Legal

Privacy Policy

Last updated: November 8, 2026

What we collect

When you sign in, we store your email address and a unique account ID in our database. Stripe handles checkout and card details. We keep Stripe customer, checkout, and subscription references and plan/access status to manage billing; we do not store card numbers.

Prompts you explicitly save, including the idea, context, generated text, and quality score, appear in your personal Supabase-backed workspace. Generation inputs and outputs may also be recorded separately for reliability, debugging, and support; choosing not to save a prompt does not mean that no server-side records exist.

Trying a task before signing in

You can try one task without an account. Your idea and selected details are sent to our configured AI provider to prepare relevant follow-up questions and, when requested, a result. We do not add this guest result to your saved history. Your browser may keep a temporary draft in session storage for up to one hour so you can finish signing in without losing your work.

To limit abuse, our Redis service temporarily keeps a keyed hash of your network address and a trial-use marker for up to seven days. People sharing a network may share this guest allowance. This limit record does not include your idea or generated result. Follow-up questions have a separate daily request limit and do not consume the free result. You can sign in for your account allowance.

Optional writing suggestions

Instant word and phrase suggestions use public frequency vocabularies, authored words, reviewed examples and short word sequences inside your browser. The browser downloads a versioned word list from Umprompt using only a language code, without including your draft or account credentials in that request. Suggestions do not send your draft to an AI provider or learn from stored personal writing. Optional AI suggestions are off by default until you explicitly allow them.

Public vocabularies are adapted from Hermit Dave's FrequencyWords / OpenSubtitles 2018 under CC BY-SA 4.0. Dictionary attribution, source and license.

If you enable AI autocomplete, the current idea field (up to 4,000 characters) is sent to Umprompt's server and existing configured provider, Anthropic or OpenRouter, after short pauses while you type, before you press Continue. Contextual completion runs even when a basic local suggestion exists. Other fields, saved personal preferences, clipboard contents and browsing activity are not included. Providers process the text under their own policies.

This update requires consent version 2; earlier permissions are not silently reused. Consent is remembered in session storage for this tab and cleared when the account changes. You can turn AI autocomplete off at any time using its visible control; this stops new requests and cancels the current browser request, but cannot retract text already sent. Suggestions are not inserted until you choose Add word, Add all, or press Tab while a preview is visible. Tab accepts the next word only.

This completion endpoint does not save drafts or suggestions to account history, the database, application logs or analytics. Independent request limits use a keyed network-address hash; they do not use the completed-task allowance. The website can record that a suggestion was accepted, its local/AI source and language, without the text. We block some apparent credentials and identifiers before an AI request, but cannot identify every sensitive detail. Avoid passwords and private identifiers.

How we use your data

Frequent tasks can store the preferences you choose to reuse and study notes you write yourself. Session completion is recorded only when you mark it. We cannot see conversations in another AI assistant. Saved personal preferences are included in a new AI request only after you review and confirm the displayed details.

  • To authenticate you and display your saved prompts.
  • To send your prompt idea and relevant context to the configured AI provider, Anthropic or OpenRouter, for clarification questions, generation, scoring, and optimization. These providers process data subject to their own privacy policies, including privacy policy and OpenRouter's privacy policy.
  • To improve Umprompt using limited product-usage analytics, without prompt or answer content.

Your data is not sold

We do not sell, rent, or trade your personal data or prompt content to any third party. Full stop.

API keys are server-only

Your Anthropic API key (and any other AI provider keys) are stored as server-side environment variables. They are never exposed to the browser, logged, or stored in the database.

Deleting your data

You can delete any saved prompt from the Builder or History page at any time. Deleted prompts are removed from our database immediately and permanently.

To delete your account and all associated data, email us at the address in the Contact section below.

Cookies and sessions

We use Supabase Auth for authentication and browser session storage. The website can also use first-party local storage for PostHog product analytics. We do not use third-party advertising cookies.

Product analytics

When configured, PostHog receives account IDs, signup and sign-in times, checkout creation times, random task/result identifiers, generation and copy actions, optional usefulness votes, and verified purchase metadata such as plan, amount, currency, and test/live status. This lets us distinguish copying a prompt from reporting a useful answer and measure return visits and purchases. Account-linked analytics are pseudonymous, not anonymous.

These events do not include email addresses, prompt text, AI answers, context profiles, card details, keys, or authentication tokens. Full page URLs and referrers are excluded; automatic interaction capture and session recording are disabled. Usefulness feedback is optional. The extension does not add this website analytics SDK to its panel.

Browser extension

The Umprompt extension stores its sign-in session and unfinished prompt draft in the browser's local extension storage. Drafts are separate from saved account history. Signing out through the extension removes its current account session and that account's local draft, but does not delete saved website history.

The extension does not automatically read webpages, browsing history, or the clipboard. It processes text you type or paste into its panel, and writes a prompt to the clipboard only when you choose Copy. Expanding, scoring, optimizing, and simplifying send relevant task text to Umprompt's server and configured AI provider. Choosing Save stores the prompt in the same private account history used by the website.

Data storage

Your data is stored in a Supabase-hosted Postgres database. Row-level security policies ensure that each user can only access their own data. Data is encrypted at rest and in transit.

Umprompt stores user-provided prompts and generated outputs to provide workspace history, improve reliability, debug issues, and support users.

Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date above. Continued use of Umprompt after changes constitutes acceptance.

Contact

Questions about privacy? Email us at umpromptsupport@gmail.com.