Privacy Policy

Last updated: 16 March 2026

1. Introduction

PromptAndSkills ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use PromptAndSkills.com ("the Platform"). This policy is designed in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable data protection regulations.

2. Data We Collect

Account Information: When you register, we collect your name, email address, and optional profile information (bio, avatar, social links). If you sign up via Google or GitHub OAuth, we receive your name and email from the respective provider.

Usage Data: We automatically collect information about how you interact with the Platform, including pages visited, prompts viewed, downloads, search queries, timestamps, and referral sources.

Device Information: We collect your IP address, browser type, operating system, and device identifiers for security and analytics purposes.

Account Information: All content on PromptAndSkills is free. We do not collect any payment or billing information from users.

Creator Content: If you are a creator, we store the prompts, descriptions, and metadata you upload to the Platform.

3. How We Use Your Data

We use your personal data to:

Provide, maintain, and improve the Platform.
Process transactions and send related notifications.
Personalise your experience with relevant content and recommendations.
Send you marketing communications (only with your consent, which you can withdraw at any time).
Detect, prevent, and address fraud, abuse, and security issues.
Comply with legal obligations under Indian law.
Generate anonymised, aggregated analytics to improve our services.

4. Legal Basis for Processing (DPDPA Compliance)

Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the following grounds:

Consent: You provide consent when you register, upload content, or opt in to marketing communications. You may withdraw consent at any time through your account settings.
Legitimate Use: We process data as necessary to provide the services you have requested, fulfil contractual obligations, and ensure platform security.
Legal Obligation: We may process data to comply with applicable Indian laws, regulations, or legal proceedings.

5. Data Sharing

We do not sell your personal data. We may share your data with:

Service Providers: Cloud hosting (Microsoft Azure), email delivery, payment processing, and analytics services that help us operate the Platform.
Legal Authorities: When required by Indian law, court order, or government regulation.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Cookie Policy

We use cookies and similar technologies on the Platform:

Essential Cookies: Required for the Platform to function properly — authentication tokens, session management, and security cookies. These cannot be disabled.
Analytics Cookies: Help us understand how users interact with the Platform, page views, and feature usage. These are anonymised and used solely for improving the user experience.
Preference Cookies: Remember your settings, such as theme preferences and language selections.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the Platform's functionality.

7. Data Retention

We retain your data as follows:

Account Data: Retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.
Usage Data: Retained in anonymised form for up to 24 months for analytics purposes.
Transaction Records: Retained for 7 years as required by Indian tax and financial regulations.
Creator Content: Retained for as long as the content is published. Deleted content is soft-deleted and permanently removed after 90 days.

8. Your Rights Under DPDPA

Under India's DPDPA, you have the following rights:

Right to Access: Request a summary of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent: Withdraw consent for data processing at any time through your account settings.
Right to Grievance Redressal: File a complaint with our Data Protection Officer or the Data Protection Board of India.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your data, including TLS encryption for data in transit, AES-256 encryption for data at rest, secure JWT-based authentication with short-lived access tokens, and regular security audits. While we strive to protect your data, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Cross-Border Data Transfers

Your data is primarily stored on servers located in India (Azure Central India region). In cases where data is processed outside India, we ensure adequate safeguards are in place as required by the DPDPA and any rules notified by the Central Government regarding cross-border data transfers.

11. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending an email to registered users. Your continued use of the Platform after such changes constitutes your acceptance of the updated policy.

13. Data Protection Officer

In accordance with DPDPA requirements, our Data Protection Officer can be contacted at:

Data Protection Officer

PromptAndSkills

Jaipur, Rajasthan, India

[email protected]

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at [email protected].