Personal Data Processing Policy
Last updated: September 2026
This Personal Data Processing Policy (the “Policy”) defines the procedure for processing and protecting personal data of users of the Promptix application and the websites promptix.app and apps.promptix.app. The Policy is prepared in accordance with Federal Law No. 152-FZ “On Personal Data”.
1. Operator
The personal data operator is Individual Entrepreneur Olga Aleksandrovna Khudyshkina, INN 450125033950 (the “Operator”). Contact e-mail: admin@promptix.app.
2. Scope
This Policy applies to all personal data that the Operator may obtain from individuals when they use the Promptix application, the websites promptix.app and apps.promptix.app (including the web cabinet and Prompt Apps catalog), and related services (together, the “Services”).
3. Categories of personal data
The Operator may process: account data (e-mail address, name received from a sign-in provider); Prompt Apps created by the user (title, description, prompt text, optional fields; private by default); published Prompt Apps (the same fields plus the author name shown in the catalog after the user turns on publication in settings); Library saves; user content submitted for AI processing (text you select, type, or paste in the App, in Prompt-as-App windows, or in the browser — no run history is kept); payment metadata received from payment providers (Stripe and, where available, local payment providers); technical data (device type, OS version, interface language, truncated IP address, usage statistics, error logs, and cookies needed to keep you signed in).
4. Purposes of processing
Personal data is processed to: provide and maintain the Services; process user requests and return prompt results, including when a Prompt App is run in the browser; host the public catalog and display published Prompt Apps; manage the user’s Library; authenticate users and manage accounts; process payments and subscriptions; ensure security and prevent abuse; diagnose errors; and improve the Services.
5. Legal grounds
Processing is based on: the user’s consent; performance of a contract with the user; and the Operator’s legitimate interests in securing and improving the Services, where such interests do not override the user’s rights and freedoms.
6. Processing and storage
Personal data is processed using automated and non-automated means. No run history is kept: user content submitted to run a prompt is used to return a result and is not stored as a run log. Prompt Apps are stored in the user’s account and are private by default. A Prompt App appears in the public catalog only after the user turns on publication in its settings. If the account is deleted, all of the user’s Prompt Apps are unpublished. Logs and analytics are retained for up to 12 months unless a longer period is required for security or legal compliance. Account data is retained while the account is active and deleted upon request or account closure.
7. Third parties and transfers
Personal data may be disclosed to: AI providers (e.g., OpenAI) to process user content; Stripe and, where available, local payment providers for payment processing; privacy-focused analytics providers (e.g., Plausible); and OAuth providers (Google, GitHub, Yandex, and, where available, Apple) for authentication. Private Prompt Apps are not shown in the catalog. If the user makes a Prompt App public in its settings, it becomes visible to anyone. Data may be transferred outside the Russian Federation where necessary to provide the Services, subject to applicable safeguards.
8. Data subject rights
You may request access to, correction, or deletion of your personal data, withdraw consent, and receive information about processing. You can unpublish a Prompt App in its settings. Deleting your account unpublishes all of your Prompt Apps. To exercise your rights, contact admin@promptix.app. The Operator will respond within the time limits set by applicable law.
9. Security measures
The Operator applies organizational and technical measures to protect personal data, including encrypted connections and secure data handling practices, aimed at preventing unauthorized access, alteration, disclosure, or destruction of personal data.
10. Children’s data
Promptix is not intended for individuals under 18. The Operator does not knowingly collect personal data from children.
11. Policy updates
The Operator may update this Policy from time to time. The current version is published on this page. Material changes may be communicated via the application or website. E-mail: admin@promptix.app.