Privacy Policy
Last updated: September 30, 2026
SupaPrompt is provided by [Service owner — to be added]. This policy covers our website, web application and Chrome extension, including the side panel and floating workspace.
This page explains which information the service needs, where it is stored and how to request deletion.
1. Data we process
1.1. Browser extension
- Account: your Google identifier, email, name and profile picture when signing in with Google.
- Session: sign-in information that keeps you connected to your account.
- Prompts: submitted text, outputs, versions and refinement answers. Selected images are also sent for processing where image inputs are supported.
- Usage: request counts, selected AI platform, model, processing time and status.
- Diagnostics: technical request and error information to operate and protect the service.
- Guest access: a random installation identifier for sessions, history and limits.
- Local data: language, theme, drafts and links between the current conversation and SupaPrompt history.
1.2. Website and web application
- Account information, preferences, prompts and history used in the web application.
- Cookies and local storage for sign-in, language, theme and interface state.
- Servers and hosting may process IP addresses, request URLs, browser information and errors to deliver requests and maintain security. Prompts are not used for advertising.
1.3. Payment information
A free version is currently available; payments are not accepted. [Payment provider, data categories and processing terms — to be added before paid plans launch.]
2. How we use data
Account information and prompts support the features you request. Technical information supports secure operation. We do not use your prompts to train our own AI models.
- To sign you in and maintain your session.
- To improve prompts, restore history and sync preferences.
- To enforce limits, diagnose errors and prevent abuse.
3. Third-party services and data sharing
When you improve or refine a prompt, its content passes through our server to OpenRouter and an AI provider. Retention and data-use practices depend on the provider and processing settings.
| Provider | Purpose | Data |
|---|---|---|
Account sign-in | Google profile information for authentication. | |
Railway | Hosting and database | Accounts, prompts, preferences and technical information. |
OpenRouter and AI providers | Prompt processing | Text, refinement context, submitted images and generation information. |
Exa, when search is available | Checking current information | A short query about a technology or fact without your full prompt. |
[Payment provider] | Future paid plans | To be specified. No payment information is currently collected. |
- We do not add your Google email or name to AI requests. They may be included if you enter them in your prompt.
- We do not sell personal data or share prompts with advertising services.
- Information may also be disclosed when required by law or necessary to investigate abuse.
4. Where data is stored
- On our server: accounts, prompts, outputs, versions, refinement answers, preferences and usage records.
- In your browser: session information, preferences, drafts and local links to history.
- With third-party services: information needed for their functions under their applicable terms.
5. Data retention
- Account prompts and versions are kept for history until deleted. Individual prompts can be deleted in the web application.
- Guest prompts are cleaned up after more than 90 days without updates. Signing in may link guest history to your account.
- Account information is kept while your account is in use; deletion can be requested using the contact below.
- Local data remains until storage is cleared or the extension is uninstalled. This does not delete server history.
- [Technical-record retention and backup deletion periods — to be specified.]
6. Extension permissions
- sidePanel — opens the SupaPrompt side panel.
- storage — saves preferences, sessions and local data.
- Access to the SupaPrompt server — for sign-in and requests.
- Access to supported AI websites — for the floating workspace and prompt input fields. This access supports extension features, rather than collecting your general browsing history.
7. Data security
We use secure connections and access controls. Google sign-in is verified on the server; AI provider keys are not sent to your browser. No online service can guarantee absolute security.
8. Your rights and choices
You can request a copy of your data, corrections, or deletion of your account and history using the contact below. We may verify account ownership. We respond within one month unless applicable rules provide another timeframe.
Depending on applicable rules, you may also restrict or object to processing, withdraw consent previously given, or contact a competent data protection authority.
9. International processing
Providers may process information in other countries. We do not claim that all processing takes place exclusively in your country or in Europe. Applicable safeguards are considered when working with providers.
10. Children’s privacy
SupaPrompt is intended for users aged 18 and over. If you believe a child has provided personal data, contact us to request deletion.
11. Policy changes
We update the date on this page when the policy changes. We announce material changes to data use in the service and request separate consent where required.
12. Contact
- Owner: [Name or legal entity — to be added].
- Address: [To be added].
- Contact: [Email for support and data requests — to be added].
13. Related documents
The rules for using the service are available on a separate page.