Privacy Policy

This Privacy Policy explains how [Legal entity name — to be confirmed by the owner] (trading as Promptly) ("Promptly", "we") handles personal information when you use Promptly.

1. Scope and controller details

This policy applies to visitors, learners, bundle purchasers, and people who contact support or sales. The owner must complete the legal entity, contact, and registered-address details shown in this policy before public launch.

2. Information Promptly processes

Depending on how you use the service, Promptly may process:

account and identity data, including name, email, authentication records, role, and settings;
profile, onboarding, learning-goal, and preference data;
learning-bundle selections and entitlements, course enrollments, lesson and video progress, quiz and diagnostic attempts, practice responses, skills, achievements, and certificates;
learner-created content, including saved prompts, notes, bookmarks, mission submissions, portfolio items, support messages, and content reports;
purchase and sales inquiries, including contact details, requested bundle, intended use, payment-method choice, payment status, and request references;
optional email preferences and consent evidence;
AI-feature inputs and outputs when you use Promptly AI-assisted tools;
privacy requests and policy-acceptance records;
limited product-usage events, search terms, notification activity, delivery logs, and technical/security records; and
historical subscription records and transaction references where needed for backwards compatibility or legal recordkeeping. Promptly does not intentionally store raw payment-card numbers.

Please do not place passwords, API keys, payment-card details, confidential client data, or information you do not have permission to use into prompts, notes, or support forms.

3. Why we process it

We use this information to create and secure accounts; provide and personalize learning; manage free, purchased, and Complete Promptly entitlements; save progress and learner work; operate AI-assisted features; issue and verify bundle certificates; process purchase requests and payment verification; send requested learning communications; respond to support, sales, and privacy requests; prevent abuse; maintain service reliability; and understand product usage.

Depending on your location and the activity, processing may rely on performance of a contract, legitimate interests in operating and securing the service, consent for optional analytics or marketing, and legal obligations.

4. AI-assisted features

When you submit text to a Promptly AI-assisted feature, that content may be sent through Base44's managed AI integration and processed by the model provider selected by that service. Do not submit sensitive or third-party confidential information unless you are authorized to do so.

5. Service providers

Promptly is built and hosted on Base44, which provides infrastructure, authentication, database, file, email, analytics, and managed AI integrations. Additional underlying hosting, email, AI-model, and payment providers may process data on Promptly's behalf. The owner must confirm and maintain the current provider/sub-processor list in Promptly's legal settings and vendor records.

6. Payments

Promptly’s current learner offer uses one-time bundle purchases. Payments may initially be coordinated manually through supported payment methods and later through a connected provider. Promptly should retain payment status and transaction or request references rather than raw card data.

7. Analytics, cookies, and local storage

Promptly uses essential authentication and security technologies to operate the service. Preference storage may remember choices such as theme and workspace state. Limited first-party product analytics is disabled unless you opt into the Analytics category in Cookie preferences where required. See the Cookie Notice for more information.

8. Email communications

Essential account, security, purchase, support, and privacy messages are separate from optional communications. Weekly learning summaries, reminders, and product news use separate preferences where applicable.

9. Retention

Most account and learner data is retained while the account is active. Some certificate, transaction, security, email-suppression, support, purchase-request, and privacy-request records may need longer retention for verification, fraud prevention, dispute handling, or legal obligations.

10. Account deletion and data export

Authenticated learners can request an export or account deletion in Profile → Privacy Center. Ownership checks and processing are enforced on the server. Certain certificate, transaction, security, and legal records may be retained or anonymized where justified or required.

11. Security

Promptly uses server-side authorization, access controls, restricted admin operations, consent-gated analytics, and encryption in transit provided by its platform. No service can guarantee absolute security. Report suspected unauthorized access to support@promptlyacademy.online.

12. International processing

Base44 and other service providers may process information in countries other than yours. The owner must confirm provider locations and appropriate transfer safeguards with legal counsel where required.

13. Your choices and rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing and to withdraw consent. You can manage optional email and cookie preferences in the service and submit export or deletion requests in the Privacy Center.

14. Children

Promptly is not directed to children under 16. The owner should obtain legal review before intentionally marketing to, or knowingly serving, children in jurisdictions with additional consent requirements.

15. Changes and contact

We may update this policy when the product, providers, or legal requirements change. Privacy questions can be sent to hello@promptlyacademy.online or support@promptlyacademy.online. Registered office: [Registered address — to be confirmed by the owner].