Privacy Policy - Promptyx

# Promptyx Privacy Policy

Effective Date: 12-Aug-2026 (v1.0)

Last Updated: 12-Aug-2026 (v1.0)

This Privacy Policy explains how Modern Enterprise, operating Promptyx ("Promptyx", "we", "us", or "our"), collects, uses, stores, shares, transfers, and protects personal data when you use the Promptyx website, application, APIs, workspaces, prompt management tools, AI prompt improvement features, billing pages, and related services (the "Service").

Promptyx is a SaaS platform for prompt engineering, prompt management, prompt versioning, AI-assisted prompt improvement, prompt testing, and related analytics. Because users may store prompts, project requirements, examples, test data, and AI outputs in the Service, this policy also explains how we handle that customer-controlled content.

1. Who We Are and Privacy Roles

Promptyx is operated by Modern Enterprise, based in Kolkata, West Bengal, India.

Email: admin@promptyx.tech

Address: Kolkata, West Bengal, India

Website: https://www.promptyx.tech/

Privacy Roles

Data Controller / Data Fiduciary: Promptyx acts as a Data Controller (or Data Fiduciary under Indian law) for account registration data, login credentials, billing/transaction details, device identifiers, analytics, and support communications.
Data Processor / Service Provider: For Customer Content (including prompts, prompt versions, project context, business requirements, design notes, and sample test files uploaded or processed by you), Promptyx acts as a Data Processor (or Service Provider) processing data strictly on your behalf to deliver requested platform operations.

Where required by applicable law, references to "personal data", "personal information", "data subject", "consumer", "controller", "processor", "business", or similar terms have the meanings given under the relevant privacy law.

2. Information We Collect

We collect information depending on how you use Promptyx.

A. Account Information

name
email address
login, authentication, and session details
account preferences
workspace and project membership information, where applicable
plan, subscription, and account status

B. Customer Content

"Customer Content" means content you submit, create, upload, store, process, or generate through Promptyx, including:

prompts and prompt versions
project names, project context, project business requirements, design notes, and prompt guidelines
prompt templates, labels, metadata, settings, variables, and configurations
test inputs, sample files, examples, evaluation notes, and datasets submitted by you
AI outputs, run history, comparisons, evaluations, and related analytics
comments, notes, or other content associated with workspaces, projects, prompts, or runs

You control what Customer Content you submit. You should not submit sensitive, regulated, confidential, or third-party data unless you have the right and lawful basis to do so.

C. Billing and Transaction Information

subscription plan
billing cycle
payment status
invoices, receipts, credits, top-ups, and transaction records
payment provider reference IDs
tax, currency, and country information required for billing

We do not intentionally store full payment card numbers or bank account details on Promptyx servers. Payments are handled by third-party payment processors.

D. Usage and Technical Information

IP address
browser type and version
device and operating system information
approximate location derived from IP address
log data, timestamps, request IDs, and diagnostic events
pages viewed, features used, model calls initiated, usage limits, and credit consumption
security, fraud prevention, and abuse monitoring data

E. Support and Communication Information

support requests
emails and messages sent to us
bug reports
feedback, survey responses, or product requests
administrative communications related to your account

F. Cookies and Similar Technologies

We may use cookies, local storage, pixels, tags, analytics SDKs, and similar technologies as described in Section 12.

3. How We Collect Information

We collect information:

directly from you when you create an account, add project context, write prompts, upload files, run AI features, make payments, or contact us
automatically when you use the Service
from payment processors, hosting providers, analytics tools, security vendors, and communication providers
from third-party AI providers where needed to deliver prompt execution, AI improvement, evaluation, or related status data

4. How We Use Information

We use information to:

provide, operate, maintain, and improve Promptyx
create and manage accounts, sessions, projects, workspaces, prompts, versions, runs, and evaluations
generate, improve, test, compare, and evaluate prompts when requested by users
use project requirements, design notes, dependencies, and prompt guidelines to make AI-assisted prompt recommendations more relevant
process subscriptions, payments, refunds, top-ups, invoices, taxes, and credit balances
provide support and respond to requests
monitor reliability, performance, usage limits, fraud, abuse, and security risks
debug issues and maintain logs
analyze aggregate product usage and improve features
comply with law, tax, accounting, security, consumer protection, and regulatory obligations
enforce our Terms of Service, Acceptable Use rules, and other policies

5. Third-Party AI Processing

When you use Promptyx AI features, we may send relevant prompts, project context, prompt guidelines, files, examples, variables, test inputs, and related metadata to third-party AI model providers or infrastructure providers to perform the requested operation.

