Privacy Policy

Last updated: July 5, 2026

At ProPromptGen (https://www.propromptgen.com) we care about the protection of your personal data. This policy explains what data we collect, why, how we process it, and your rights under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

Contents

1. Data Controller

ProPromptGen is the data controller for personal data processed on this site. For any question or request, contact us at m3320106@gmail.com.

2. Data We Collect

We collect the following data to provide the service:

  • Account data: email address, username, name (optional), password (stored only as an irreversible hash).
  • Profile data: optional information you add, such as bio and avatar.
  • Content data: prompts you create, comments, likes, bookmarks and follow relationships.
  • Usage data: anonymous statistical events such as platform, category, language and country used in prompt generation.
  • Payment data: Premium payments are processed by Stripe; your card details are never stored on our servers. We only keep your subscription status and Stripe customer ID.
  • Technical data: session cookies and theme/language preferences stored in your browser.

3. Purposes and Legal Basis

We process your data to create and manage your account, provide the prompt generation service, enforce free usage limits, operate Premium subscriptions, improve the service and comply with legal obligations.

Legal bases: performance of a contract (GDPR Art. 6(1)(b), KVKK Art. 5/2-c), legitimate interest (GDPR Art. 6(1)(f), KVKK Art. 5/2-f) and, where required, explicit consent (GDPR Art. 6(1)(a), KVKK Art. 5/1).

4. Cookies and Analytics

We use strictly necessary session cookies to manage your login. Your theme and language preferences are stored in your browser’s local storage.

We use Google Analytics to understand site traffic. Google Analytics collects anonymized usage data via cookies; you can opt out using browser extensions.

5. Sharing with Third Parties

Your data is shared only with the following service providers required to run the service, and is never sold:

  • Stripe (payment processing) — subscription payments
  • Google Analytics (traffic analysis) — anonymous usage statistics
  • Google Gemini API (AI) — the text you enter is processed to generate prompts
  • Hosting and database providers (e.g. Vercel) — operating the site

6. Data Retention

Your data is kept for as long as your account is active. When you delete your account, your account data, prompts, comments and other content are permanently deleted. Records required by law (e.g. billing records) may be retained for the statutory period.

7. Your Rights

Under GDPR and KVKK Art. 11 you have the right to:

  • Access your data and learn whether it is being processed
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (you can permanently delete your account at any time using the "Delete Account" option on your profile page)
  • Object to processing and request data portability
  • To exercise these rights, write to m3320106@gmail.com; requests are answered within 30 days.

8. Security

Passwords are irreversibly hashed, data in transit is encrypted with TLS, and database access is protected by authorization. While no transmission over the internet is 100% secure, we apply industry-standard measures to protect your data.

9. Children’s Privacy

Our service is not directed at children under 13 and we do not knowingly collect data from them. If we become aware of such data, it will be deleted.

10. Changes

We may update this policy from time to time. The current version is published on this page and the "last updated" date is revised for material changes.

11. Contact

For all privacy-related questions and requests: m3320106@gmail.com