Privacy Policy
Last updated: May 24, 2026
This Privacy Policy explains what information PromptBlend (“we,” “us,” “our”) collects when you use promptblend.app and our tools (including PromptSift), how we use that information, who we share it with, and the choices you have. We try to keep this plain and honest. If anything is unclear, email hello@promptblend.app.
1. What we collect
We collect the following categories of information:
- Account information. When you sign up, our authentication provider Clerk collects your email address, your name (if you provide it), and, if you use a social sign-in, the basic profile information returned by that provider (such as Google).
- Payment information. When you make a purchase, Stripe collects your card details and billing address directly. Your full card number never reaches our servers. We receive only limited metadata from Stripe (such as the last 4 digits, brand, country, and the purchase amount).
- Usage logs. When you use PromptSift we record metadata about each call: a timestamp, your account ID, the input character count, the credit cost, whether a cache was hit, and basic error information.
- Saved sifts. When you run a sift, we save the original prompt and the cleaned output to your account so you can find them later in your sift history. We also send your prompt text to our AI provider (Anthropic) during processing to generate the cleaned version. Full retention details are in Section 4 below.
- Device and log data. Our hosting provider (Vercel) automatically captures standard request logs, including IP address, browser user agent, and response codes, for security and debugging.
2. How we use what we collect
We use this information to:
- Provide the Service (run your Sifts, manage your credits, show your dashboard);
- Bill you and process refunds when applicable;
- Send transactional emails (receipts, account notices, policy updates);
- Keep the Service secure (detect abuse, debug errors, prevent fraud);
- Improve the product in aggregate (for example, “what is the average input length?” — never tied back to identifiable users in marketing material);
- Comply with legal obligations.
We do not sell your personal information. We do not use your prompt text to train models for ourselves or for anyone else.
3. Third-party processors
We rely on a small number of well-known service providers to run PromptBlend. Each one only receives the information it needs for the task it performs for us.
- Clerk — authentication and session management. clerk.com/privacy
- Stripe — payment processing and subscription billing. stripe.com/privacy
- Anthropic— the AI provider that powers PromptSift. We send your prompt text to Anthropic's Claude API to generate a cleaned version. anthropic.com/legal/privacy. Anthropic's standard API data retention policy applies to the prompts we send for processing.
- Vercel — hosting and request logs (US regions). vercel.com/legal/privacy-policy
- Supabase — database for account and usage metadata (US region). supabase.com/privacy
4. Data retention
We keep different categories of data for different lengths of time:
- Account data — kept for as long as your account is active. Deleted on request (see Section 7) or when an account has been inactive for an extended period.
- Saved sifts (your prompts and their sifted outputs) — when you run a sift, we save the original prompt and the cleaned output to your account so you can find them later. These are saved for your use only:
- We do not use your saved sifts for in-house research, model training, or any other internal purpose.
- We do not share saved sifts with third parties.
- Saved sifts are retained for 90 days by default. Star a sift to keep it forever.
- You can delete any saved sift at any time from your history page.
- When you delete your account, all saved sifts are removed with it.
- Sift usage metadata (timestamps, credit costs, cache-hit flags) — kept indefinitely so you can see your account usage and so we can debug billing disputes.
- Billing records — kept for as long as we are required to keep them under U.S. tax and accounting rules (generally at least 7 years).
- Server logs — kept by Vercel under their default retention schedule for the plan we are on.
5. Cookies and tracking
We use a small number of cookies and similar technologies:
- Session cookies set by Clerk to keep you signed in. These are required for the Service to work.
- Stripe cookies set during checkout for fraud prevention.
- Vercel Analytics captures aggregated, anonymous page-view statistics so we can understand which pages are popular. It does not use cross-site identifiers and does not associate visits with individual accounts.
We do not run third-party advertising or behavioral-tracking cookies.
6. Children's privacy
PromptBlend is not intended for, or directed at, children under 18. We do not knowingly collect information from anyone under 18. If you believe a child has signed up, email us and we will delete the account.
7. Your choices and your rights
You can review and update most account information from your dashboard. To request a copy of your data, correct it, or delete your account, email hello@promptblend.app from the address on your account. We will respond within 30 days.
Some records (for example, billing history we are required to keep under tax law) may be retained after account deletion as required by law.
EU, UK, and similar jurisdictions (GDPR / UK GDPR)
If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, you may have rights to access, correct, port, restrict, or delete your personal data, and to object to certain types of processing. The lawful bases we rely on are: performance of a contract (running your account), our legitimate interests (security, debugging, product improvement), and consent (where you have given it, for example to receive marketing email). You can exercise these rights by emailing us.
California (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of your personal information. We do not sell or share personal information in the sense those terms are used under California law.
8. Security
We take reasonable steps to protect your data: encryption in transit (HTTPS), access controls, and reliance on reputable processors (Clerk, Stripe, Vercel, Supabase, Anthropic) that maintain their own security programs. No service can promise perfect security; we do our best and will tell you promptly if a breach affects your data.
9. International data transfers
PromptBlend is operated from the United States and our processors primarily store data in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where our processors operate.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, give reasonable notice (for example, email or an in-product banner).
11. Contact
Privacy questions or requests? Email hello@promptblend.app.