Privacy Policy

1. Who we are

TestMyPrompt is operated by LE Digital LTD, a company registered in England and Wales. References to “we”, “us”, or “our” in this policy refer to LE Digital LTD.

If you have questions about this policy, contact us at jae@testmyprompt.net.

2. What data we collect

• Account data — name, email address, and password hash when you register.
• Usage data — prompt texts you submit for testing, test results, and workspace activity.
• Billing data — payment method details are handled directly by Stripe; we only store a Stripe customer ID and subscription status.
• Technical data — IP address, browser type, referring URL, and page interaction data collected via server logs and analytics.
• Cookies — session cookies for authentication and, where consented, analytics cookies.

3. How we use your data

• To provide, operate, and improve the TestMyPrompt service.
• To authenticate you and manage your account and workspaces.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (e.g. account confirmation, billing receipts).
• To detect and prevent abuse, fraud, or security incidents.
• To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use prompt content you submit to train external AI models.

4. Legal basis (UK GDPR)

We process your personal data under the following lawful bases:

• Contract — to fulfil our service agreement with you.
• Legitimate interests — for security, fraud prevention, and service improvement.
• Legal obligation — where required by applicable law.
• Consent — for optional analytics cookies.

5. Data retention

We retain account and usage data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. financial records kept for 6 years under UK law).

6. Third-party services

We share data with the following sub-processors:

• Stripe — payment processing.
• Vercel — hosting and edge infrastructure.
• OpenAI / AI providers — prompt analysis (prompt content is sent to the configured AI provider; refer to their privacy policy for how they handle API data).

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure (“right to be forgotten”).
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email jae@testmyprompt.net. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or a notice on the site. Continued use of the service after the effective date constitutes acceptance.

10. Complaints

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).