Privacy Policy

This privacy notice for GOD OF PROMPT OÜ (registration number: 17108842, VAT: EE102805158) ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our Prompt Copilot Web Extension ("Extension"), which enhances your interactions with AI models including ChatGPT, Claude, Gemini, and other web-based AI platforms.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Extension. If you still have any questions or concerns, please contact us at info@promptcopilot.io.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice:

What personal information do we process? When you use our Extension, we may process personal information depending on how you interact with the Extension and the choices you make. The primary data we collect relates to your context profiles and prompt interactions for the sole purpose of enhancing your AI model interactions.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We do not receive information from third parties. We only process information you directly provide through our Extension.

How do we process your information? We process your information exclusively to provide, improve, and personalize your AI prompt interactions through context engineering. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in very limited situations and with specific third parties only as necessary to provide our services.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Provide to Us

We collect personal information that you voluntarily provide when creating and using context profiles within the Extension:

• Context Profile Data: Information you input to create personalized context profiles (such as professional background, areas of expertise, preferred communication style, project-specific information)
• Prompt History: Your prompts and enhanced prompts for the purpose of improving prompt suggestions and autocomplete functionality
• User Preferences: Settings and preferences for how you want the Extension to function
• Account Information (if applicable): Email address and username if you create an account for syncing profiles across devices

Information Automatically Collected

When you use our Extension, we automatically collect certain technical information:

• Extension Usage Data: Features used, frequency of use, interaction patterns with the Extension
• Performance Data: Load times, errors, and other technical metrics to improve Extension functionality
• Browser Information: Browser type and version (for compatibility purposes only)

Important Note: We do NOT collect or access:

• Your conversations with AI models beyond the prompts you actively enhance using our Extension
• Personal data from websites you visit unless you actively use the Extension features
• Passwords, financial information, or other sensitive data from web forms

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information for the following specific purposes:

Primary Purpose: Context Engineering for Enhanced AI Interactions

• Prompt Enhancement: Using your context profiles to automatically enhance and optimize your prompts for better AI model outputs
• Prompt Autocomplete: Suggesting completions based on your context and previous prompt patterns
• Personalization: Tailoring the Extension's functionality to your specific needs and use cases
• Context Preservation: Maintaining your context profiles so you don't need to repeatedly provide the same information to AI models

Secondary Purposes:

• Service Improvement: Analyzing aggregated, anonymized usage patterns to improve the Extension's features
• Technical Support: Resolving technical issues and responding to support requests
• Security: Protecting against misuse and ensuring the Extension's security

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

Under the General Data Protection Regulation (GDPR), we are required to inform you of the legal bases we rely on to process your personal information. We only process your personal information when we have a valid legal reason to do so:

Consent (Article 6(1)(a) GDPR): We process your context profile data and prompts based on your explicit consent, which you provide by actively using the Extension's features. You can withdraw your consent at any time by uninstalling the Extension or clearing your profile data.

Legitimate Interests (Article 6(1)(f) GDPR): We may process your information for our legitimate business interests, such as improving the Extension's functionality, preventing fraud, and ensuring network and information security, provided these interests do not override your fundamental rights and freedoms.

Legal Obligations (Article 6(1)(c) GDPR): We may process your information where necessary for compliance with legal obligations to which we are subject.

Contract Performance (Article 6(1)(b) GDPR): We may process your information when necessary to fulfill our contractual obligations to you if you have a paid subscription or account.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We share your information only in the following limited situations:

AI Model Providers

• Your enhanced prompts are sent to the AI models you're interacting with (ChatGPT, Claude, Gemini, etc.) as part of the Extension's core functionality
• We do NOT share your context profiles with these providers; only the enhanced prompts you choose to send

Service Providers (Data Processors under GDPR)

• Cloud storage providers for secure data storage (if you opt for profile syncing)
• Analytics services that process only anonymized, aggregated usage data
• All service providers are bound by data processing agreements ensuring GDPR compliance

Business Transfers

• In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections

Legal Requirements

• When required by law, court order, or governmental authority
• To protect our rights, privacy, safety, or property, and that of our users

We do NOT:

• Sell your personal information
• Share your context profiles with third parties for marketing purposes
• Use your data for any purpose other than improving your AI interactions

5. INTERNATIONAL DATA TRANSFERS

As a company based in Estonia (European Union), we primarily store and process data within the European Economic Area (EEA). If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Your explicit consent for specific transfers

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your information only as long as necessary for the purposes outlined in this privacy notice:

• Context Profiles: Stored locally in your browser and retained until you delete them or uninstall the Extension
• Cloud-Synced Data (if applicable): Retained until you delete your account or request deletion
• Usage Analytics: Anonymized data may be retained for up to 24 months for service improvement
• Legal Compliance: We may retain certain information longer if required by law or to establish, exercise, or defend legal claims

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures in accordance with Article 32 of the GDPR:

• Local Storage Encryption: Context profiles stored locally are encrypted
• Secure Transmission: All data transmitted to our servers uses TLS encryption
• Access Controls: Limited access to user data on a need-to-know basis with appropriate confidentiality agreements
• Regular Security Audits: Periodic reviews of our security practices
• Data Breach Procedures: Established procedures to detect, report, and investigate personal data breaches

However, no electronic transmission or storage method is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. DATA BREACH NOTIFICATION

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 of the GDPR. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR.

9. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from children under 16 years of age (or the applicable age of consent in your jurisdiction). The Extension is intended for adult users. If we learn that we have collected personal information from a minor without parental consent, we will promptly delete such data.

10. WHAT ARE YOUR PRIVACY RIGHTS UNDER GDPR?

Under the GDPR, you have the following rights regarding your personal information:

Right to Access (Article 15 GDPR)

Request a copy of your personal data we process

Right to Rectification (Article 16 GDPR)

Request correction of inaccurate or incomplete personal data

Right to Erasure / Right to be Forgotten (Article 17 GDPR)

Request deletion of your personal data under certain circumstances

Right to Restriction of Processing (Article 18 GDPR)

Request that we limit the processing of your personal data under certain circumstances

Right to Data Portability (Article 20 GDPR)

Receive your personal data in a structured, commonly used, and machine-readable format

Right to Object (Article 21 GDPR)

Object to processing of your personal data based on legitimate interests

Rights Related to Automated Decision-Making (Article 22 GDPR)

Not be subject to decisions based solely on automated processing (Note: We do not engage in automated decision-making that produces legal or similarly significant effects)

Right to Withdraw Consent

Withdraw your consent at any time where we rely on consent for processing

Right to Lodge a Complaint

Lodge a complaint with your local supervisory authority. For Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

To exercise these rights, you can:

1. Use the built-in privacy controls in the Extension settings
2. Contact us at info@promptcopilot.io
3. Submit a formal data subject request

We will respond to your request within one month, extendable by two additional months for complex requests, as permitted under Article 12 GDPR.

11. DATA PROTECTION OFFICER

Given the nature and scale of our data processing activities, we have not appointed a Data Protection Officer as it is not required under Article 37 of the GDPR. However, for all privacy-related matters, you may contact our privacy team at info@promptcopilot.io.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

The Extension respects your browser's Do-Not-Track settings. When DNT is enabled, we limit data collection to essential functionality only.

13. SPECIFIC PRIVACY RIGHTS BY REGION

European Economic Area (EEA), UK, and Switzerland Residents

You have all rights outlined in Section 10 above. You may also contact your local data protection authority for assistance.

California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt-out of any "sale" of personal information (though we do not sell personal information).

Other Regions

We respect privacy rights under all applicable laws. Contact us to learn about rights specific to your location.

14. COOKIES AND SIMILAR TECHNOLOGIES

The Extension itself does not use cookies. However, if you create an account on our website for profile syncing, we may use strictly necessary cookies for authentication and security purposes. You can manage cookie preferences through your browser settings.

15. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we may update this privacy notice as our Extension evolves or laws change. The updated version will be indicated by an updated "Last updated" date at the top of this notice. We will notify you of material changes through the Extension or via email if you have provided one.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

For any questions, concerns, or to exercise your rights under this privacy notice, please contact us at:

GOD OF PROMPT OÜ Sepapaja tn 6, Lasnamäe linnaosa Tallinn, Harju maakond 15551 Estonia

Email: info@promptcopilot.io VAT Number: EE102805158

For privacy-specific inquiries: info@promptcopilot.io

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You can:

1. Review and Update: Access your context profiles directly through the Extension settings
2. Delete: Use the "Clear Data" option in the Extension settings
3. Export: Download your context profiles through the Extension's export feature in a portable format
4. Complete Removal: Uninstall the Extension to remove all locally stored data

For any cloud-synced data or additional assistance, please contact us at info@promptcopilot.io.

PROMPT COPILOT EXTENSION - SPECIFIC DATA PRACTICES

Context Engineering Explained

Our Extension's core functionality revolves around context engineering - using your provided context to enhance AI interactions. This means:

• Your Context Stays Yours: Context profiles are primarily stored locally in your browser
• Selective Enhancement: You control when and how your context is used to enhance prompts
• No Training on Your Data: We do not use your personal context profiles to train AI models
• Purpose Limitation: Your context data is used exclusively for improving your personal AI interactions, not for any other commercial purposes

Transparency Commitment

We believe in complete transparency about how your data enhances your AI experience. The Extension shows you exactly how your prompts are being enhanced before sending them to AI models, giving you full control over your interactions.

Privacy by Design

In accordance with Article 25 of the GDPR, our Extension implements privacy by design and by default:

• Minimal data collection - only what's necessary for functionality
• Local storage preference - data stays on your device when possible
• User control - you decide what data to share and when
• Transparency - clear visibility into how your data is used

© 2025 GOD OF PROMPT OÜ. All rights reserved.