Privacy Policy

1. Introduction

PromptLens Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as overseen by the Information Commissioner's Office (ICO).

2. Data Controller

PromptLens Ltd is the data controller for the personal data processed through this Service. Contact: hello@promptlens.co.uk.

3. Data We Collect

We collect minimal data necessary to provide the Service:

• Account data: Email address, name (provided at sign-up)
• Uploaded content: Design images you upload for analysis
• Generated content: Prompts and extracted styles
• Payment data: Processed by Stripe; we do not store card details
• Usage data: Prompt counts, feature usage (for billing purposes)

4. Legal Basis for Processing

• Contract: To provide the Service you signed up for
• Legitimate interest: To improve the Service and prevent abuse
• Consent: For optional marketing communications (you can opt out anytime)

5. How We Use Your Data

• To provide and maintain the Service
• To process payments
• To communicate with you about your account
• To improve the Service

We do not sell your personal data. We do not use your uploaded designs for AI training. We do not share your data with third parties for marketing.

6. Third-Party Processors

• Supabase: Database and authentication (EU servers)
• Stripe: Payment processing
• Anthropic: AI image analysis (images processed transiently, not stored)
• Vercel: Hosting

7. Data Retention

Account data is retained while your account is active. Uploaded images and prompts are retained until you delete them or your account. Upon account deletion, all data is removed within 30 days. Payment records are retained for 7 years as required by UK tax law.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interest
• Restriction: Request restricted processing

To exercise these rights, contact hello@promptlens.co.uk. We will respond within 30 days.

9. Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure.

11. Complaints

If you have concerns about our data practices, please contact us first at hello@promptlens.co.uk. You also have the right to lodge a complaint with the ICO at ico.org.uk.

12. Changes

We may update this policy from time to time. Material changes will be communicated via email. The latest version is always available on this page.