AI providers may include, depending on the models or features available in your account:

OpenAI
Anthropic
Google Gemini
other AI providers, model hosts, or infrastructure providers added later

These providers may process submitted data in accordance with their own terms, privacy policies, data processing terms, retention settings, and security practices. Where available and commercially reasonable, we seek to use provider settings intended for business/API use and reduced training exposure, but Promptyx cannot guarantee every third-party provider's independent practices unless a specific provider commitment applies.

Do not submit sensitive, regulated, confidential, or legally restricted information to AI features unless you are authorized to do so, have assessed the risk, and have a lawful basis for the processing.

6. No Training by Promptyx

Promptyx does not use customer prompts, project requirements, prompt versions, uploaded files, test data, or AI outputs to train Promptyx-owned general-purpose AI models.

We may use Customer Content only as needed to provide the Service, secure the platform, troubleshoot issues, support users, enforce policies, comply with law, and improve product functionality in a privacy-conscious way. If we ever introduce optional training or model fine-tuning using Customer Content, we will provide additional notice and obtain consent where required.

7. Legal Bases and Processing Grounds

Depending on your jurisdiction, we may process personal data based on one or more of the following grounds:

performance of a contract with you
our legitimate interests in operating, securing, billing, supporting, and improving the Service
your consent, where required
compliance with legal obligations
protection of rights, safety, security, and fraud prevention

For users in India, processing may occur for lawful purposes with consent or other grounds permitted by applicable Indian data protection law. For users in the European Economic Area, United Kingdom, and Switzerland, we rely on the legal bases described above under applicable data protection laws.

8. How We Share Information

We may share information with:

cloud hosting and infrastructure providers
AI model providers used to perform requested prompt operations
payment processors and billing providers
analytics and product improvement providers
email, support, and communication providers
security, logging, monitoring, and fraud prevention vendors
tax, accounting, legal, and professional advisors
regulators, courts, law enforcement, or government authorities where required by law
buyers, successors, or affiliates in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction

We do not sell personal data for money. We do not knowingly share personal information for cross-context behavioral advertising as those terms may be defined under some U.S. state privacy laws. If that changes, we will update this policy and provide opt-out rights where required.

9. International Transfers

Promptyx is based in India. We may process, store, or transfer information in India and other countries where we, our service providers, payment processors, AI providers, analytics providers, or infrastructure partners operate.

These countries may have privacy laws different from those in your location. Where required, we use appropriate transfer mechanisms or safeguards, such as contractual commitments, data processing terms, standard contractual clauses, or other legally recognized transfer tools.

10. Data Retention

We retain personal data for as long as reasonably necessary to fulfill the purposes described in this policy, comply with applicable law, enforce our rights, or resolve disputes.

Retention Schedule Summary

Account & Registration Information: Retained for the lifetime of your active account, and deleted or anonymized within 30 days following an account deletion request, subject to legal record retention.
Billing & Transaction Records: Retained for 7 years to satisfy legal, tax, accounting, audit, and regulatory requirements under Indian and international financial laws.
Customer Content (Prompts, Versions, Project Context): Retained for the lifetime of your active account or until manually deleted or purged by you within the application interface.
Security, Access & Diagnostic Logs: Retained for 90 to 180 days for security monitoring, fraud prevention, diagnostic investigation, and system maintenance.
System Backups: Database backup archives are maintained for business continuity and disaster recovery, rotating out and purging automatically within 30 to 60 days.

When you request deletion of your account or personal data, we will delete, anonymize, or restrict access to your information in accordance with our retention schedule, unless retention is required by law, court order, or ongoing legal disputes.

11. Workspaces and Project Context

Promptyx may allow users to create workspaces, projects, prompts, project requirements, project design notes, dependencies, and related context.

Project context may be used by Promptyx to improve prompt generation, prompt improvement, evaluation, comparison, and analytics within that project. For example, business requirements, audience information, design rules, module dependencies, and quality standards may be included in AI requests where relevant to a user's chosen action.

Promptyx currently focuses on individual accounts and workspace organization. If team collaboration, role-based access, or organization administration features are added later, administrators or authorized members may be able to access workspace content depending on their role. We will update product controls and policy language as needed.

