Privacy Policy
Last updated October 8, 2026
This policy explains what Promptarium collects, why, and what you can do about it. Contact karimelgendy3@gmail.com with any privacy question or request.
What we collect
- Account details: you sign in with Google, which shares your email address, your name and a Google account ID with us. We never see or store a password.
- Your content: the prompts you write, the reference images you upload and the images and videos you generate.
- Payment records: when you start or renew a plan, Whop handles the payment and tells us your email, your plan, the amount and whether the plan is active or canceled. We never see or store your full card details.
- Technical data: IP address, browser and device information and timestamps, used for security and to prevent abuse.
- One essential cookie that keeps you signed in, and your studio settings kept in your browser. We don't use advertising or tracking cookies.
How we use it
- To run Promptarium and make your generations.
- To check prompts and reference images for prohibited content before they reach any model.
- To process payments, renewals, cancellations and refunds.
- To prevent fraud and abuse and enforce our rules.
- To answer your support requests.
Who we share it with
We only share data with the services we need to run Promptarium: Cloudflare (hosting and storage), OpenRouter and the AI model providers it routes requests to (to make your generations), OpenAI (moderation checks on prompts and reference images), Google (sign-in) and Whop (payments). We don't sell your data, and we don't use your prompts, uploads or generations to train AI models.
Your files
Your generations and uploads are stored at private links made of long random codes. They don't appear anywhere public, but anyone you give a link to can open that file, so share links with care. Deleting something removes its files within three days.
How long we keep it
We keep your account and content until you delete it or close your account. Purchase records are kept as long as tax and accounting law requires. Security logs are kept for about 30 days.
Your rights
You can ask us to access, correct, export or delete your data by emailing karimelgendy3@gmail.com. Depending on where you live, you may have further rights under laws such as the GDPR, the UK GDPR or the CCPA, including the right to complain to your local data protection authority.
Security
Sign-in is handled by Google, all traffic is encrypted with HTTPS, and your library is only visible in your own account.
International transfers
Our providers run servers in several countries, so your data may be processed outside your own country, always with these providers' security measures in place.
Children
Promptarium accounts are only for people aged 18 and over. We don't knowingly collect data from children.
Changes
If we change this policy we will update the date at the top of this page.