Privacy Policy
Prompt Verse ("we", "us") operates PromptVerse (the "Service"). This policy explains what personal data we collect, why, and the choices you have. We process data in line with applicable law, including India's Digital Personal Data Protection Act, 2023 and, where relevant, the GDPR.
1. Data we collect
- Account data — when you sign in with Google we receive your Google account ID, name, email address and profile picture. We never receive or store your Google password.
- Photos — images you upload to AI Photo Studio and the images generated from them (see section 2b).
- Content you create — prompts, tags, collections, presets, scratchpad notes, uploaded result images and arena votes.
- Payment data — orders, plan, amount and gateway reference. Card, UPI and bank details are entered on Razorpay, Cashfree or Stripe and are never stored on our servers. For Cashfree we pass the mobile number you enter to the gateway as required to create the order.
- Advertising data — if ads are shown, Google and its partners may collect cookie identifiers and device information as described below.
- Technical data — IP address, browser type and security logs, used for fraud prevention, rate limiting and diagnostics.
- Messages — what you send through the Contact form.
2. How we use data
- To provide and secure the Service (authentication, vault, arena, coins and rewards).
- To process payments, activate plans and prevent fraud or abuse.
- To respond to support requests and send service notices.
- To improve the Service through aggregated statistics.
We do not sell your personal data and do not use it for third-party advertising.
2a. Advertising and cookies
We may show ads served by Google AdSense to visitors on the free plan. Google and its partners use cookies and similar technologies to serve and measure ads, including ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
- You can opt out of personalised advertising at Google Ads Settings, or visit aboutads.info.
- Learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
- Where required (for example in the EEA, UK and Switzerland) we ask for your consent through Google's certified consent message before ads that use cookies are shown, and you can change your choice at any time.
- Paying subscribers do not see ads.
2b. Photos and images you upload (AI Photo Studio and Image to Prompt)
- Create (text to image): the text description you type is sent to a free AI image service (Cloudflare Workers AI and, as a fallback, Pollinations) to generate your image. Do not type personal or confidential information. Generated images are stored privately in your account for up to 30 days unless you share them.
- Prompt Mixer, One-Tap Makeover and Photo Studio: the pictures you upload are resized, stripped of metadata and sent to an AI service — Cloudflare Workers AI, NVIDIA (build.nvidia.com) or Google Gemini to describe them, and Google Gemini, Muapi.ai or Kie.ai (which may temporarily host the picture so the model can read it) to create a new image. We do not store your uploads; generated pictures stay private in your account for up to 30 days. Use only photos of yourself or people who agreed, aged 18 or over. The browser extension and mobile “Share” hand a picture directly to the page you open; a shared picture is held for at most 15 minutes and deleted when picked up.
- Image to Prompt: the image you upload is resized, stripped of metadata, sent to an AI service (Cloudflare Workers AI or Google Gemini) to be described, and discarded. We keep only the text prompts it produces, in your account, for 30 days unless you delete them sooner. We do not identify people in images.
- The reference photo and the photo(s) of yourself that you upload are used only to create your requested image. They are resized and stripped of metadata (such as location and camera details) in your browser and on our server, sent to Google's Gemini API to generate the result, and are not stored by us.
- The generated image is stored privately in your account, visible only to you (and not shown in any public feed), and automatically deleted after the retention period (30 days by default). You can delete it at any time.
- Photos can show faces, which may be biometric or sensitive personal data under some laws. We process them only with your explicit action and consent, and you confirm you have the permission of everyone pictured. We do not use your photos to train models and do not perform face recognition or identification.
- Google processes the photos under its Gemini API terms. Depending on the Gemini API plan the site owner uses, Google may retain inputs and outputs for a limited time for abuse monitoring or, on unpaid tiers, use them to improve its products. See Google's Gemini API terms.
3. Public vs private content
What becomes public when you share: your prompt, its image, your Google display name, @handle and profile picture, and your like/copy counts and ranking position (on prompts, your public profile and the Rewards page).
Prompts you publish are public and show your handle. Prompts saved as private are visible only to you (and to administrators when needed for moderation or support).
4. Sharing
We share data only with service providers needed to run the Service: Google (sign-in and advertising), Razorpay, Cashfree, Stripe (payments), and our hosting/infrastructure providers. We may disclose data if required by law or to protect rights and safety.
5. Cookies
We use a strictly necessary, HTTP-only session cookie to keep you signed in and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies. Payment providers may set their own cookies on their checkout pages.
6. Retention
Account and vault data is kept while your account is active. Payment records are retained as required by tax and accounting law. Security logs are kept for a limited period. You can ask us to delete your account at any time.
7. Security
We use HTTPS, secure session handling, CSRF protection, rate limiting, input validation, parameterised database queries, signature-verified payment webhooks and least-privilege access. No system is perfectly secure; please report concerns to support@promptverse.sbs.
8. Your rights
Subject to applicable law you may access, correct, export or erase your data, withdraw consent, and nominate a representative or raise a grievance. Email support@promptverse.sbs from your registered address and we will respond within 30 days.
9. Children
The Service is not directed to children under 18 and we do not knowingly collect their data.
10. International transfers
Your data may be processed in countries other than your own, with appropriate safeguards where required.
11. Changes
We may update this policy; material changes will be announced on the Service. Continued use means you accept the updated policy.
12. Contact
Prompt Verse · support@promptverse.sbs · Contact form