PromptifAI← Back to session

Privacy Notice

Last updated 25 August 2026. What we collect, why, who we share it with, and how long we keep it.

1. Who we are

PromptifAI is operated by Mohamed Mahgoub Ali Mohamed, a sole trader trading as "PromptifAI". We are the data controller for the personal data described in this notice — we decide what is collected and why. You can reach us at support@promptifai.pro for any privacy question or request.

2. What we collect and why

  • Account data — email address, name if you provide one, login credentials or Google sign-in identifier. Used to create and secure your account. Legal basis: performance of our contract with you.
  • Session content — the brief you enter, the opportunity you commit to, the Snapshot, Campaign Passport and assets generated. Used to deliver the service and show your history. Legal basis: performance of contract.
  • Usage and telemetry — pages viewed, sessions and assets generated, quota counters, error and performance logs, device and browser information, IP address. Used for reliability, quota enforcement, security and fraud prevention, and product improvement. Legal basis: legitimate interests.
  • Support and feedback — messages you send us and optional feedback answers. Used to answer you and improve the product. Legal basis: legitimate interests.
  • Billing status — plan, subscription and customer identifiers returned to us by Paddle, and renewal or payment-failure status. Used to grant the right level of access. Legal basis: performance of contract and legal obligation. We never see or store your card details.
  • Marketing emails — only if you opt in, and you can withdraw at any time. Legal basis: consent.

3. Who we share it with

  • Paddle.com Market Limited — our Merchant of Record. Paddle processes the sale of our product, subscription management, payments, tax compliance, invoicing, and refunds, and receives the data needed for that.
  • Service providers and subprocessors — hosting and database providers, authentication, AI model providers that process your brief to generate output, error monitoring and analytics tooling. They act on our instructions under contract.
  • Professional advisers — legal and accounting advisers where necessary.
  • Authorities — where we are legally required to disclose.

We do not sell your data or your strategy. We do not publish your campaigns. We do not use your inputs to train public AI models, and we do not share your brief with third parties for their own marketing purposes.

4. International transfers

Our providers may process data outside your country, including in the United States and the European Union. Where data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

5. How long we keep it

Account and session data are kept for as long as your account is active, and deleted within 30 days of account closure or a deletion request. Security and error logs are kept up to 12 months. Billing and transaction records are retained by Paddle and by us for up to 7 years where tax and accounting law requires it. Anything no longer needed is deleted or anonymised.

6. Security

We apply appropriate technical and organisational measures: encryption in transit (TLS) and at rest, row-level access controls so only your account can read your data, least-privilege access for administrators, hardened server-side handling of credentials and secrets, and monitoring for suspicious activity. No system is perfectly secure, but we treat your strategic material as confidential.

7. Your rights

You can ask us to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. Email support@promptifai.pro and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority. Self-service deletion is available from the Account page — see Data Ownership.

8. Cookies

We use essential cookies and local storage to keep you signed in and to run the checkout — these are required for the service to work. We use a small amount of privacy-respecting analytics to understand product usage. We do not run advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, though sign-in will stop working without the essential ones.

9. Changes

We will update this notice when our practices change and revise the date at the top. Material changes will be announced in the product or by email.

This page is maintained by Mohamed Mahgoub Ali Mohamed (PromptifAI). It describes current practices and is not a certification.