Personal Data Processing Policy
Last updated: August 2026
This Personal Data Processing Policy (the “Policy”) defines the procedure for processing and protecting personal data of users of the Promptix application and website promptix.app. The Policy is prepared in accordance with Federal Law No. 152-FZ “On Personal Data”.
1. Operator
The personal data operator is Individual Entrepreneur Olga Aleksandrovna Khudyshkina, INN 450125033950 (the “Operator”). Contact e-mail: admin@promptix.app.
2. Scope
This Policy applies to all personal data that the Operator may obtain from individuals when they use the Promptix application, the website promptix.app, and related services (together, the “Services”).
3. Categories of personal data
The Operator may process: account data (e-mail address, name); user content submitted for AI processing (selected text); payment metadata received from the payment provider (Paddle); technical data (device type, OS version, interface language, truncated IP address, usage statistics, and error logs).
4. Purposes of processing
Personal data is processed to: provide and maintain the Services; process user requests and return prompt results; authenticate users and manage accounts; process payments and subscriptions; ensure security and prevent abuse; diagnose errors; and improve the Services.
5. Legal grounds
Processing is based on: the user’s consent; performance of a contract with the user; and the Operator’s legitimate interests in securing and improving the Services, where such interests do not override the user’s rights and freedoms.
6. Processing and storage
Personal data is processed using automated and non-automated means. User content is not stored unless optional history or logging features are explicitly enabled. Logs and analytics are retained for up to 12 months unless a longer period is required for security or legal compliance. Account data is retained while the account is active and deleted upon request or account closure.
7. Third parties and transfers
Personal data may be disclosed to: AI providers (e.g., OpenAI) to process user content; Paddle for payment processing; privacy-focused analytics providers (e.g., Plausible); and OAuth providers (Google, Apple, GitHub, etc.) for authentication. Data may be transferred outside the Russian Federation where necessary to provide the Services, subject to applicable safeguards.
8. Data subject rights
You may request access to, correction, or deletion of your personal data, withdraw consent, and receive information about processing. To exercise your rights, contact admin@promptix.app. The Operator will respond within the time limits set by applicable law.
9. Security measures
The Operator applies organizational and technical measures to protect personal data, including encrypted connections and secure data handling practices, aimed at preventing unauthorized access, alteration, disclosure, or destruction of personal data.
10. Children’s data
Promptix is not intended for individuals under 18. The Operator does not knowingly collect personal data from children.
11. Policy updates
The Operator may update this Policy from time to time. The current version is published on this page. Material changes may be communicated via the application or website. E-mail: admin@promptix.app.