Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how PromptMX ("PromptMX", "we", "us") collects, uses, shares and protects personal information when you use this website (the "Website"), and the choices and rights you have. It should be read with our Cookie Policy and Terms & Conditions. PromptMX is the data fiduciary / controller for the personal data described here.

1. Information we collect

Account details - name or username, email address and a securely hashed password.
User-generated content - saved prompts, likes, ratings, reviews and comments. When you post a comment or review we also store the name and email you enter and the IP address it was sent from.
Orders and payments - what you buy, order status, payment reference and transaction status. Online payments are processed by Razorpay; we do not receive or store your card number, UPI PIN or net-banking credentials.
Payment screenshots - if you pay manually and upload a screenshot, we store it to verify the payment and to handle disputes.
Contact and newsletter - the details and message you send through the contact form, and the email address (and name, if given) you use to subscribe to the newsletter.
Technical information - IP address, browser and device information, the pages you visit and the search terms you use. Our own statistics count page views per page without identifying you; searches are stored with an anonymous visitor identifier; IP addresses are used in security logs and to limit abusive requests.
Cookies, identifiers and analytics information - described in the sections below and in the Cookie Policy.

2. How we use information

Create and manage accounts and authenticate you.
Deliver purchased prompts and process orders, including verifying payments.
Send transactional and security emails (for example verification codes, password resets, order updates).
Provide customer support and answer your messages.
Improve website functionality, content and performance.
Detect and prevent fraud, abuse and security threats.
Show advertising and measure website traffic, where you have allowed the related cookies (see below).

3. Google AdSense and advertising

This Website uses Google AdSense to show advertisements. Google and third-party advertising vendors may use cookies, web beacons, IP addresses, browser identifiers and similar technologies to show personalised and non-personalised ads, provide interest-based advertising, measure ad performance, limit how often you see the same ad and understand how you interact with ads. Third-party vendors may place and read cookies on your browser.

On this Website, Google AdSense is loaded only after you allow Advertising in our cookie settings. If you reject it, AdSense does not load. You can also manage Google's ad personalisation and opt out of interest-based ads here:

4. Google Analytics

We may use Google Analytics to understand how the Website is used. Google Analytics may collect the pages you visit, time spent on pages, browser and device information, approximate geographic location, interactions with the Website and cookie identifiers such as the _ga cookie. We use this to improve performance and user experience. Google Analytics is currently not switched on for this Website; if we enable it, it will be loaded only after you allow Analytics in our cookie settings, and we will keep this policy up to date. See Google's Privacy Policy and the Google Analytics opt-out add-on.

5. Cookies and tracking technologies

Essential cookies - login, authentication, security and features you ask for (for example a guest rating). These cannot be switched off in our settings.
Preference cookies / storage - remember choices such as light/dark mode and grid layout on your device.
Analytics cookies - measure traffic and performance (only if analytics is enabled and you allow it).
Advertising cookies - used by Google AdSense and partners for advertising and personalisation.
Third-party cookies - set by services such as Google AdSense and Razorpay (at checkout).

When you first visit, we ask for your choice. You can accept all, reject all or manage preferences, and change or withdraw your choice at any time with Cookie Settings in the footer of every page. Details and cookie names are in the Cookie Policy.

6. Third-party services

These services may process limited information needed to provide their service and are governed by their own privacy policies:

Google AdSense - advertising (loaded only with your consent).
Google Analytics - website analytics (not currently enabled; consent-based if enabled).
Razorpay - payment processing (loaded on the checkout page).
Google Fonts - typography. Your browser requests font files from Google, which receives your IP address and browser details.
Iconify - icons. Your browser requests the icon library from Iconify servers, which receive your IP address and browser details.
Email service provider - sends transactional emails such as verification codes and order updates.

7. International visitors and your privacy rights

The Website is operated from India and visitors from many countries, including India, the European Economic Area (EEA), the United Kingdom and Switzerland, may use it. Your information may be processed in India and in other countries where our service providers operate. Depending on the law that applies to you, such as India's Digital Personal Data Protection Act, 2023 and its Rules, the GDPR (EEA), the UK GDPR or Swiss data protection law, you may have the right to:

access the personal information we hold about you;
have inaccurate information corrected;
have information deleted where applicable;
withdraw consent at any time (this does not affect processing already done);
object to, or ask us to restrict, certain processing where applicable;
complain to a data protection authority, where applicable.

These rights depend on the applicable law and circumstances; not every right applies to every visitor. To use them, see section 11.

8. Consent and privacy choices

Where consent is needed, we ask for it with a banner on your first visit. Non-essential cookies (preferences, analytics, advertising) stay off until you accept them. You can accept all, reject all, or choose categories; your choice is stored in a cookie called pp_consent for up to 180 days, after which we ask again. You can change or withdraw consent at any time through Cookie Settings in the footer, and delete cookies in your browser settings. Using the Website does not by itself count as consent to non-essential cookies.

9. Data sharing

We do not sell your personal information. We share it only with: essential service providers (hosting, email); payment processors (Razorpay); advertising and analytics providers, in line with your cookie choices; legal authorities when the law requires it; and other parties when needed to protect the security of the Website and its users.

10. Data retention

Account data - kept while your account is active, and afterwards only as required by law or to resolve disputes.
Order and payment records - kept as long as accounting, tax and legal obligations require.
Payment screenshots - kept only as long as needed to verify payment, handle disputes and meet recordkeeping requirements.
Contact messages and newsletter details - kept as long as needed for support and business purposes, or until you unsubscribe or ask us to delete them.
Analytics information - kept according to the retention settings of the analytics service when it is enabled.
Security logs - kept for a limited period needed for security and abuse prevention.

We review stored data from time to time. We do not run an automatic deletion schedule for all data, so please contact us if you want something removed.

11. Account deletion and data requests

You can ask us to: delete your account; give you a copy of your personal data; correct it; delete eligible personal information; or withdraw consent. Send the request from your registered email through our Contact page with the subject "Privacy request". We may need to verify your identity, and we respond within the time required by applicable law. Requests are handled by us manually.

What happens after deletion: your profile, saved prompts and subscription details are deleted or anonymised; you lose access to purchased prompts; reviews and comments may be deleted or anonymised; and records we must keep by law (such as orders and payment records) are retained for the legally required period and then deleted. We cannot delete legally required transaction records on request.

12. Data security

We protect your information with HTTPS encryption in transit, secure password hashing, access controls, security monitoring and measures against unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Data breaches and security incidents

If we suspect a personal data breach, we will investigate it and handle it as the applicable law requires, including notifying affected users and the relevant authorities where required.

14. Children's privacy

The Website is not directed to children under 13 and we do not knowingly collect their personal information. Under Indian law a "child" is a person under 18, and personal data of children may be processed only with verifiable parental or guardian consent; if you are under 18, please use the Website only with a parent or guardian. If we learn that we hold personal information of a child without the required consent, we will delete it. If you believe this has happened, contact us.

15. External links

The Website may link to other websites. They have their own privacy policies and we are not responsible for their privacy practices.

16. Changes to this policy

We may update this policy. The "Last updated" date at the top shows the latest version. If a change needs your consent, we will ask for it again.

17. Contact us

For privacy questions, requests or complaints, use our Contact page. This is also our contact point for grievances under the Digital Personal Data Protection Act, 2023.