This is a plain-language summary of what aiprompts collects, why, how long we keep it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act). It is a starting template — review it with a professional before relying on it.
What we collect and why
- Email address — provided when you unlock prompts or sign in by one-time code. Used to authenticate you, deliver prompts you request, and send transactional email.
- A first-party cookie / local storage — remembers your likes, bookmarks and unlock state so the gallery works across visits.
- Engagement counts — aggregate views, loves and downloads, used to understand what content is popular.
- Search terms — processed only to return results; recent searches are stored on your own device (local storage) and never sent to advertisers.
- Pack purchases — when you buy a prompt pack, we record the transaction (amount, pack, payment reference) to fulfil your order and meet tax and accounting obligations.
How long we keep it (retention)
- Account data (your email and associated records) is kept for as long as your account is active. When you delete your account it is removed as described below.
- Anonymized financial records of pack purchases are retained for [RETENTION_WINDOW — pending accountant confirmation] for tax and legal compliance, after which they are deleted. These records are stripped of direct personal identifiers where possible and kept only to satisfy statutory record-keeping requirements.
Analytics & advertising cookies
With your consent, we use Google Analytics and Google Tag Manager to understand how the library is used. If advertising is enabled, Google AdSense may set cookies to serve and measure ads. These scripts load, and no analytics event fires, only after you choose "Accept" on the cookie banner. You can decline, and you may withdraw consent at any time by clearing the site's cookies/storage.
Processors
We rely on Supabase (database), Google Drive (image hosting), Gmail / SMTP providers (email), Upstash (rate limiting), and Razorpay (payment processing for pack purchases).
Your rights and choices (DPDP Act, 2023)
You may access, correct, and erase your personal data, and withdraw consent, at any time.
- Delete your account and data — visit /account/delete to erase your account and associated email records. (Anonymized financial records are retained for the compliance period noted above.)
- Export your data — request a machine-readable export of the personal data associated with your account from the same /account area.
- Grievances — for any privacy request or complaint you cannot complete in-app, contact us and we will respond within the timelines the DPDP Act requires.