Privacy Policy

Effective date: July 10, 2026 · See also our Terms & Conditions

This Privacy Policy explains how Zoey Prompts ("we", "us", the "Service") collects, uses, and protects your information when you use our website, browser and editor extensions, and related features. The short version: we collect only what we need to run the Service, we don't sell your data, and we don't use third-party advertising or analytics trackers.

1. Information We Collect

Account information

When you create an account, we collect your email address, an optional name, and a password. Authentication and account data are handled by Supabase; passwords are stored in hashed form and are never visible to us.

Payment information

If you subscribe to Pro, payments are processed by Stripe. Your card details go directly to Stripe — we never see or store your full card number. We receive only what we need to manage your subscription, such as its status, plan, and billing history.

Content you create

Prompts, history, and projects: if you are signed in, prompts you save and your prompt history are stored in our database (Supabase) so they can sync across devices.
Community Prompt Gallery: prompts you choose to publish to the gallery are visible to other users. Don't publish anything you want to keep private.

Data stored only in your browser

If you use the Service without an account, your prompt history, usage counters, and preferences are stored in your browser's local storage and never leave your device. If you choose to save your own AI provider API key in settings, it is also stored only in your browser's local storage — we do not transmit or store it on our servers.

Technical data

Like nearly all websites, our hosting and security providers (Vercel, Cloudflare, Supabase) automatically process technical data such as IP address, browser type, and request logs to serve the site, prevent abuse, and keep it secure.

2. How We Use Your Information

To provide, maintain, and improve the Service;
To sync your prompts, history, and projects across sessions and devices;
To process subscriptions and payments;
To respond to support requests and send essential service emails (such as password resets and billing notices);
To prevent fraud, abuse, and violations of our Terms;
To comply with legal obligations.

We do not sell or rent your personal information, and we do not use it for third-party advertising.

3. AI Processing of Your Prompts

When you use the AI Rewrite feature, the text of your prompt is sent to a third-party AI model provider (such as Google) for processing so it can be optimized. Please avoid including passwords, financial details, or other sensitive personal information in prompts you submit for AI rewriting.

The local Auto-Polish feature runs entirely in your browser and does not send your prompt anywhere.

4. Cookies & Local Storage

We use browser local storage for preferences, anonymous prompt history, and free-tier usage counters.
Supabase sets tokens needed to keep you signed in.
Cloudflare Turnstile is used at sign-up to protect against bots and may set its own cookies.
Stripe may set cookies during checkout for security and fraud prevention.

We do not use advertising cookies or third-party analytics trackers.

5. Who We Share Data With

We share data only with the service providers required to operate Zoey Prompts:

Supabase — authentication and database hosting;
Stripe — payment processing;
Vercel — website and serverless function hosting;
Cloudflare — bot protection (Turnstile);
AI model providers (such as Google) — processing prompts you submit to AI features;
Authorities, where required by law or to protect our legal rights.

Each provider processes data under its own privacy policy and appropriate safeguards.

6. Data Retention & Deletion

Account data and saved content are kept for as long as your account exists.
You can delete individual prompts, history items, and projects at any time from within the Service.
To delete your account and associated personal data, contact us at zoeymaya13@gmail.com and we will process the request within 30 days.
Billing records may be retained longer where required for tax and accounting law.

7. Your Rights

Depending on where you live (including under the GDPR in Europe and the CCPA/CPRA in California), you may have the right to:

Access a copy of the personal data we hold about you;
Correct inaccurate data;
Delete your data ("right to be forgotten");
Receive your data in a portable format;
Object to or restrict certain processing;
Not be discriminated against for exercising these rights.

To exercise any of these rights, email zoeymaya13@gmail.com. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and reputable infrastructure providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — please use a strong, unique password.

9. Children

The Service is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

10. International Transfers

Our service providers may store and process data in countries other than your own, including the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses maintained by our providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above and, for material changes, take reasonable steps to notify you (such as a notice in the Service). Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

Questions or requests about your privacy? Contact us at zoeymaya13@gmail.com.