Privacy Policy | iSavePrompts

Plain-language summary

We collect only the information needed to run your private Prompt library, keep it secure, and support your account.

Your Prompts, Topics, tags, and Sources are private account data. We process them only to provide the features you use.

We do not sell your personal information.

1. What this policy covers

This Privacy Policy explains what information I Save Prompts collects, how we use it, when we share it with service providers, and how long we keep it.

I Save Prompts is a private workspace for AI prompts and optional supporting Sources. Saved content can include business or personal context, so we treat it as user-owned account data.

2. Information we collect

Account details such as your email address, user id, avatar, sign-in provider, and profile settings.
Prompt library data such as titles, content, descriptions, Topics, tags, variables, AI source, favorites, pins, archive state, copy history, attached Sources, and timestamps.
Billing status such as plan, billing interval, subscription status, checkout status, and payment-provider customer references. We do not store full card numbers.
Content-free product analytics when enabled, such as page category, feature outcome, session count, storage estimate, and bounded active-time estimate. These records do not include Prompt text, Source content, notes, search terms, filenames, storage paths, raw URLs, share codes, provider identifiers, click coordinates, or replay data.
Operational logs needed for security and reliability, such as audit logs, request metadata, error reports, rate-limit records, and webhook processing records.
Support and communication data, such as messages you send us and emails we send about your account, billing, deletion requests, or security-relevant changes.

3. How we use information

Run, sync, search, and secure your Prompt library.
Sign you in and protect your account from unauthorized access.
Process billing, taxes, subscription status, and paid access after paid checkout opens.
Send required account, security, billing, deletion, and important service emails.
Measure reliability, performance, adoption, and product quality without collecting Prompt or Source content in analytics.
Prevent abuse, fraud, spam, and security misuse.
Comply with legal, tax, accounting, and security obligations.

4. How we share information

We share information only with service providers needed to operate I Save Prompts. They are used for things like sign-in, database, hosting, payments, email delivery, analytics, monitoring, and security.

Supabase for authentication, database, row-level security, and storage.
Vercel for hosting and deployment.
Dodo Payments for checkout, subscription status, taxes, refunds, and payment events after paid checkout opens.
Resend for transactional email.
Vercel Web Analytics for normalized anonymous route-level usage analytics.
Vercel Speed Insights for normalized anonymous field-performance measurements.
Google Analytics 4 for cookieless, normalized route-level page views. Advertising signals and personalization are disabled, and private identifiers, query strings, and referrers are not sent.
PostHog is retired from new collection; provider-side deletion of historical analytics is in progress.
Sentry for error monitoring and reliability diagnostics.

5. Retention

Saved Prompts and attached Sources are kept while your account is active, unless you delete them or request account deletion.
Deleted Prompts and Topics stay in Trash for 7 days before permanent deletion. Removing an attached Source permanently removes that Source and its stored file after cleanup completes.
If Pro expires after paid launch, Prompt, Topic, and tag access continues under Free. Existing attached Sources remain readable and removable for 30 days, stay saved but inaccessible from day 31 through day 90, and are permanently deleted after 90 continuous days without paid access. Returning to Pro before deletion restores access and resets the lifecycle.
Account deletion requests are scheduled with a 7-day recovery window before permanent deletion processing.
Operational logs, audit logs, payment events, and email delivery records may be retained as needed for security, accounting, legal, fraud-prevention, and reliability purposes.
When first-party product analytics is enabled, raw content-free event and session summaries are retained for 90 days, account-linked daily aggregates for 13 months, and privacy-thresholded deidentified product-wide daily aggregates for 25 months.

6. Your choices and rights

You can update account settings from the app.
You can export supported account data from Settings. When first-party analytics is enabled, the export includes retained account-linked analytics and a raw-record retention summary. It does not include deidentified product-wide aggregates.
You can delete prompts, restore eligible trash items, or request account deletion.
You can contact support@isaveprompts.com for access, deletion, correction, portability, or privacy questions.

7. Security

We use row-level security, server-side authorization, strict allowlists, input validation, rate limits, audit logs, protected environment variables, monitored errors, and restricted service-role access.

Permanent account deletion removes account-linked first-party analytics records. Deidentified product-wide aggregates may remain only if they do not identify a user and cannot reasonably be linked back to an account.

No internet service is perfectly secure, but the app is designed so private user data is not protected by client-side checks alone.

8. Children

I Save Prompts is intended for users who are at least 13 years old, or older if required by the laws where they live. We do not knowingly collect personal information from children below that age.

9. Contact

For privacy questions or account support, contact support@isaveprompts.com.