Privacy Policy

Who we are

Promptwo (https://promptwo.com) is operated by Hasan Express, sole trader (entrepreneur individuel, EI) trading as Hasan Express, 21 RUE des Cigognes Ostwald. We are the data controller for the personal data described below. Contact: hasanhassan8790@gmail.com.

Data we collect

• Account data: your email address. If you sign in with Google or GitHub, we also receive your name, profile picture and account identifier from that provider. If you use a password, it is stored in encrypted (hashed) form by our authentication provider and we never see it.
• Your content: the app ideas you type and the build plans generated for you.
• Usage data: the number of plans you generate each month, to apply the plan limits.
• Subscription data: your Stripe customer and subscription identifiers and your subscription status. Your card details are handled directly by Stripe and never reach our servers.
• Technical data: IP address, browser type and request logs, kept by our hosting providers for security and troubleshooting.

Why we use it

We use your data only for the purposes below. We do not sell it and we do not use it for advertising.

• To create your account, let you sign in and keep it secure (performance of our contract with you).
• To generate, save and display your build plans (performance of the contract).
• To manage your subscription and payments (performance of the contract) and keep accounting records (legal obligation).
• To send you emails about your account, such as the sign-up confirmation (performance of the contract).
• To prevent abuse, fraud and security incidents and to keep the service working (our legitimate interest).

Artificial intelligence

To generate a plan, the text of your idea is sent to Anthropic, the company that provides the Claude AI model. Under its commercial terms, Anthropic may not train its models on this content. Please do not include sensitive personal information in your ideas.

Plans are generated automatically, but no decision with legal or similarly significant effects is made about you on that basis.

Who receives your data

Your data is only shared with the service providers we need to run Promptwo, who process it on our behalf:

• Supabase: database and authentication
• Vercel: website hosting
• Anthropic: AI generation of plans
• Stripe: payments
• Resend: sending account emails
• Google and GitHub: only if you choose to sign in with them

Transfers outside the European Union

Some of these providers are based in the United States or process data there. These transfers are protected by the European Commission's Standard Contractual Clauses and, where applicable, by the EU-U.S. Data Privacy Framework.

How long we keep it

• Account data, ideas and plans: as long as your account exists, then deleted within 30 days after your account is deleted.
• Billing records: 10 years, as required by French accounting rules.
• Technical logs: for a limited period set by our hosting providers.

Cookies

We only use cookies that are strictly necessary: they keep you signed in and secure the sign-in process. Your language choice is saved in your browser. We do not use advertising or analytics cookies, which is why we do not ask for cookie consent.

The payment page is operated by Stripe, which uses its own cookies to process payments and prevent fraud.

Your rights

You can ask to access, correct or delete your data, to receive a copy of it, and to restrict or object to its use, by writing to hasanhassan8790@gmail.com. We reply within one month.

To delete your account and all associated data, write to us from the email address linked to your account.

If you believe your rights are not respected, you can file a complaint with the CNIL (www.cnil.fr), the French data protection authority.

Minimum age

You must be at least 15 years old to use Promptwo.

Changes

We may update this policy. The date at the top of this page shows the latest version, and we will inform you by email of any important change.