1. Introduction
Promptrack ("we", "us", "our") is operated by SOFTLOGIC, a SASU registered in France (SIREN 101 233 401, RCS Lille Metropole), headquartered at 23 rue des Tisserands, 59700 Marcq-en-Baroeul, France. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and service at promptrack.io (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account information
When you create an account, we collect your name, email address and password (hashed, never stored in plain text). You may also sign in with Google; in that case we receive your name and email address from Google and nothing else.
Workspace data
To provide the Service, we store the data you configure in your workspace: brand names and domains, competitors, tracked prompts, and the AI answers and analysis produced by your weekly runs. If you track a client's brand, you are responsible for having the right to do so.
Billing information
Payments are processed by Stripe. We never see or store your full card number — we keep only your Stripe customer reference, subscription status, and invoice history.
Traffic & crawler data (optional)
If you connect the AI Traffic or AI Logs features, we ingest technical data about requests to your own website: requested URL, HTTP status, user-agent (to identify AI crawlers), and referrer. This data describes traffic to your site, is only visible in your workspace, and can be disconnected at any time.
3. How We Use Your Data
- Provide and maintain the Service (run your prompts, analyze answers, build reports)
- Manage your account, subscription and invoices
- Send transactional emails (alerts and weekly reports you configure)
- Respond to support requests
- Protect the Service against abuse and fraud
We do not sell your personal data. We do not use your workspace data to train AI models.
4. Third-Party Processors
We share data with a small number of processors, strictly to operate the Service:
- Stripe — payment processing and invoicing
- OpenRouter — your tracked prompts are sent to the AI engines (ChatGPT, Perplexity, and others) through OpenRouter to collect the answers the Service analyzes
- DataForSEO — search keyword data used to suggest prompts and competitors (brand domains only, no personal data)
- Google — optional sign-in (OAuth)
- DigitalOcean — hosting, in the European Union (Frankfurt, Germany)
Tracked prompts should not contain personal data; the Service is designed around brand and market questions, not individuals.
5. Data Storage & Security
Your data is stored on servers located in the European Union. Passwords are hashed with bcrypt, connections are encrypted with TLS, and access to production systems is restricted and key-based.
6. Cookies
We use only essential cookies: session authentication and CSRF protection. We do not use advertising cookies or third-party analytics cookies.
7. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to access, correct, export, or delete your personal data, to restrict or object to its processing, and to withdraw consent at any time. To exercise any of these rights, contact us at support@promptrack.io. You also have the right to lodge a complaint with your local supervisory authority (in France, the CNIL).
8. Data Retention
We keep your data for as long as your account is active. If you delete your account, your workspace data (projects, prompts, runs, reports) is deleted. Invoicing records are retained as required by French law (10 years).
9. Changes to This Policy
We may update this policy from time to time. Material changes are announced by email or in-app before they take effect. The "Last updated" date at the top reflects the latest version.
10. Data Controller & Contact
The data controller is SOFTLOGIC (SIREN 101 233 401), 23 rue des Tisserands, 59700 Marcq-en-Baroeul, France. For any privacy question, contact support@promptrack.io.