Privacy Policy

PromptChainr is a visual prompt workflow platform operated by WSB Labs LLC ("we," "our," or "us"), a Wyoming limited liability company. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy applies to users worldwide, including those in the European Union (EU), European Economic Area (EEA), United Kingdom, and the United States, including California residents.

Account Information

You sign in with a third-party identity provider (for example, Google) rather than a password, so we never receive or store a password for your account. From that provider we receive:

• Email address
• Name, if your provider supplies one
• Profile picture URL, if your provider supplies one
• The account identifier your provider uses for you

We also store the account preferences you set within the Service.

Usage Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Timestamps of interactions

Workflow Content

When you use the Service, we process the prompts and content you create within your workflows. This data is used solely to provide the Service to you.

We use your information to:

• Provide, maintain, and improve the Service
• Process your workflows and deliver results
• Communicate with you about your account and the Service
• Send important notices and updates
• Respond to your requests and support inquiries
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

We retain different types of data for different periods:

• Account data: Retained while your account is active and for a reasonable period afterward for legal and business purposes
• Workflow content: Retained while your account is active; deleted upon account deletion request
• System logs: Retained for 30 days, then automatically deleted
• Anonymized analytics: May be retained indefinitely for service improvement

We may share your information with:

AI Service Providers

To process your workflows, we transmit your prompts, inputs, and workflow data to third-party AI providers. We choose which model and provider handles each step, and we may change that selection at any time. Providers we use or may use include:

• Anthropic (Claude) – Privacy Policy | Terms
• OpenAI (GPT models) – Privacy Policy | Terms
• Google (Gemini) – Privacy Policy | Terms
• Groq (open models such as Kimi and Llama) – Privacy Policy | Terms

We may add or change AI providers; material changes will be noted in policy updates.

Other Third Parties

• Payment Processors: Stripe processes payments and is subject to Stripe's Privacy Policy
• Service Providers: Third parties that help us operate our Service (hosting, analytics, support)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

All Users

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

EU/EEA/UK Residents (GDPR)

Under the General Data Protection Regulation, you also have the right to:

• Restrict processing of your data
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority
• Not be subject to automated decision-making with legal effects

Legal Basis for Processing: We process your data based on contract performance (to provide the Service), legitimate interests (to improve and secure the Service), consent (for marketing), and legal obligations.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

We do not sell or share your personal information, so there is nothing to opt out of. To exercise any of your other CCPA/CPRA rights, email us at legal@wsblabs.com and we will respond within the time the law allows.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Technical and organizational security measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. On your first visit we display a consent banner so you can choose which optional cookies to allow. No analytics or marketing cookies are set until you give explicit consent.

Types of cookies we use:

• Essential cookies: Required for the Service to function. Always active.
• Analytics cookies: Help us understand how visitors use the Service so we can improve it. Only set with your consent.
• Preference cookies: Remember your settings and cookie consent choices.

You can change your cookie preferences at any time using the “Cookie Settings” link in the site footer, or through your browser settings. If you withdraw consent for analytics cookies, we will clear existing analytics cookies from your browser.

We respect the Do Not Track (DNT) signal. If your browser sends a DNT header, analytics cookies default to off.

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on the Service and update the "Last updated" date. Changes take effect when posted.

For questions about this Privacy Policy or to exercise your rights, contact us:

• Email: legal@wsblabs.com

Data Protection Officer (for EU/UK inquiries): legal@wsblabs.com