How Promptivity handles your data

The short version

Promptivity can be used without an account. The invitation gate uses necessary browser storage to remember that the beta access code has been verified and that the Terms were accepted; the password itself is not stored in your browser. My Promptivity can keep situations locally on the browser and device you use. Optional analytics is only sent after you choose “Accept all” in the cookie banner.

If you deliberately submit pilot feedback or a structured outcome, Promptivity stores only the fields described below. The raw situation, draft and generated output are not attached to those measurement records.

Controller, purposes and legal basis

Promptivity is independently operated by Mikkel Munksgaard-Street in Denmark, who is the data controller for personal data processed by Promptivity.

Information needed to verify beta access and provide the product you request is processed for operating the user relationship and delivering the service. Necessary security, abuse prevention, access control and reliability are also supported by the legitimate interest in operating a controlled and secure beta.

Optional analytics is based on your consent and is not sent when you choose “Necessary only”. Structured pilot feedback and outcome measurement that you deliberately submit are processed for the legitimate interest in evaluating and improving the product, with the data minimised as described below.

Beta access and Terms acceptance

When you enter the invitation access code, Promptivity sends the code to the server only to verify whether access should be granted. A successful verification sets a strictly necessary access cookie so you do not need to re-enter the code on every page load. The cookie records access state and the applicable beta-access version; it does not contain the access code itself.

Selecting Continue at the invitation gate also records the product state associated with your active acceptance of the Terms of Use and acknowledgement of this Privacy Notice. This acknowledgement is not consent to optional analytics.

What we process when you use Promptivity

The brief and relevant context needed for your current request are sent to Promptivity's server-side AI provider so the requested analysis and finished work can be produced. If you explicitly continue the same saved situation, relevant context from that situation can be included with the new request so Promptivity can assess what changed.

AI request handling

Promptivity currently sends AI requests with API response storage disabled (store: false) and uses a 30-minute prompt-cache setting for repeated prompt material. Those application settings do not justify a claim that the AI provider keeps no operational, security or abuse-prevention records; provider handling remains subject to the applicable service configuration, terms and privacy documentation.

Service providers and international processing

Promptivity uses specialist service providers including Vercel for application hosting and delivery, Supabase for backend database services, and OpenAI for AI processing. These providers process data on Promptivity's behalf or as otherwise described in their applicable terms and privacy documentation.

Some providers operate internationally and processing can involve countries outside the EEA depending on the provider and configuration. Where GDPR requires a transfer mechanism, Promptivity relies on the applicable safeguards made available for that service.

My Promptivity and local history

In the no-account experience, My Promptivity stores situation history locally in your browser. This can include your situation text, Promptivity's interpretation and recommended move, finished work and updates you explicitly record. Local history is not an account, cloud backup or cross-device sync.

Clearing browser storage, using a different browser or device, private-browsing behaviour, browser policies or storage limits can remove that history. You can delete individual situations from My Promptivity.

Pilot feedback and outcome measurement

After a completed output, Promptivity may ask whether the result was useful. Sending feedback is optional and requires an explicit action. The submitted record can include your rating, selected reason, an optional comment and limited product categories. The feedback submission does not include the text of your situation, your draft, the generated output, your name or your email address.

If you choose to record an outcome for a resolved situation, Promptivity can submit a structured outcome category, whether the recommended move was used, turn count and output type. The raw situation, stakeholder reply and generated work are not attached to that structured measurement record.

Cookies, local storage and analytics

Necessary browser storage is used for core functionality including beta access, usage protection, your cookie preference and locally saved My Promptivity situations. This necessary storage works independently of optional analytics consent because it is required to provide the product features you request.

For rate limiting and abuse prevention, the server derives pseudonymous hashes from the Promptivity viewer identifier and, where available, the request IP address, and records usage counters in a separate usage backend. These counters are operational metadata and do not contain the text of your situation or generated output.

If you accept optional analytics, Promptivity can record product events such as whether a situation was completed, copied, refined or explicitly rated, together with pseudonymous browser or session identifiers and technical metadata. Optional analytics is not sent when you choose “Necessary only”.

Retention

The beta access cookie is configured to expire with the current pilot access period. My Promptivity history remains in local browser storage until you delete a situation, clear browser storage or the browser removes it. Structured analytics, feedback and outcome measurements are retained only while reasonably necessary for pilot evaluation, product improvement, security or related operational purposes and are deleted or anonymised when no longer needed.

Your data protection rights

Depending on the circumstances, GDPR can give you rights to access personal data about you, correct inaccurate data, request deletion or restriction, object to certain processing and receive data you provided in a portable format. Where processing is based on consent, you can withdraw that consent for future processing.

Because Promptivity can be used without an account and some pilot records use pseudonymous identifiers rather than your name, Promptivity may need enough information to identify the relevant record and may not be able to link a particular pseudonymous record to you from your identity alone.

Contact

Privacy questions or rights requests can be sent to mikkelstreet@outlook.dk. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet).