Privacy Notice
Effective 10 November 2026 · Data Solutionz Limited
This notice explains how Data Solutionz Limited (company no. 14984453, registered in England and Wales) handles personal data in Promptra. We have two roles, explained separately below. ICO registration: ZC293512.
1. Summary
- Content your business puts into Promptra (your brief, brand profile, logo, the posts and the people or customers they mention): your business is the controller and decides why that data is used. We are its processor (section 3).
- Information about the people who use Promptra (your email, sign-in records, approvals and edits, billing contact): we are the controller (section 2).
- We do not sell personal data or use it for advertising, and we do not use your content to train AI models.
2. People who use Promptra: we are the controller
What we collect
- Your work email address and the role your business gives you (owner or member).
- Sign-in records (when sign-in links were requested and used) and the app settings you choose (for example your theme).
- What you do with each post (approve, edit, reject) and the budget requests and approvals you make, with the time. These are shown to your business's account owner.
- For the person who subscribes: billing name and the payment status Stripe reports to us. We never see card numbers.
- Messages you send us.
Why, and on what lawful basis
- To provide the service your business signed up for, sign you in and keep it secure: performance of our contract with your business, and our legitimate interest in running a secure service.
- To send you sign-in links, "your pack is ready" and "post today" emails, budget alerts and account notices: the same bases. These are service emails, not marketing.
- To take payment and keep accounting records: contract and legal obligation.
How long we keep it
While your account is active, and until 7 days after the account owner asks us to delete it. Billing records are kept for six years as UK tax law requires. Sign-in request logs are kept for 30 days.
3. Your business's content: we are the processor
When your business uses Promptra it instructs us to store and process its content. For personal data in that content we commit to the following (UK GDPR Article 28):
- We process it only to provide Promptra and on your business's documented instructions: these terms, and what your users do in the app.
- Your brief, brand profile, goal and call to action are sent to our AI provider to write your draft posts. We send the business text you gave us, never your sign-in or payment details, and the provider does not train on it.
- Everyone at Data Solutionz who can access your content is bound by confidentiality. By default we see only counts and contact details, not your content. We open a business's content only when it asks us for help; that access is read-only, limited to at most 24 hours, needs a written reason the business can see, and is listed in its account, where the business can end it at any time.
- Each business's data is separated by security rules in the database itself. Every approval, edit and posting attempt is recorded and cannot be altered afterwards.
- Data is encrypted in transit and at rest. Logos are stored privately. Post images are made by our own software, not an outside image service. Images made for approved posts are stored at a public web address so that social platforms can fetch them, and are removed when the post is no longer approved.
- We use the sub-processors listed below and will tell account owners before adding a new one, so they can object.
- We will help your business respond to requests from people exercising their rights, where the information is in Promptra.
- We will tell the account owner without undue delay, and within 48 hours of becoming aware, of any personal data breach affecting your business's content.
- When the account owner deletes the account in Settings › Account, we delete its content 7 days later (you can cancel until then; backups roll off within a further 12 weeks). Before that, the owner can download everything as a .zip. A member can leave an account at any time.
4. Who else handles data (sub-processors)
| Provider | What for | Where, and safeguards |
|---|---|---|
| Supabase | Database, file storage (logos, post images) and sign-in accounts | Hosted in the UK (London, AWS eu-west-2). Supabase Inc. is a US company; staff access is covered by the UK International Data Transfer Addendum / UK–US Data Bridge. |
| Vercel | Runs the Promptra web app | Vercel Inc. is a US company (UK–US Data Bridge / standard contractual clauses with the UK Addendum). |
| Resend | Sends sign-in links, pack-ready and post-day emails, and budget alerts | EU (Ireland). Emails carry counts, dates and a link to the app, not your post text. |
| Stripe | Takes subscription payments | Stripe Payments Europe / Stripe Inc. Card details go to Stripe directly; we never see or store them. |
| Anthropic | Writes the draft posts in your weekly pack from your brief and brand profile | US. Receives the business text you give us (brief, brand profile, goal and CTA), never your sign-in details or payment data. Anthropic does not train its models on API data. |
| Meta (Facebook) | Publishes an approved Facebook post to your Page, only if you connect a Page and switch posting on | Meta Platforms Ireland. Receives the approved post text and image. Off by default; most posts are copied by you from the app. |
| Google Fonts | Loads the app's typefaces | Your browser's IP address reaches Google when a page loads. No cookies are set. |
5. Your rights
You can ask to see, correct or delete personal data we hold about you, to restrict or object to how we use it, or to receive it in a portable form. Email hello@datasolutionz.co.uk. We reply within one month. If your request is about content a business keeps in Promptra, we will refer it to that business.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, but please contact us first so we can try to put it right.
6. Cookies
Promptra uses only the cookies needed to keep you signed in. There are no analytics or advertising cookies.
7. Changes
We will update this notice when how we handle data changes, and tell account owners about material changes. See also our Terms of service.
Contact
Data Solutionz Limited · Registered office: 7 St. Ebbes Lane, Buckingham, England, MK18 1XZ · hello@datasolutionz.co.uk · ICO registration: ZC293512