This policy explains what personal data AI Prompt Safe collects, why we collect it, who we share it with, and the rights you have over it.
AI Prompt Safe is a web application, also installable as a PWA, that lets you store, organise, test, and share AI prompts. The app is available at https://app.aipromptsafe.com.
We aim our service at professionals and businesses. It is not intended for children.
1. Who we are
The service is operated by PYXAGE LTD, a company registered in England and Wales (company number 11232293), registered office 3 Daylesford, 494 Littlemoor Road, Weymouth, DT3 5NY ("we", "us", "our").
We are the data controller for the personal data described in this policy, except where stated otherwise (see Client Management data in section 2).
For any privacy question or to exercise your rights, contact us at privacy@hq.pyxage.com.
2. Data we collect
Account data
When you sign up and use your account, we hold:
- Your full name.
- Your email address.
- Your password, stored only as a hash by our authentication provider. We never see or store it in plain text.
- A marketing consent flag (emails about news and offers), set at signup and changeable anytime in profile settings.
- An automated-contact consent flag (automated messages and phone calls about offers, including calls made by AI voice agents), set at signup and changeable anytime in profile settings.
- Your account status.
- Your subscription plan.
User content
The app stores the content you create:
- Prompts, including title and full text.
- Categories, tags, and folders.
- AI provider, model, and source labels.
- Favourites and usage counts.
Client Management data
If you use the optional Client Management feature, you may store client names and project names. This data can identify your own customers.
For that data you are the data controller and we act as your data processor. We process it only to provide the feature to you.
Public sharing
You can mark any prompt "Public". When you do, its title and content are published at a public URL. Anyone with the link can view it. This stays public until you unshare it.
Bring your own API keys (BYOK)
You may save Google AI, OpenAI, Anthropic, OpenRouter, Vercel AI Gateway, and Ollama Cloud API keys. These keys:
- Are stored encrypted in a secrets vault.
- Are decrypted only on our servers, to call the provider you selected.
- Are never returned to your browser after saving.
- Can be removed by you at any time.
AI usage metering
We keep a per-account monthly counter of app-paid AI runs used for the current billing period.
Audit and event logs
We keep internal webhook and event logs for billing and marketing-event delivery. These include your email address and the event type, for example "plan upgraded".
Server logs
Our hosting provider records server logs that may include your IP address.
3. Purposes and legal bases
We rely on the following legal bases under UK GDPR and EU GDPR.
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account | Account data, user content | Contract |
| Provide the Client Management feature | Client and project names | Contract (we act as your processor) |
| Publish prompts you choose to share | Prompt title and content | Consent (your choice to make it public) |
| Store and use your BYOK keys | API keys | Contract |
| Enforce free-plan limits | AI usage counter | Contract and legitimate interest |
| Take payment and manage subscriptions | Email, name, plan, Stripe IDs | Contract |
| Send service notices, for example payment failure | Email, plan, status | Contract and legitimate interest |
| Send marketing emails | Email, name, consent flag | Consent |
| Send automated messages and phone calls about offers (including AI voice agents) | Contact details, consent flag | Consent |
| Prevent bots and abuse at signup | IP address, browser signals | Legitimate interest |
| Keep billing and event audit logs | Email, event type | Legitimate interest and legal obligation |
| Run the app and keep it secure | Server logs, IP address | Legitimate interest |
| Measure site usage with Google Analytics | Online identifiers, usage data | Consent |
You can withdraw consent for marketing emails and for automated messages and calls at any time in profile settings, independently of each other. Withdrawal does not affect processing carried out before you withdrew.
4. Third parties and subprocessors
We share data with the providers below to run the service. Each acts under a contract that limits their use of the data.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase | Database, authentication, file and secret storage, serverless functions, transactional auth emails such as password reset and account setup | All application data, email address | eu-west-2, London, United Kingdom |
| Vercel | Hosting, cookieless Web Analytics, and BotID bot protection | Server logs including IP address and browser signals. Analytics is anonymised with no cross-site tracking and no advertising IDs | United States and global edge network |
| Google (Google Analytics 4) | Site analytics, only with your consent | Online identifiers, device and usage data, IP-derived location | United States and global |
| Stripe | Payments and billing portal | Card details entered on Stripe pages, never on our servers. We store only the Stripe customer ID, subscription ID, plan, and status | Global |
| GoHighLevel | CRM, lifecycle email, and automated contact | Email, name, plan, previous plan, subscription status, registration origin, marketing and automated-contact consent flags | United States |
| Google, OpenAI, Anthropic | AI model processing for Playground, Prompt Creator, and Help assistant | The text you submit to the selected model | Global |
| OpenRouter | Routes Playground and Prompt Creator requests made with your OpenRouter key to the model provider you select | The text you submit, the selected model, and request metadata | Global |
| Vercel AI Gateway | Routes included app-paid and Help assistant requests, and requests made with your own Gateway key, to AI providers | The text you submit, the selected model, and request metadata | Global |
| Ollama Cloud | Runs hosted Ollama models for Playground and Prompt Creator requests made with your Ollama Cloud key | The text you submit, the selected model, and request metadata | Global |
| Google Fonts | Loads the Inter font from Google's CDN | Your IP address | Global |
We may update this list as our providers change. The current list always reflects who we use.
5. How AI inputs are handled
When you run a prompt in the AI Playground, generate a prompt with the AI Prompt Creator, or ask the in-app Help assistant a question, the text you submit is sent to the AI service used for that request.
