At Prompt.Doctor, your privacy is foundational — not an afterthought. This policy explains exactly what data we collect across all platform features — including AI generation tools, live sessions, the Orchestrator Program, and our advertising system — why we collect it, and how you can control it.
When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in via GitHub or Google OAuth, we receive your public profile information from those providers.
We automatically collect information about how you interact with Prompt.Doctor, including pages visited, frameworks viewed, prompts copied, features used, and navigation patterns. This data is used to improve the platform and personalize your experience.
When you use AI generation tools — including Sunburn™, Pure.v2™, and video generation — we collect the prompts you submit, the parameters you configure, credit consumption records, and the outputs generated. Prompts are transmitted to third-party AI model providers (Google Gemini, Google Veo, Anthropic, OpenAI, ElevenLabs, Higgsfield, and others) to fulfill your generation requests. Do not submit sensitive personal information in generation prompts.
Payment processing is handled entirely by Stripe. We never store your full card number, CVC, or expiry date on our servers. We retain only a Stripe customer ID and the last 4 digits of your card for display purposes. Credit purchase history and Generation Plan subscription status are stored in our database.
When you participate in live sessions (as an Orchestrator or client), audio and video streams are transmitted through LiveKit's real-time infrastructure. We do not store raw audio/video streams unless a session is explicitly recorded with participant consent. Session metadata (duration, participants, timestamps) is retained for billing and dispute resolution purposes.
If you apply to or use the Advertiser Program, we collect your business name, contact information, campaign details, creative assets (including video files), targeting preferences, and billing information. We track ad impressions and clicks to calculate billing and revenue share.
If you contact us via email or our support form, we retain those communications to help resolve your issue and improve our service.
We use your information to provide, maintain, and improve Prompt.Doctor — including processing purchases, delivering framework access, fulfilling AI generation requests, managing your credit balance, and personalizing your experience.
Prompts and parameters you submit to Sunburn™, Pure.v2™, and other AI tools are transmitted to third-party model providers solely to fulfill your generation request. We do not use your generation prompts to train our own models. Third-party providers may have their own data use policies — review their terms before submitting sensitive content.
Session metadata is used to calculate Orchestrator payouts, process client billing, support dispute resolution, and maintain session history in the Client Portal.
Ad impression and click data is used to calculate advertiser billing, compute Orchestrator ad revenue share, and optimize ad placement. We do not use your personal browsing data to serve targeted third-party advertising.
We may send you transactional emails (purchase confirmations, credit alerts, session reminders, password resets) and, with your consent, product updates and newsletters. You can unsubscribe from marketing emails at any time.
Aggregated, anonymized usage data helps us understand which features are most valuable and where to invest product development effort.
We may process your data to comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms of Service.
Prompt.Doctor does not sell, rent, or trade your personal information to third parties for their marketing purposes. Full stop.
Your generation prompts and parameters are shared with third-party AI model providers (Google, Anthropic, OpenAI, ElevenLabs, Higgsfield, and others) as necessary to fulfill your generation requests. Each provider processes your data under their own terms of service and privacy policy. We recommend reviewing those policies before submitting sensitive content.
Live session audio and video streams are transmitted through LiveKit's infrastructure. LiveKit processes this data as a sub-processor under our data processing agreement. LiveKit does not retain raw session streams beyond the duration of the session unless recording is enabled.
Payment data is processed by Stripe. We share your Stripe customer ID and transaction details with Stripe to process purchases, manage subscriptions, and facilitate Orchestrator payouts via Stripe Connect.
We share data with trusted service providers who help us operate the platform: Resend (transactional email) and analytics tools. Each is bound by data processing agreements and may not use your data for their own purposes.
When you purchase a framework or view a tutorial, the contributing seller or Orchestrator receives aggregate data (purchase counts, revenue, view counts) but never your personal information.
Advertisers receive aggregate campaign performance data (impressions, clicks, CTR) but never individual user identities or personal information.
We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Prompt.Doctor, our users, or the public.