12. Cookies and Similar Technologies

We may use cookies and similar technologies to:

keep users signed in
maintain session state and security
remember preferences
measure product usage
improve reliability and performance
understand how users interact with the website and application

Essential Cookies

Essential cookies are necessary for login, authentication, session management, account security, fraud prevention, and core application functionality.

Functional Cookies

Functional cookies help remember choices such as interface settings, language preferences, and workspace preferences.

Analytics Cookies

We may use analytics tools such as Google Analytics, Microsoft Clarity, or similar services to understand page visits, feature usage, navigation behavior, performance issues, and interaction patterns.

Marketing Cookies

We do not currently intend to rely on advertising or behavioral marketing cookies unless we update this policy and, where required, obtain consent or provide opt-out controls.

Cookie Controls

You can manage cookies through browser settings and any cookie banner or preference tool we provide. Disabling essential cookies may prevent parts of Promptyx from working correctly.

Where required by applicable law, we will request consent before placing non-essential cookies and will provide a way to withdraw consent.

13. Security

We use reasonable technical and organizational measures designed to protect information, including measures related to:

authentication and session security
access controls
encryption in transit where appropriate
infrastructure security
monitoring, logging, and abuse prevention
secure development and operational practices
vendor review where commercially reasonable

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

access personal data we hold about you
correct inaccurate or incomplete personal data
delete certain personal data
restrict or object to certain processing
withdraw consent where processing is based on consent
request portability of certain data
opt out of certain uses, where applicable
lodge a complaint with a privacy authority
receive information about how we process and share personal data

To exercise rights, contact us at admin@promptyx.tech. We may need to verify your identity and account ownership before responding.

We will respond within the timeframe required by applicable law. Some requests may be limited by legal obligations, security requirements, billing records, fraud prevention, dispute handling, or technical constraints.

15. Regional Privacy Notices

India

Promptyx is based in India. Where applicable, users may have rights under Indian data protection law, including rights to access information, correct or erase personal data, withdraw consent where applicable, and raise grievances.

Grievance Officer (India)

In accordance with the Information Technology Act, 2000 and applicable rules thereunder, and relevant provisions of the Digital Personal Data Protection Act, 2023, Promptyx has designated a Grievance Officer to handle privacy-related complaints, grievances, and data rights requests from users in India.

To raise a grievance, users may contact the designated Grievance Officer through the following details:

Designation: Grievance Officer, Promptyx

Organisation: Modern Enterprise

Email: admin@promptyx.tech

Address: Kolkata, West Bengal, India

Response time: Grievances will be acknowledged within 48 hours and resolved within 20 days of receipt.

You may contact the Grievance Officer for any privacy-related complaints, concerns, data access requests, correction requests, erasure requests, or other rights requests under applicable Indian law.

European Economic Area, United Kingdom, and Switzerland

Users in these regions may have rights under GDPR, UK GDPR, or similar laws. You may contact us to exercise access, rectification, erasure, restriction, objection, portability, and consent withdrawal rights. Where required, we will use appropriate safeguards for international transfers.

United States

Some U.S. state privacy laws provide rights to access, delete, correct, and opt out of certain processing. Promptyx does not sell personal information for money and does not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will provide required notices and controls.

Canada

Canadian users may request access to and correction of personal information, subject to exceptions under applicable law.

Brazil

Brazilian users may have rights under the Lei Geral de Protecao de Dados (LGPD), including access, correction, deletion, portability, information about sharing, and revocation of consent where applicable.

Australia and New Zealand

Users in Australia and New Zealand may have rights to access and correct personal information and may contact us with privacy complaints or questions.

Mexico, Argentina, and Other Countries

Users in Mexico, Argentina, and other jurisdictions may have rights under local privacy laws, including rights to access, correct, cancel/delete, oppose certain processing, or request information about processing. Contact us to submit a request.

16. Children

Promptyx is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us so we can take appropriate action.

17. Automated Decisions and AI Outputs

Promptyx provides tools for prompt engineering and AI-assisted prompt improvement. We do not intend to use personal data to make legally or similarly significant automated decisions about users.

AI outputs may be inaccurate or incomplete. Users are responsible for reviewing outputs before relying on them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide additional notice where required by law or where the changes materially affect user rights or obligations.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

19. Contact

For privacy questions, concerns, complaints, or rights requests, contact:

Modern Enterprise

Kolkata, West Bengal, India

Email: admin@promptyx.tech

Website: https://www.promptyx.tech/