There are four routes:
- Included app-paid generations and the Help assistant. Requests pass through the Vercel AI Gateway using our credentials. The Gateway is configured for zero data retention.
- Direct-provider BYOK usage. Requests using a Google AI, OpenAI, or Anthropic key go directly to that provider under your account and are governed by its terms.
- OpenRouter BYOK usage. Requests using an OpenRouter key pass through OpenRouter to the upstream model provider you select. Processing is governed by OpenRouter's terms and privacy policy as well as the upstream provider's applicable terms.
- Vercel AI Gateway and Ollama Cloud BYOK usage. Requests using your Gateway key pass through Vercel to the selected model provider. Requests using your Ollama Cloud key run on Ollama's hosted service. Each is governed by that service's terms and the selected upstream provider's terms where applicable.
You should review the privacy terms of any AI provider whose model you use.
6. International transfers
Your application data is stored in the United Kingdom, in Supabase's eu-west-2 (London) region.
Some providers in section 4, such as Stripe, GoHighLevel, the AI providers, Vercel, and Google, may process data outside the UK and the EEA.
Where data leaves the UK or EEA, we rely on a lawful transfer mechanism. This includes UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, and the EU Standard Contractual Clauses, as applicable.
You can ask us for more detail on the safeguards used by contacting privacy@hq.pyxage.com.
7. Cookies, local storage and analytics
We use cookies and similar technologies as described in our Cookie policy. In summary:
- Strictly necessary (no consent needed): a cookie that remembers your cookie choices (
aips_cookie_consent), the app sign-in session cookie, and display preferences such as your theme, kept in local storage. - Google Analytics 4 (only with your consent): if you accept analytics cookies, Google Analytics sets the
_gaand_ga_GS2GWF25G4cookies (each lasts up to 2 years). It collects information about your device and browser, pages viewed, how you arrived, approximate location derived from your IP address, and interactions with the site. We have switched off advertising features: ad storage, ad user data and ad personalisation are always denied. - Vercel Web Analytics (cookieless): Vercel Web Analytics gives us aggregate page-view counts. It sets no cookies, stores nothing on your device, and does not identify you or track you across sites.
Legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Remember your cookie choice; keep you signed in | Consent record, session token | Legitimate interest (and contract, for the signed-in app). Exempt from consent under PECR as strictly necessary. |
| Google Analytics measurement | Online identifiers, device and usage data, IP-derived location | Consent (UK GDPR Article 6(1)(a); PECR regulation 6) |
| Vercel Web Analytics aggregate counts | Page URL, referrer, coarse device and location data, handled in aggregate | Legitimate interest in understanding and improving our site, with minimal impact on you |
Processors
- Google LLC / Google Ireland Limited (Google Analytics) acts as our processor under Google's data processing terms.
- Vercel Inc. (hosting and Web Analytics) acts as our processor.
International transfers
Google and Vercel may process data in the United States. Google LLC is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), which UK adequacy regulations recognise. Otherwise, transfers rely on the safeguards described in section 6, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Retention
Google Analytics cookies last up to 2 years. We keep Google Analytics data for 14 months, and Google signals is switched off. Your cookie choice applies to both www and app and is kept for 12 months, after which we ask again.
Your choices and rights
You can withdraw or change your consent at any time through Cookie settings in the footer. This does not affect processing carried out before you withdrew. You can object to processing based on legitimate interests, and you have the rights in section 9 (access, correction, erasure, restriction, objection, portability). You also have the right to complain to the ICO. Contact privacy@hq.pyxage.com.
8. Retention
We keep your data while your account exists.
When you delete your account, we permanently delete the account and all associated data.
Any database backups we keep for disaster recovery are encrypted and automatically deleted after no more than 30 days.
Stripe retains billing records for as long as the law requires.
Audit and event logs are kept only for as long as necessary for billing and security purposes.
9. Your rights
Under UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Erase your data.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent for marketing at any time.
- Complain to a supervisory authority.
The product gives you direct control over much of this:
- Export. Export all prompts to CSV at any time.
- Update. Change your name and your communication preferences (marketing emails, and automated calls and messages) in profile settings.
- API keys. Remove stored API keys at any time.
- Public prompts. Unshare any public prompt at any time.
- Delete account. The "Danger Zone" option permanently and irreversibly deletes your account and all associated data. It requires you to re-enter your password.
- Subscription. Cancel your subscription through the Stripe billing portal.
To exercise any right not covered by these controls, contact privacy@hq.pyxage.com.
If you are unhappy with how we handle your data, you can complain to your local supervisory authority. In the UK this is the Information Commissioner's Office. In the EEA it is the authority in your country.
10. California privacy rights (CCPA and CPRA)
If you live in California, you have extra rights over your personal information.
You can ask us to:
- Tell you what categories of personal information we collect and the purposes for collecting it.
- Give you a copy of the personal information we hold about you.
- Delete your personal information, subject to legal exceptions.
- Correct inaccurate personal information.
We do not sell your personal information. We do not share it for cross-context behavioural advertising.
We will not discriminate against you for exercising these rights.
To make a request, contact privacy@hq.pyxage.com. We may need to verify your identity before we act.
11. Children
Our service is for professionals and businesses. It is not intended for children, and we do not knowingly collect data from children.
If you believe a child has given us personal data, contact privacy@hq.pyxage.com and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we make a material change, we will update the effective date at the top and, where appropriate, notify you.
13. Contact
For any question about this policy or your data, contact Pyxage at privacy@hq.pyxage.com.