PromptShop Privacy Policy

This Privacy Policy is effective from [19/01/2026] ("Effective Date").

This policy has been compiled to clarify all essential information about our handling of your personal data and your corresponding rights ("Privacy Policy").

1. Responsibility for this Privacy Policy

[PromptShop inc] ("PromptShop", "we", "us") is responsible for the collection and processing of your personal data in connection with the provision of services (except payment services for sellers), and for compliance with relevant privacy and data protection laws and this Privacy Policy.

The responsibility as controller may be changed or nominated to a new entity at our discretion, with such changes to be effective per clause 2 below.

2. Scope and updates of this Privacy Policy

This Privacy Policy applies to all uses of PromptShop websites, applications, products, and services (collectively, "Platform"), regardless of device or access method.

We may update this policy as our Platform or legal requirements change. Updates will be communicated via the Platform or other appropriate channels, and will be effective as of the Effective Date referenced at the top of each updated and published Policy.

3. Use of the payment services for sellers

Your personal data may be processed by our or third-party entities depending on your location and depending on what assistance is needed to process any transaction agreed to by you on the Platform.

4. Disclosure to other entities overseas

a. All servers, and thus the information and data (including personal data) controlled by PromptShop (excluding third-party systems), are currently hosted in the United States.

b. Personal data collected may also be stored and processed in other countries where PromptShop or its affiliates, subsidiaries, contractors, or authorized agents operate data storage infrastructure. By using Platform, you agree to the cross-border transfer of your information. PromptShop may share your personal information with affiliated entities for storage or processing on its behalf, and such transfers may occur worldwide.

c. PromptShop requires these parties to handle the information in accordance with this Privacy Policy. Specifically, any personal information you provide might be transferred to and processed on systems located in the U.S. and elsewhere. We take reasonable measures to protect your Personal Information in line with applicable data protection standards.

5. Data protection officer and contact

PromptShop have appointed data protection officers to oversee the protection of your personal data and privacy compliance. You can contact the data protection officer or our privacy team for questions or complaints by emailing [privacy@promptshop.co].

6. What personal data we collect

For the purpose of this Privacy Policy, "Personal Data" includes:

a. name;
b. email address;
c. address;
d. contact details;
e. image and likeness, animated or real;
f. account details;
g. decision and usage data from your account;
h. communications on the Platform;
i. Any content or information you provide to the Platform; and
j. The aggregation of information or data collected from the Platform that may indicate behaviour assumptions.

7. When do we collect personal data

We collect your personal data when you:

a. use the Platform;
b. create a new PromptShop account;
c. provide us with information via any input point to the Platform including web forms, email communication or other receipt of such information;
d. add or update information in your PromptShop account;
e. participate in online community discussions; or
f. otherwise interact with us, including on social media accounts we have access to.

We also collect personal data from other sources such as other PromptShop affiliates, credit agencies or bureaus, and data providers.

8. Purposes and legal bases for data processing and categories of recipients

We process your personal data for various purposes and based on several different legal bases that allow this processing.

For example, we process your personal data to;

a. provide and improve services on the Platform, including to train our AI-models to accelerate service improvements as further described in clause 13,
b. provide you with a personalised user experience on the Platform,
c. contact you about your PromptShop account or behaviour relating to it,
d. provide customer service,
e. provide you with personalised advertising and marketing communications, and
f. detect, prevent, mitigate and investigate fraudulent or illegal activity.

We also share your information with third parties, including service providers acting on our behalf, for the purposes referenced above. In addition, we may share your personal data among PromptShop affiliates to fulfil our compliance with you under the User Terms.

9. Storage Duration

We retain your personal data only as long as necessary for the purposes described or as required by law (e.g., tax, accounting, compliance). Data is deleted or anonymised when no longer needed. In some cases, processing may be restricted instead of deleted, such as when required for legal claims.

10. Rights as a data subject

You have the right to:

a. Access your personal data
b. Request correction or deletion
c. Restrict or object to processing
d. Request data portability
e. Withdraw consent (where processing is based on consent)
f. Request the removal or reduction of your personal data's involvement in training AI- models; or
g. Lodge a complaint with a supervisory authority.

You can exercise these rights by requesting the same over email to [privacy@promptshop.co]. You acknowledge that a request for changes to the personal data we hold may have an impact on the services we are able to provide you on the Platform.

11. Cookies & similar technologies

We use cookies only for the purposes of delivering, updating, monitoring, improving the Platform and what services we offer you, and maintaining security on the Platform by detecting, preventing and responding to any type of threats or incidents. We may collect information through those cookies. If you do not wish to accept these cookies and you decide to disable them, you will not be able to access the Platform or have the services available to you reduced in function or amount. You can manage your cookie preferences on the Platform.

12. Data security

The security of your personal information matters.

PromptShop adheres to commonly accepted industry practices, employing appropriate administrative, physical, and technical safeguards to protect personal information. However, no internet transmission or electronic storage method is completely secure. Consequently, although PromptShop uses commercially reasonable measures to protect personal information, absolute security or confidentiality cannot be guaranteed. By using the Platform, you accept this risk. If an incident affects your Personal Information, PromptShop will responsibly notify you as soon as practicable.

