Privacy Policy

1. Data controller

Moon Creative Works (sole proprietorship), Camikebir Mh. 80 Sk., Seferihisar, İzmir, Türkiye — contact@promptia.fr — is the controller for personal data collected through Promptia.

2. Data we collect

• Account data: email, username, password (stored hashed, never in plain text), optional avatar and bio.
• Google sign-in (if used): Google ID, associated email.
• Payment data: handled entirely by our processor Stripe; we never store card details.
• Submitted content: prompts, descriptions, and images uploaded when submitting a prompt.
• Usage data: prompt unlock/copy history, favorites, IP address (anti-abuse rate limiting), technical logs.
• Technical cookies: see the "Cookies" section.

3. Purposes of processing

Providing and securing access to the service, managing accounts, subscriptions and payments, moderating submitted content, preventing abuse, improving the service, and responding to support requests.

4. Legal basis

• Performance of a contract: providing the service, managing your account and payments.
• Legitimate interest: security, abuse prevention, service improvement.
• Consent: content submission, optional communications.
• Legal obligation: retaining billing records.

5. Recipients of data

Our technical processors: Stripe (payments) and Hostinger (hosting). We never sell data to third parties. Some processors may handle data outside the European Union; where that is the case, they contractually commit to an adequate level of protection.

6. Retention period

Account data is kept while your account is active, then deleted or anonymized within a reasonable period after account deletion, except where longer retention is legally required (notably billing records).

7. Your rights

Under the GDPR and any applicable local law, you have the right to access, rectify, erase, restrict, object to, and port your data. Exercise these rights by writing to contact@promptia.fr. If you reside in the European Union, you may also lodge a complaint with the competent supervisory authority (e.g. the CNIL in France: cnil.fr).

8. Cookies

The site only uses cookies that are strictly necessary for it to function: a session cookie for authentication and a language-preference cookie. These do not require prior consent as they are essential to the service. No advertising or third-party analytics cookies are currently used; if that changes, a consent mechanism will be put in place.

9. Security

Passwords are stored hashed. Access to administrative data is restricted to authorized staff and verified server-side on every request.

10. Minors

The service is not intended for people under 16. If a minor has provided us with data without parental consent, contact us so we can delete it.

11. Changes

This policy may be updated; the last-updated date appears at the top of the page. Any material change will be communicated through an appropriate channel.