Privacy Policy

1. Overview

PromptPal operates the PromptPal Creator Platform, also called Creator Academy, at academy.promptpal.app. This Privacy Policy explains how PromptPal collects, uses, discloses, and protects information about creators who participate in the Creator Platform.

This policy supplements the main PromptPal Privacy Policy. Where there is a conflict, this Creator Platform Privacy Policy takes precedence for Creator Platform activities.

2. Information we collect

We collect information you provide directly, information generated through your use of the Platform, and information from third parties.

• Account and profile information, including name, email, avatar, biography, password hash, social platforms, handles, follower counts, niche, and referral source.
• Content submission information, including post URLs, captions, screenshots, timestamps, platform, status, and reviewer notes.
• Application information, including name, email, primary platform, handle, follower range, content niche, motivation, and recent post links.
• Usage information, including module progress, quiz scores, completion timestamps, points, tiers, session activity, login events, device type, browser, and IP address for security.
• Affiliate information, including link clicks, hashed IP address, referrer, conversion timestamp, plan, commission amount, and 30-day attribution cookie data.
• Google OAuth profile information if you choose to sign in with Google.

3. How we use your information

We use creator information to operate the Creator Platform, deliver training, process submissions, calculate points and tier status, track affiliate attribution and commissions, process payout requests, display leaderboard information, and send account or programme notifications.

We also use information to communicate with you, improve training and briefs, understand programme performance, detect fraud and abuse, enforce Creator Platform terms, comply with law, and protect PromptPal, users, creators, and the public.

4. How we share information

We do not sell your personal information. We share information with service providers that help operate the Platform and with PromptPal staff responsible for review, support, programme administration, and analytics.

Service providers may include MongoDB Atlas for database hosting, Cloudinary for uploaded screenshots and images, Resend for email delivery, Pusher for real-time notifications, Vercel for frontend hosting, and payment processors for payout requests.

Public leaderboard information may include your display name, avatar, tier badge, monthly points total, and post count. We may disclose information where required by law or necessary to protect rights, property, safety, or prevent wrongdoing.

5. Data retention

We retain information while your creator account is active or as needed to provide Creator Platform services.

After account deactivation, profile visibility is removed from the leaderboard immediately. Training progress, submission history, and points ledger data may be retained for 12 months for audit purposes, then deleted or anonymized. Affiliate conversion records may be retained for 36 months for financial and legal compliance.

Individual affiliate click records containing hashed IP addresses are retained for 90 days, after which individual records are deleted or aggregated. Application data for creators not accepted is retained for 6 months unless earlier deletion is requested.

6. Your rights and choices

You may request access to personal information we hold about you, correct inaccurate information, request deletion of your creator account and associated personal information, and unsubscribe from non-essential communications.

EEA, UK, and California residents may have additional rights including restriction, objection, withdrawal of consent, and CCPA rights to know and delete. We do not sell personal information and do not make legally significant decisions solely by automated means.

7. Security

We use technical and organizational measures designed to protect creator information, including HTTPS/TLS, bcrypt password hashing, least-privilege database access, hashed IP addresses for affiliate click tracking, JWT authentication, and environment-variable secrets management.

No security measure is perfect. Potential vulnerabilities should be reported responsibly to security@promptpal.app.

8. Cookies and tracking technologies

We use essential cookies for session management and security. When someone clicks your affiliate link, PromptPal may set a 30-day HTTP-only attribution cookie on the main PromptPal site so a paid subscription within the window can be attributed to your creator code.

Creator Academy uses server-side analytics derived from our own data and does not rely on third-party analytics cookies such as Google Analytics for the Creator Academy platform.

9. Children's privacy

The PromptPal Creator Platform is intended for individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18.

10. International data transfers

PromptPal operates globally. Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States, where our primary cloud infrastructure is hosted.

When transferring data from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted with a new Last updated date and may be communicated to active creators by email or in-dashboard notice before they take effect.

12. Contact

Privacy enquiries may be sent to creators@promptpal.app. Security issues may be sent to security@promptpal.app.