Privacy Policy

1. Information we collect

• Account information you provide, such as your name, email address, and password.
• Customer Data — the telemetry and request metadata you send to the Service.
• Billing information processed by our payment provider if you subscribe to a paid plan.
• Usage and device data collected automatically, such as IP address, browser type, pages viewed, and timestamps.
• Cookies and similar technologies used to keep you signed in and to understand how the Service is used.

2. How we use information

We use the information we collect to:

• provide, operate, secure, and improve the Service;
• authenticate you and manage your account and subscription;
• communicate with you about your account and provide support;
• send product update emails where you have consented; and
• comply with legal obligations and enforce our terms.

3. Legal bases

Where applicable law (such as the UK GDPR and the Data Protection Act 2018) requires it, we process personal data on the basis of performing our contract with you, your consent, our legitimate interests in operating and improving the Service, and compliance with legal obligations.

4. Email communications

We send service-related emails (such as verification, billing, and security notices) and, with your consent, product update emails about new features and improvements. You can opt out of product update emails at any time using the unsubscribe link in those emails or by contacting us. We will continue to send essential service emails.

5. How we share information

We do not sell your personal information. We share information only:

• with service providers who process data on our behalf (such as hosting, analytics, and payment providers) under appropriate confidentiality obligations;
• when required by law or to respond to valid legal process;
• to protect the rights, safety, and security of PromptLayer, our users, or the public; and
• in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. We delete or anonymize information when it is no longer required.

7. Security

We use reasonable technical and organizational measures designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

We may process and store information in countries outside the United Kingdom. Where we transfer personal data internationally, we use appropriate safeguards required under UK data protection law, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

9. Your rights

Under UK data protection law you have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. The “Last updated” date above indicates when this Policy was last revised.

12. Contact

The data controller for your personal information is Sam Benson. Questions about this Policy or your personal information? Contact us at sam@sambenson.co.uk.