Privacy

Who is responsible

The data controller for prmpt.bio is:

MOONQUEST di Gazzoni Matteo, a sole proprietorship Quartiere XXV Aprile 17, 36061 Bassano del Grappa (VI), Italy VAT number IT04626340246 REA VI-418063 Support support@prmpt.bio

What we hold about you

Signing in with Google gives us the identity Google asserts and your verified email; we keep those two. The rest you give us as you use the platform: the profile you fill in (display name, bio, link, socials, avatar, banner, affiliates), the pages you write, the assets in your Library (an upload's master keeps its file metadata privately, and every derivative strips it), your runs and their outputs, your comments, follows, likes, saves, blocks, and reports, every credit and every posting in the ledger, and the payout details you give at your first cash-out: legal name, country, rail, and the rail's account email. From a purchase we keep the payment reference, the billing country, and the price paid, never card data. The servers keep logs and error reports carrying your address and browser.

Why, and on what basis

To provide the platform you signed up for, which is the performance of our contract. To keep the tax and accounting records Italian law requires, which is a legal obligation. To keep the platform secure, to prevent abuse, to moderate what is reported, and to find and fix errors, which is our legitimate interest. Nothing rests on consent: there is no marketing, and no optional processing to consent to.

Who processes it for us

Google, for sign-in. Stripe, for payments: the checkout collects your card or the details of the payment method you choose, and your billing address, and we never see them. Runware, for the models a run calls: it receives the prompt and the files a step binds. OpenRouter and Google, for the safety check: every image and video uploaded or generated here is sent through OpenRouter to Google's Gemini to be read, under terms that keep none of it, and is processed in the United States or elsewhere outside the EU. Fly.io, for hosting and its logs. Tigris, for storage: public derivatives serve from cdn.prmpt.media, everything else stays private. Amazon Web Services, for delivering email. Sentry, for error reports. Our bank or payment provider, for payouts, from the payout details you gave. Some of these are in the United States, and the safety check is processed outside the EU; those transfers rest on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Cookies

The platform sets one cookie of its own, the session cookie that keeps you signed in, and reads nothing else. It runs no analytics and no tracker, and it shows no banner because it needs none. Views are counted without identifying you: an opening counts once a day by a key that never outlives the day.

Google's sign-in prompt sets one cookie on this site, g_state, which holds only whether you dismissed the prompt. It is Google's technical cookie, and this site never reads it. How Google uses cookies

How long

Your account lives until you delete it, which takes effect 14 days after you ask. Deletion erases the person and never the ledger: your email, name, bio, link, socials, avatar, banner, affiliates, payout details, and the identity Google asserted go; the money records stay for the ten years tax law requires, sold work stays readable to its buyers, an upload a buyer's entitlement still reaches stays under the platform's ownership, and every tombstone wears no name. The safety check keeps a fingerprint of every file it has read and what it found there, never the file and never who brought it, so the same file is read again only when an earlier answer could not be read or when the check itself changes; that record outlives the file and the account. A run's output the safety check keeps out is never stored here: it stays at Runware for the 7 days Runware keeps every output, and in that time the admin can open it there. Logs and error reports are kept for at most 90 days.

Your rights

Under the GDPR you may ask for access to your data, its correction, its erasure, a restriction of its processing, a copy of it in a machine-readable form, and you may object to the processing that rests on our legitimate interest. Write to support@prmpt.bio; we answer within a month. You may also complain to your supervisory authority, which in Italy is the Garante per la protezione dei dati personali.

People in images and videos

Images and videos here can show people who don't use prmpt.bio. We host them for whoever uploaded or made them. If one shows you without your agreement, report it (“Depicts me without my consent”) or write to support@prmpt.bio, and we'll take it down.

Children

prmpt.bio is not for anyone under 18, and we knowingly hold no data about a child. If you believe a child has an account, write to support@prmpt.bio and we will delete it.

Changes

We may update this page, and the date at the top says when. A material change reaches you by email.

Contact

Support: support@prmpt.bio.