Legal

Privacy Policy

We believe in radical transparency. Here is exactly what data we collect, why we collect it, and how we protect it — with no legal jargon obscuring the truth.

Last updated: October 2, 2025

01

Information We Collect

    We collect the minimum information necessary to provide AeroPrompt's services:

  • Email address — collected when you create an account. Used for authentication, billing communication, and critical product updates only.
  • Payment information — processed securely and exclusively by our payment provider (Razorpay). AeroPrompt never stores raw card data on our servers.
  • Prompt data — when you trigger an optimization, the content of your active prompt field is sent to our inference backend for processing. This data is processed ephemerally and is never stored, logged, or used for AI model training.
  • Usage metrics — anonymous, aggregated data such as daily optimization counts. No personal identifiers are attached.
02

How We Use Your Information

    Your data is used strictly to operate and improve AeroPrompt:

  • Account management — to authenticate you and maintain your subscription status.
  • Prompt optimization — your active prompt is securely routed to our FastAPI inference backend, which calls a third-party AI API (OpenRouter). The response is returned directly to your browser. No prompt content is retained.
  • Billing — your payment details are processed by Razorpay under their PCI-DSS compliant systems. We receive only a transaction confirmation token.
  • We do not sell, rent, or share your personal data with advertisers or data brokers. Ever.
03

Data Security

    Security is not an afterthought at AeroPrompt:

  • Encrypted transit — all data between your browser, our servers, and third-party APIs is transmitted over HTTPS/TLS 1.3.
  • No prompt retention — prompt content is processed in memory and discarded immediately after optimization. It is never written to disk or a database.
  • Supabase Auth — user authentication uses Supabase's battle-tested JWT-based auth infrastructure with rotating refresh tokens.
  • Principle of least privilege — the Chrome extension only requests permissions to read the active text field that you explicitly trigger. It does not have broad host permissions.
04

Your Rights

    You retain full control over your data:

  • Access — you can request a copy of any personal data we hold about you.
  • Deletion — you can request complete deletion of your account and all associated data at any time by emailing us.
  • Portability — your saved templates and settings can be exported on request.
  • Opt-out — you may opt out of non-essential communications at any time.
  • To exercise any of these rights, contact us at contact.aeroprompt@gmail.com.
05

Third-Party Services

    AeroPrompt integrates with a small number of trusted providers:

  • OpenRouter — routes prompt text to AI inference models. Subject to OpenRouter's privacy policy. Prompt data is not used for model training per their API terms.
  • Razorpay — handles payment processing. Subject to Razorpay's privacy policy. We receive only payment confirmation, never raw card data.
  • Supabase — provides authentication and (optionally) encrypted cloud sync for Pro users. Data is stored in their EU/US data centers with encryption at rest.
  • Vercel — hosts the AeroPrompt website. Standard web server access logs may apply per Vercel's privacy policy.
06

Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out:

  • Email: contact.aeroprompt@gmail.com
  • We aim to respond within 48 business hours.

Our commitment: AeroPrompt is a developer tool, not an ad platform. Your prompts, your data, and your trust are not products we monetize. If anything in this policy is unclear, email us — we will explain it plainly.