Privacy Policy
We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.
1. Who we are
BuildPrompts is operated by Cre8iveMonk, based in the United Kingdom. We are the data controller for personal information collected through buildprompts.co. You can contact us at our contact page.
2. What data we collect
We collect the following information when you use BuildPrompts:
- Account data — your name and email address when you register
- Usage data — prompts you generate, platforms you use, and timestamps
- Payment data — processed securely by Stripe. We never store card details on our servers
- Technical data — IP address, browser type, device type, and pages visited (via Google Analytics)
- Communications — messages you send us via the contact form
3. How we use your data
- To provide and improve the BuildPrompts service
- To send you account-related emails (verification, password reset, welcome)
- To manage your subscription and process payments via Stripe
- To respond to your support enquiries
- To analyse usage patterns and improve the product
- To prevent fraud and abuse
We do not use your data for advertising purposes and we do not sell your data to third parties.
4. Legal basis for processing (UK GDPR)
- Contract — processing necessary to provide the service you signed up for
- Legitimate interests — improving the product, preventing abuse, analytics
- Legal obligation — where required by UK law
- Consent — for marketing communications, where applicable
5. Data storage and security
Your data is stored on secure servers hosted by DigitalOcean. We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and JWT-based authentication. Access to production data is strictly limited.
6. Third-party services
We use the following third-party services which may process your data:
- Stripe — payment processing. Stripe Privacy Policy
- Resend — transactional email delivery
- Anthropic — AI prompt generation (your idea is sent to their API)
- Google Analytics — anonymous usage analytics
- Formspree — contact form submissions
7. Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial reasons.
Generated prompts are retained to power your history feature. You can delete individual prompts or your entire history at any time from your profile.
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interests
- Restriction — request we restrict processing in certain circumstances
To exercise any of these rights, contact us. We will respond within 30 days.
9. Cookies
We use minimal cookies — primarily for authentication (keeping you logged in) and basic analytics via Google Analytics. We do not use advertising or tracking cookies.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users of any significant changes by email. Continued use of BuildPrompts after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or to exercise your rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).