email delivery, payment, AI providers). These providers are contractually bound to confidentiality and security obligations. Some processing may involve cross-border transfers; when this happens, we implement appropriate safeguards in accordance with applicable law.

5. Security

We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction.

Sensitive data is encrypted, including BYOK API keys, user passwords, and other technical secrets required for the platform to operate. Technical access to this data is strictly limited to authorized personnel under least-privilege principles, only for operations, security, or support purposes. Administrative access is logged. BYOK keys are deleted upon account deletion, subject to technical purge delays and legal obligations.

6. Your rights

You may request access, rectification, deletion, restriction, portability and, where applicable, object to processing of your data, in accordance with applicable regulations. You may also withdraw your consent where processing is based on consent. We generally respond within 30 days, unless complexity or legal requirements require otherwise.

Any request can be sent by email to contact@bytheprompt.com.

7. Contact

For any privacy question or legal request related to personal data, contact the data protection lead / privacy contact point at: contact@bytheprompt.com.