Prompts you submit to Sunburn™, Pure.v2™, video generation, and other AI tools are transmitted to third-party model providers in real time to fulfill your request. We do not permanently store your raw prompts beyond what is necessary for job queuing, error recovery, and your generation history (which you can delete from your account).
Completed generation jobs — including the prompt, parameters, and output — are stored in your account history for your reference. You can delete individual jobs or your full generation history from your account settings. Deleted jobs are purged from our systems within 30 days.
Credit consumption records (which features consumed credits, how many, and when) are retained for 24 months for billing accuracy, dispute resolution, and fraud detection.
Prompt.Doctor does not use your generation prompts or outputs to train our own AI models. Third-party model providers may have their own policies on training data — review their terms for details.
Do not submit personally identifiable information, confidential business data, health information, financial account details, or other sensitive data in generation prompts. We cannot guarantee the confidentiality of data transmitted to third-party AI providers.
Audio and video streams during live sessions are transmitted peer-to-peer or through LiveKit's media servers. We do not record sessions unless all participants explicitly consent. Consent is logged with a timestamp.
If a session is recorded with consent, the recording is stored in the Orchestrator's account storage. Clients may request a copy of recordings from sessions they participated in. Recordings are retained for 12 months unless deleted earlier by the Orchestrator.
Documents, contracts, and messages exchanged through the Client Portal are stored securely and accessible only to the Orchestrator and the associated client. Prompt.Doctor staff may access this data only for support, dispute resolution, or legal compliance purposes.
Screen share streams are transmitted through LiveKit and are not stored by Prompt.Doctor unless session recording is active and consented to.
We track when ads are displayed (impressions) and when users interact with them (clicks) to calculate advertiser billing and Orchestrator revenue share. This tracking is first-party and does not involve cross-site tracking networks.
We do not use Google AdSense, Meta Audience Network, or other third-party advertising networks. All ads on Prompt.Doctor are served directly through our own Ad Engine.
For video ads, we track play events, skip events, and completion rates. This data is used solely for advertiser reporting and platform optimization.
We do not build behavioral profiles of individual users for ad targeting purposes. Ad placement is based on content context (e.g., tutorial category) rather than individual user behavior.
All data transmitted between your browser and our servers is encrypted using TLS 1.3. Passwords are hashed using bcrypt. Sensitive data at rest is encrypted using AES-256.
Access to production systems and user data is restricted to authorized personnel only, using multi-factor authentication and principle of least privilege.
In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the incident, as required by applicable law.
You can request a copy of all personal data we hold about you at any time by emailing privacy@prompt.doctor. We will respond within 30 days.
You can update most of your account information directly from your account settings. For other corrections, contact us at privacy@prompt.doctor.
You can request deletion of your account and associated personal data, including generation history, session metadata, and profile information. Note that we may retain certain information as required by law or for legitimate business purposes (e.g., transaction records for tax compliance, credit usage records for dispute resolution).
You can delete individual generation jobs or your full generation history from your account settings at any time. Deleted records are purged within 30 days.
You can opt out of marketing emails via the unsubscribe link in any email, or by updating your notification preferences in account settings.
Account information is retained for the life of your account plus 90 days after deletion, to allow for account recovery and dispute resolution.
Purchase records, credit transactions, and billing history are retained for 7 years to comply with tax and financial reporting requirements.
Generation job records are retained until you delete them or close your account, subject to a maximum retention of 24 months for credit usage records.
Live session metadata (duration, participants, timestamps) is retained for 24 months for billing and dispute resolution purposes.
Advertiser campaign data and impression/click records are retained for 36 months for billing accuracy and revenue share auditing.
For any privacy-related questions, requests, or concerns, contact our Data Protection Officer at privacy@prompt.doctor. We aim to respond within 5 business days.
Prompt.Doctor, Inc. 123 AI Infrastructure Way San Francisco, CA 94105 United States
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and update the "Last updated" date at the top of this page. Continued use of Prompt.Doctor after changes constitutes acceptance of the updated policy.