Privacy Policy

Last updated: 14 April 2026

This Privacy Policy explains how CosmoPrompt ("CosmoPrompt", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit cosmoprompt.com or use our services (collectively, the "Service"). By using the Service you agree to the practices described below.

1. Data Controller

CosmoPrompt is the data controller for personal information processed under this policy. For any privacy enquiry, contact support@cosmoprompt.com.

2. Information We Collect

We collect the following categories of information:

• Account information — name, email address, password (stored as a salted hash), and profile preferences you provide when you create an account.
• Content you submit — text, images, files, and other material you upload, generate, or save within the Service.
• Authorized third-party data — where you connect an external service to your CosmoPrompt account, we receive access tokens and only the specific data you have authorized that service to share with us, for the purposes you have selected.
• Usage and device information — IP address, browser type and version, device identifiers, referring pages, pages viewed, features used, timestamps, and error logs. Collected automatically through cookies and similar technologies.
• Billing information — name, billing address, and transaction history. Full payment card details are handled directly by our payment processor and are never stored on our servers.
• Communications — messages you send to our support team and responses to surveys or feedback requests.

3. How We Use Information

• Provide, maintain, secure, and improve the Service.
• Authenticate you and protect against fraud, abuse, and unauthorized access.
• Process payments and manage subscriptions.
• Deliver transactional communications (receipts, password resets, service notices).
• Send product updates or marketing where you have opted in; you can unsubscribe at any time.
• Analyse aggregated usage to understand performance, debug issues, and prioritize improvements.
• Comply with applicable laws and enforce our terms.

4. Legal Bases (EEA / UK users)

We process personal data under one or more of the following lawful bases: performance of a contract (providing the Service you requested), legitimate interests (securing and improving the Service, preventing misuse), consent (where required, e.g. for certain cookies or marketing communications), and legal obligation.

5. How We Share Information

We do not sell your personal information. We share limited information only in the following circumstances:

• Service providers — we use vetted providers for hosting, database storage, authentication, payment processing, transactional email, customer analytics, error monitoring, and AI model inference. These providers process data only on our instructions under written data-processing agreements.
• Connected services — when you choose to link an external platform to your account, information flows between that platform and CosmoPrompt only as you have authorized.
• Legal and safety — where required by law, subpoena, or court order, or to protect the rights, property, or safety of CosmoPrompt, our users, or the public.
• Business transfers — if CosmoPrompt is involved in a merger, acquisition, or asset sale, your information may be transferred, subject to the protections of this policy.

6. International Data Transfers

CosmoPrompt and its service providers may process data in countries other than your own, including the United States and the European Union. Where data is transferred out of the EEA or UK, we rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission or UK authorities.

7. Data Retention

We retain personal data for as long as your account is active and for a limited period afterwards to comply with legal, accounting, and dispute-resolution requirements. You may request deletion of your account at any time (see Section 9); we will delete or anonymize your data within 30 days of a verified request, except where retention is required by law.

8. Security

We use administrative, technical, and organisational measures designed to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest for sensitive fields, access controls, regular backups, and ongoing monitoring. No system is completely secure; we cannot guarantee absolute security, but we work to maintain industry-standard safeguards and to notify affected users of material incidents as required by law.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data ("right to be forgotten");
• Restrict or object to processing;
• Receive a copy of your data in a portable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@cosmoprompt.com. We will respond within the time period required by law (typically within 30 days).

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand usage, and secure the Service. Strictly necessary cookies are set by default; non-essential cookies (for example, analytics) are set only with your consent where required by law. You can control cookies through your browser settings; disabling essential cookies may affect your ability to use the Service.

11. Children

The Service is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, contact us and we will delete it.

12. California Privacy Rights

California residents have the rights described in Section 9 under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and limit the use of sensitive personal information, and the right to non-discrimination. We do not sell or share personal information for cross-context behavioural advertising.

13. Do Not Track

Because no common standard currently exists for "Do Not Track" signals, CosmoPrompt does not respond to them at this time.

14. Third-Party Links

The Service may link to third-party websites or services. We are not responsible for their privacy practices; review their policies before providing personal information.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this page with a revised "Last updated" date and, where appropriate, by email or in-product notice. Continued use of the Service after the effective date of an update constitutes acceptance of the revised policy.

16. Contact

For questions, requests, or complaints relating to this policy or our handling of your personal information: support@cosmoprompt.com.