Privacy Policy
Last updated: March 3, 2026
Prompteria (“we”, “us”, or “our”) is operated by Moltech, Colombia. This Privacy Policy explains how we collect, use, and protect information when you use our platform at prompteria.moltech.dev. We process personal data in accordance with Colombia’s Ley 1581 de 2012 (Statutory Law on Personal Data Protection) and, where applicable, the EU General Data Protection Regulation (“GDPR”).
1. Information We Collect
Information you provide
- Account data — name, email address, and profile picture from your Google account when you sign in via Google OAuth.
- Content — AI prompts, tags, and any other content you create or upload.
Information collected automatically
- Usage data — pages visited, prompts viewed or liked, tags browsed, and AI Chat conversations. This powers personalized feeds and usage limits.
- Technical data — IP address, browser type, and device information collected by standard web server logs and our hosting provider. IP addresses are treated as personal data.
2. How We Use Your Information
- To provide and operate the Service — legal basis: performance of contract.
- To personalize your feed (“For You”) based on your interactions — legal basis: legitimate interest.
- To enforce subscription limits and facilitate payments via Paddle — legal basis: performance of contract.
- To send transactional emails (e.g., subscription receipts) — legal basis: performance of contract.
- To detect and prevent abuse or unauthorized access — legal basis: legitimate interest.
3. Data Retention
We retain data for the following periods:
- Account and content data — for as long as your account is active.
- Server and access logs — up to 30 days after account deletion or subscription cancellation.
- Usage and analytics data (interaction history powering the For You feed) — up to 90 days after account deletion.
You may request deletion at any time (see Section 7). After deletion, residual copies in backup systems are purged within 30 days.
4. Third-Party Services
We use the following third-party services that may process your data:
- Google OAuth — for authentication. Governed by Google’s Privacy Policy.
- MongoDB Atlas — for database storage (hosted in the United States).
- Paddle.com Market Limited — our Merchant of Record for subscription billing. Paddle is an independent data controller for payment and billing data; we do not store your payment card details. See Paddle’s Privacy Policy.
- OpenRouter / AI model providers — AI Chat messages are forwarded to third-party AI model providers via OpenRouter. Do not include sensitive personal information in AI Chat prompts. These providers process your messages under their own privacy policies.
- Vercel — for application hosting and edge infrastructure (hosted in the United States).
5. Sharing of Information
We do not sell your personal information. We may share information with service providers listed above only to the extent necessary to operate the Service. We may disclose information if required by law or to protect our legal rights.
6. Cookies
We use a single session cookie to keep you signed in (via NextAuth.js). This cookie is strictly necessary for the Service to function and does not require separate consent. No third-party advertising or tracking cookies are used.
7. Your Rights
Depending on your jurisdiction, you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated data. Email hello@moltech.dev.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest (e.g., the personalized feed).
- Restriction — request that we limit processing of your data in certain circumstances.
- Lodge a complaint — Colombian residents may file a complaint with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co. EU/EEA residents may lodge a complaint with their local data protection supervisory authority.
8. International Data Transfers
Your data may be transferred to and processed in the United States (MongoDB Atlas, Vercel) and other countries where our service providers operate. These transfers are made under appropriate safeguards, including the standard contractual clauses approved by the relevant authorities, or other transfer mechanisms recognized under applicable law.
9. Automated Decision-Making
The “For You” feed is generated through automated processing of your interaction history (prompts viewed, liked, and bookmarked). This personalization does not produce legal or similarly significant effects. You may object to this processing at any time by contacting us at hello@moltech.dev, in which case your feed will revert to a non-personalized view.
10. Children
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, please contact us immediately.
11. Changes to This Policy
We may update this policy periodically. We will note the date of the latest revision at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
12. Contact
For privacy-related questions or data requests, contact us at hello@moltech.dev.