Privacy Policy
Last updated: February 19, 2026
1. Information We Collect
We collect the following types of information when you use PromptPop:
- Account Information: Name, email address, and hashed password when you create an account
- Generation Data: Prompts, settings, and generated images associated with your account
- Payment Information: Payment details are processed securely through Stripe and are not stored on our servers
- Usage Data: Token balance, transaction history, and generation statistics
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process payments and manage your token balance
- Store your generated images in your personal gallery
- Improve the Service and user experience
- Communicate important updates about your account
3. Data Security
We take security seriously. Your password is hashed using bcrypt and is never stored in plain text. Payment processing is handled entirely by Stripe, a PCI-compliant payment processor. All data is transmitted over encrypted HTTPS connections.
4. Data Retention
Your account data and generated images are retained as long as your account is active. If you delete your account, your personal data and generated images will be permanently removed from our servers. Transaction records may be retained for legal and accounting purposes.
5. Third-Party Services
We use the following third-party services:
- Stripe: For payment processing
- InvokeAI/Stable Diffusion: For AI image generation (self-hosted)
Your prompts and generated images are processed locally on our servers and are not shared with external AI services.
6. Cookies
We use essential cookies for authentication and session management. These cookies are necessary for the Service to function properly and cannot be disabled.
7. Your Rights
You have the right to:
- Access your personal data through your account settings
- Update or correct your profile information
- Download your generated images from your gallery
- Delete your account and associated data
8. Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page.
10. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us through the Service.