Privacy policy

• Account: your name, email address, profile photo (if you add one or sign in with Google), how you sign in, and when you joined and last signed in. Your password is handled by Google Firebase Authentication — we never see it.
• Activity: designs you like, save and copy prompts from, so Saved and My Prompts work, and counts of these for our own statistics.
• Payments: what you bought, the amount, currency, date, coupon used, payment method type (for example “UPI”) and Razorpay's payment reference. Not your card number, UPI ID or bank details.
• Feedback: if you tell us why you're leaving when you deactivate or delete your account.
• View counts: when a design is opened we count it once per visitor per day using a one-way code made from the date, your IP address and browser. The code can't be turned back into your IP address and is deleted after two days.

• To run your account and show you your saved designs, prompts, membership and receipts.
• To take payments, give you what you paid for, and handle billing questions and support.
• To keep the site secure — for example limiting repeated attempts and stopping abuse.
• To understand which designs people find useful (using counts, not individual tracking).
• To keep records the law requires for payments.

We use a few trusted services to run PromptLoom. They process data on our behalf, only for these purposes:

• Google Firebase (Authentication, Firestore, Storage) — accounts, the site's database (stored in Google's Mumbai region) and images.
• Razorpay — payments. Razorpay handles your payment details under its own privacy policy and India's payment rules.
• Vercel — hosts the website.

We don't sell or rent your data, and we don't share it for advertising.

• Sign-in cookie — keeps you logged in. Without it you'd have to log in on every page.
• Your theme (light or dark) and recent searches are kept in your own browser, never sent to us.
• We don't use advertising or tracking cookies.

• Account data: until you delete your account. A deactivated account is deleted automatically after 12 months.
• Payment records: kept after an account is deleted, as the law requires for financial records. They then hold only an internal account number, not your name or email.
• Leaving feedback: kept without your name once your account is deleted.
• View-count codes and security counters: deleted automatically within a few days.

• See and change your name and photo in Settings.
• Delete your account in Settings → Delete account. This erases your profile, photo, saves, likes and login straight away.
• Ask us for a copy of your data, to correct it, or anything else about your data — write to admin@promptloom.in. We reply within 30 days, usually much sooner.

These rights follow India's Digital Personal Data Protection Act, 2023.

Data travels over encrypted connections (HTTPS) and is stored by Google with encryption. Only PromptLoom's admins can see account details, and every change an admin makes is logged. No system is perfectly secure, but we'll tell you promptly if something ever affects your data.

PromptLoom isn't meant for children under 13. If you believe a child has made an account, contact us and we'll remove it.

If we change how we use your data, we'll update this page and show a notice on the site when the change matters to you.

Questions or requests about privacy: admin@promptloom.in.