Note that some personal information and other data you provide while using the Platform may be stored on your device (even if PromptShop does not collect it). You are solely responsible for securing your device against unauthorized access, which includes access to your account and control over all content, data, and information (including personal information) on the Platform. You are also responsible for keeping your password and other confidential account credentials private. You indemnify PromptShop for any loss, damage, or claim arising from unauthorized access to your account.

13. PromptShop and AI

a. Responsible AI

As referenced above, PromptShop uses AI (owned by us and third parties) to enhance our services, including but not limited to customer support, product features, user experience, customer service, listing improvements, marketing and fraud detection. Personal data may be used to train and improve AI models, with privacy safeguards such as data masking and encryption policy resulting in improved privacy. Per clause 9, you have the right to reduce or eliminate to the use of your personal data as referenced herein.

b. AI development and training

Where permitted under applicable law and this Privacy Policy, we use personal data collected from our users to train, test, validate and align our own AI models as well as third-party AI models and systems that we use for the purposes outlined in this Privacy Policy. We may combine personal data from our users with data from external sources (e.g. from publicly available sources). The use of personal data for AI development and training is based on our legitimate interest to achieve the improvement of the Platform for our users. When training, testing, validating and aligning AI models, we take appropriate steps to mitigate potential privacy impacts (e.g. through filtering, data masking, differential privacy techniques). Where applicable, our steps are based on data protection impact assessments and the legitimate interest assessment that we carry out. These take into account the purpose of the model, the need and suitability of certain training data, as well as measures that can be reasonably taken during training and thereafter.

13. Specific Privacy Disclosures or Acknowledgements

For region/state/country specific privacy disclosures, please see [Regional Disclosure Page], and the below.

a. "Do Not Track"

On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators to disclose how they respond to "Do Not Track Signals"; and whether third parties collect personally identifiable information about users when they use online services. The Company honors "do not track" signals and does not track, use cookies, or use advertising when a "do not track" mechanism is in place. The Company does not authorize the collection of personally identifiable information from our users for third party use through advertising technologies without separate member consent.

California Civil Code Section 1798.83 also permits customers who are California residents to request certain information regarding Our disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, please send an email to [privacy@promptshop.co]. Please note that the Company is only required to respond to one request per customer each year.

b. Protection of Children's personal Information

The Platform is neither directed to nor structured to attract children under the age of 13 years. Accordingly, PromptShop does not intend to collect personal information from anyone it knows to be under 13 years of age. PromptShop will direct potential users under 13 years of age not to use the Platform. If PromptShop learns that personal information of persons less than 13 years of age has been collected without verifiable parental consent, it will take the appropriate steps to delete this information and where appropriate, restrict access to the relevant accounts.

14. Data Collection Practices (Clarification)

PromptShop collects information directly from users, automatically through the Platform, and from third-party services. This includes:

• Account Information: name, email address, login credentials, and profile data.
• Usage Data: interactions with the Platform, features used, session activity, logs, and performance metrics.
• Device and Technical Data: IP address, browser type, device identifiers, operating system, and diagnostic data.
• User Content: prompts, uploaded files, communications, AI-generated outputs, and other materials submitted to the Platform.
• Transaction Data: billing details and purchase history processed through payment providers.
• Integration Data: information received when users connect third-party services (for example, Shopify, Slack, and messaging platforms).

Data is collected only to the extent necessary to operate, improve, secure, and provide Platform services.

15. Data Storage and Security Practices (Clarification)

PromptShop stores personal data on secure cloud infrastructure and service provider systems located primarily in the United States. Data may also be stored in other jurisdictions where our service providers operate.

Storage safeguards include:

• Encryption in transit using industry-standard protocols (for example, TLS).
• Encryption at rest where supported by infrastructure providers.
• Access controls and authentication mechanisms that limit internal access to authorized personnel.
• Monitoring and logging systems designed to detect unauthorized access or misuse.

Personal data is retained only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, it is deleted, anonymized, or securely archived.

16. Data Usage Practices (Clarification)

PromptShop uses collected information for the following primary purposes:

• Service Delivery: operating the Platform, enabling AI agent functionality, and providing requested features.
• Account Management: authentication, account creation, billing, and customer support.
• Personalization: improving user experience and tailoring content or recommendations.
• Security and Fraud Prevention: protecting users, detecting abuse, and maintaining system integrity.
• Analytics and Improvement: analyzing usage patterns to improve performance and develop new features.
• Communications: sending service-related notifications, updates, and support responses.
• Marketing: providing promotional communications where permitted by law and user preferences.
• AI Development: training, testing, and improving AI systems as described in existing clauses.

PromptShop does not sell personal data to third parties. Data is shared only with service providers or partners necessary to operate the Platform, comply with law, or fulfill user requests.

17. Third-Party Processors and Service Providers (Clarification)

PromptShop may share personal data with third-party vendors that perform services on our behalf, including:

• Cloud hosting providers
• Payment processors
• Analytics providers
• Customer support tools
• Integration partners connected by the user

These parties are contractually required to process personal data only for authorized purposes and to maintain appropriate security safeguards.

18. User Controls and Choices (Clarification)

Users may control their data through:

• Account settings and profile management tools
• Requests to access, correct, or delete personal data
• Opt-out mechanisms for marketing communications
• Requests regarding AI training participation as described in existing clauses

Requests may be submitted via privacy@promptshop.co.