Legal
Privacy Policy
Last updated
Summary
Prompt Gateway processes your prompts in memory and discards them when the request completes. Nothing you say or type is written to disk. This policy explains the narrow set of account, billing, and support data we do hold, and the third parties that process it on our behalf.
What we never store
The following are processed in volatile memory for the lifetime of a request and are never persisted, logged, or used to train a model. This list is identical to the one published on our security page, and the two are generated from one source.
- Your prompts or the text you type
- Voice audio or transcripts
- Generated prompts
- The pages or apps you use it on
- Anything used to train models
What we do store
- Your account email and profile
- Billing details (handled by Stripe)
- One optional, encrypted sign-in token
- Aggregate usage counts — never content
- Request metadata (time, status, latency)
- Support screenshots you choose to attach
Support screenshots are stored only when you choose to attach one to a ticket. They are held in Google Cloud Storage in the same control plane as your account record, are never fetched or rendered by our intake service, and are deleted on the retention schedule below.
How long we keep it
Account and billing records are retained for as long as your account is active, and thereafter for the period required by tax and accounting law. Support tickets and any attached screenshots are retained for 24 months from the date the ticket is closed, then deleted. Request metadata (time, status, latency) is retained for 90 days. Prompt content has no retention period because it is never written down.
Website analytics
We count anonymous page views at our edge. Three fields are recorded per view: which of our known pages was requested, the host portion of the referring site, and the two-letter country code the network provides. No cookie is set, no identifier is created, no IP address is stored in any form, and no analytics code runs in your browser — you can verify that by viewing the page source.
Because there is no joinable identifier, we cannot and do not produce unique visitors, sessions, or funnels. Aggregate counters are retained for 90 days.
Cookies
This website sets no cookies. The account portal sets one optional, encrypted sign-in token if you ask to stay signed in; that token is described in the Terms and can be revoked by signing out.
Support tickets and sales enquiries
When you file a support ticket or request a demo, the text you write and the contact details you provide are relayed to Zoho Desk or Zoho CRM so a person can reply. Sending the form is the request to send those words; we relay them nowhere else, and they are not logged by us in transit. Please do not paste prompts or other sensitive data into a support form.
Both forms are protected by Cloudflare Turnstile, which processes a challenge token to distinguish people from automated abuse.
Subprocessors
A current list of the third parties that process data on our behalf is published at /legal/subprocessors and is updated before any addition takes effect.
Your rights
You may request access to, correction of, export of, or deletion of the personal data we hold about you. Because prompt content is never stored, such a request covers your account, billing, and support records. We respond within 30 days.
Write to privacy@promptgateways.com to exercise any of these rights.
Changes to this policy
Material changes are published here with an updated date before they take effect. Superseded versions remain available on request.