Last updated: January 15, 2025
1. Data Controller
bprompt is responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR).
DPO Contact: privacy@bprompt.io
2. Data Collected
2.1 Account Data
- Email address (required)
- Username (optional)
- Profile picture (optional)
- Language preferences
- Professional role (optional)
2.2 Usage Data
- Submitted prompts and received responses
- Comparison history
- Selected AI models
- Preference settings (temperature, default models)
- Shared prompts and their visibility
2.3 Technical Data
- IP address
- Browser type and device
- Pages visited and interactions
- Error logs (anonymized)
3. Processing Purposes
| Purpose | Legal Basis |
|---|---|
| Providing AI comparison service | Contract performance |
| Prompt history storage | Contract performance |
| Service improvement | Legitimate interest |
| Anonymized statistical analysis | Legitimate interest |
| Newsletter sending | Consent |
| Fraud detection and security | Legitimate interest |
4. Data Sharing
4.1 AI Providers
Your prompts are transmitted to selected AI providers for processing:
- OpenAI (GPT-4, GPT-4o)
- Anthropic (Claude 3)
- Google (Gemini)
- Mistral AI
- Meta (Llama)
- Others via OpenRouter
These providers have their own privacy policies. We encourage you not to include sensitive personal data in your prompts.
4.2 Technical Providers
- Supabase: Database hosting and authentication (EU)
- Vercel: Application hosting
4.3 Public Sharing
When you share a prompt publicly, the following data is visible to everyone:
- The original and optimized prompt
- The models used
- The responses (if included)
You can delete your shares at any time.
5. International Transfers
Some of our processors are located in the United States. These transfers are governed by standard contractual clauses approved by the European Commission.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Prompt history | Until manual or account deletion |
| Shared prompts | Until deleted by user |
| Technical logs | 90 days |
| Error logs | 30 days |
7. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of access: View all your personal data
- Right to rectification: Correct your information
- Right to erasure: Delete your account and all your data
- Right to portability: Export your data in JSON format
- Right to object: Refuse certain processing
- Right to restriction: Restrict the processing of your data
Exercise these rights from the Settings page or by email at privacy@bprompt.io.
8. Cookies
8.1 Essential Cookies
Necessary for service operation (authentication, preferences). They cannot be disabled.
8.2 Analytics Cookies
Used only with your consent to improve the service. You can modify your preferences via the cookie banner.
9. Security
We implement the following security measures:
- HTTPS encryption for all communications
- Encryption of sensitive data at rest
- Secure authentication (email + password or OAuth)
- Restricted data access (principle of least privilege)
- Regular backups
- Monitoring and anomaly detection
10. Minors
The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors.
11. Changes
This policy may be updated. In case of substantial changes, you will be notified by email or via an in-app notification.
12. Complaints
If you believe your rights are not being respected, you can file a complaint with the French data protection authority (CNIL): www.cnil.fr
13. Contact
For any questions about this policy:
Email: privacy@bprompt.io
Support: support@bprompt.io