Privacy Policy

Introduction

ThatPrompt is a product of Black Lab Studios. This Privacy Policy describes how Black Lab Studios, Lda, a company registered in Portugal under NIF 519267532, at Rua da Alegria, N27, 1 andar, 4000-041 Porto ("Black Lab Studios", "we", "us", or "our"), collects, uses, and shares information when you visit thatprompt.ai (the "Website") or use the ThatPrompt desktop application (the "App"). We are the data controller for both.

We are committed to protecting your privacy and ensuring transparency about any data processing that occurs when you interact with our Website or App.

Information We Collect

Information You Provide

Browsing our Website does not require you to give us any personal information. However, you may choose to:

• Subscribe to our newsletter: If you choose to subscribe, your email address is collected and managed by our third-party service provider, Kit.com.
• Contact us via email: When you send us an email, we receive your email address and any information you choose to include in your message.

Your Prompts

The ThatPrompt desktop application stores your prompts locally on your machine in a SQLite database. Prompt enhancement and title generation run on a language model that you download during setup and that runs entirely on your own device.

Your prompt content is never sent to us. We do not receive it, store it, or process it on our servers. This is enforced in our codebase by an automated check that fails the build if any analytics event carries prompt text.

Your Account

ThatPrompt requires an account. When you register we store your email address and a hashed password on our servers. We use these to authenticate you, to send account emails such as password-set and password-reset links, and to contact you about your account.

Usage Analytics in the App

The App can send anonymous usage data to Microsoft Application Insights so we can understand which features matter most. This is switched off by default. We ask for your choice during setup, and you can change it at any time in Settings, under Privacy.

When enabled, these events describe actions and outcomes only. For example: which model you installed, how long a download took, how long an enhancement took, and whether it succeeded or failed. Prompt content is never included.

Feedback You Send

If you send feedback from inside the App, we store your message together with the email address of the account you are signed in with, so that we can reply to you.

Model Downloads

When you pick a model during setup, the App downloads the model file directly from Hugging Face, a third-party model host. That request goes to Hugging Face, not to us. Once the download has finished, enhancement works offline.

Information Automatically Collected

We use Simple Analytics, a privacy-friendly analytics service, to understand how visitors use our Website. Simple Analytics does not use cookies, does not collect personal data, and does not track visitors across websites. It only collects aggregated data such as page views, referrers, and browser type.

How We Use Your Information

We may use the information collected for the following purposes:

• To send product updates and early access news if you have subscribed
• To respond to your inquiries
• To create and authenticate your account, and to send account emails
• To reply to feedback you send from inside the App
• To understand which App features are used, if you have opted in to usage analytics
• To analyse Website traffic and improve user experience
• To comply with legal obligations

Third-Party Services

Kit.com

If you subscribe to our newsletter, your email address is stored and managed by Kit. Please refer to Kit's Privacy Policy for information on how they handle your data.

Simple Analytics

We use Simple Analytics to analyse Website traffic. Simple Analytics is a privacy-first analytics service that does not use cookies, does not collect personal data, and is fully GDPR compliant. You can learn more at Simple Analytics' Privacy Policy.

Hugging Face

Model files offered in the App's model picker are hosted on Hugging Face and downloaded directly from them. Please refer to Hugging Face's Privacy Policy for information on how they handle download requests.

Azure (Microsoft)

Our Website is hosted on Azure Static Web Apps. Our API, which handles account authentication, feedback, and version checks, is hosted on Azure. Optional App usage analytics are processed by Microsoft Application Insights, and account emails are delivered through Azure Communication Services. Please refer to Microsoft's Privacy Statement for information on their infrastructure practices.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your consent
• To comply with legal obligations, court orders, or legal processes
• To protect our rights, privacy, safety, or property

Data Retention

We retain your account record (email address and hashed password) for as long as your account exists. Feedback you send is retained so we can act on it and reply. Newsletter subscriptions are managed by Kit. Usage analytics, if you have opted in, are retained by Application Insights on a rolling basis.

We hold no prompt data at all, because none is ever sent to us. Your prompts and the model you download are stored locally on your device and are entirely under your control.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

For EU Residents (GDPR)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

For California Residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination

To exercise any of these rights, please contact us at hello@blacklabstudios.com.

Children's Privacy

Our Website and App are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

Security

We implement appropriate technical and organisational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Our Website and API are hosted on Azure infrastructure. If you are accessing our services from outside the EU, please be aware that your information may be transferred to, stored, and processed in regions where our servers are located.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Black Lab Studios, Lda
Rua da Alegria, N27, 1 andar, 4000-041 Porto, Portugal
NIF 519267532
Email: hello@blacklabstudios.com
Website: blacklabstudios.com