AI & Data Privacy Policy

1. Privacy by Design Architecture

Promptly is a client-side application. The core work of generating post ideas and prompts happens directly in your web browser — not on our servers.

• AI Requests: When you click Generate, your request is relayed over encrypted TLS through our secure Cloudflare proxy to the AI models Promptly manages for you. The proxy keeps a usage counter tied to your account (how many generations you have used this month, so we can enforce your plan allowance) but does not store or log the content of your prompts or the AI's responses.
• Content Data: Your high-level topics, niche ideas, your role, target audience, writing style summary, and brand kit are stored locally as settings in your browser. Your session history (ideas, drafts, and images) and your dashboard statistics live in your browser's IndexedDB, separated per account. If you clear your browser cache or change devices, this data will be lost — use the JSON export in Settings to keep a backup you can re-import.

2. Information We Collect

While your work stays local, we require limited information to manage your account:

• Identity & Authentication: We use Clerk to manage user accounts. When you sign up, we collect your email address and — if you sign in with Google or LinkedIn — the basic profile information your provider shares (such as your name and profile picture).
• Usage Metadata: Our proxy keeps per-account usage counts (e.g. how many generations, trend searches, and research lookups you have used this month) to enforce your plan allowance. These are numbers only — they never include the content of your prompts or outputs.

3. Third-Party Data Processors

To provide this service, we work with the following providers:

• Clerk (clerk.com): Secure authentication and account management.
• Cloudflare: Application hosting via Cloudflare Pages.
• AI Model Providers (via OpenRouter): When you click Generate, your request is relayed through our Cloudflare proxy to AI models accessed via OpenRouter (openrouter.ai). The content of your request is processed by the model to produce your output and is not stored by Promptly.
• Stripe (stripe.com): Payment processing for subscriptions. Your card details and billing address are collected and stored entirely by Stripe — they never pass through our systems. We link your Stripe customer record to your account via your email address and account ID.
• LinkedIn: When you click Publish, the post text and image you approved are transmitted to LinkedIn via our proxy to create the post on your feed. This uses the LinkedIn connection you granted at sign-in (managed by Clerk); nothing is sent to LinkedIn unless you explicitly publish.
• Google Analytics: Used only on our marketing pages (landing, pricing, FAQ, and legal pages) — never inside the app once you're signed in. It only runs if you accept cookies; see §4 below.

4. Cookies

We use a single cookie/local-storage entry to remember your choice about Google Analytics. Nothing is logged on our servers.

• By default, no tracking scripts run. On your first visit to a marketing page, a banner asks whether you accept or reject analytics cookies.
• Reject: Nothing changes about how the app works — the choice only affects whether we can see anonymised traffic stats.
• Accept: Google Analytics loads on marketing pages only, to help us understand traffic. It never runs once you're signed into the generator or dashboard.
• You can change your choice anytime via the "Cookie Settings" link in the footer, or "Cookie preferences" in the app's Settings.

5. Communications & Marketing

By creating an account, you agree to receive functional emails (e.g. login codes and login links). If you opt in to our newsletter, we will send LinkedIn strategy tips and product updates. Every marketing email includes an unsubscribe link. We will never sell your email address to third parties.

6. AI Transparency & Responsibility (EU AI Act)

• AI-Generated Content: All ideas and prompts produced by Promptly are generated by Artificial Intelligence.
• Human-in-the-Loop: This tool is an assistant, not an automated poster. You are the Editor-in-Chief. You are responsible for reviewing and editing all AI outputs to ensure they are accurate, non-harmful, and compliant with LinkedIn's Professional Community Policies.
• No Training: We do not use your inputs or outputs to train any machine learning models.

7. Disclaimer of Warranty

The service is provided "as is." While our prompts are designed for high engagement, we do not guarantee LinkedIn virality, specific reach, or that AI output will be free of errors. We are not liable for any account restrictions placed on your LinkedIn profile resulting from content you choose to publish.

8. Your Rights (GDPR)

Under the GDPR, you have the right to access, correct, or delete your account data. You can manage your profile through the account dashboard or by contacting us at support@promptly.ee.

9. Governing Law

This policy and your use of the service are governed by the laws of the Republic of Estonia.