PromptLab.ai
Legal

Privacy Policy

Service operated by Akkaruy Spzso. Last updated: June 2026.

1. Who we are

Akkaruy Spzso is the data controller for personal data processed through PromptLab.ai. For any privacy request, contact support@promptlab.ai. This policy explains what we collect, why, and your rights.

2. Data we collect

Account data: email, name/nickname, avatar colour, country, password hash, role, email-verification status.

Content & usage data: the prompts you write or buy, photos you upload as references, generated images/videos, credit and royalty balances, purchases, reviews, collections, and reports you submit.

Payment data: top-ups are processed by our payment provider; we store transaction records (amount, status, reference) but never your full card details.

Technical data: IP address (also used to estimate country/city for payments), device/browser info, and event logs used for security, fraud prevention and operating the service.

Moderation data: when content is blocked, we log the categories and a short excerpt for safety and abuse-prevention purposes.

3. How and why we use data

To run the service: authentication, generating content, charging credits, paying royalties, purchases, and support.

For safety: moderation, fraud and abuse prevention, and enforcing our Terms.

To improve the service and, only with your consent, to send product or marketing emails (you can opt out at any time).

Legal bases (GDPR): performance of our contract with you; our legitimate interests in security and improving the service; your consent (e.g. marketing); and compliance with legal obligations.

4. AI providers & processing

To generate content we send your prompt text, parameters and any reference image to the AI provider you use — for example OpenAI (GPT Image), Google (Imagen, Gemini / Nano Banana, Veo), Black Forest Labs / fal (Flux), Stability AI, Runway and Kling (via fal). Only the data needed for that generation is sent.

Prompts are auto-translated to English and may be passed to a language model for moderation and prompt preparation. Generated results are stored in secure cloud storage and linked to your account.

5. Sharing & sub-processors

We do not sell your personal data. We share data only with service providers that help us operate, under data-processing agreements: cloud hosting and database/storage (Vercel, Supabase), email delivery (Resend), the payment gateway (Impaya / SAFEPAY), and the AI providers listed above.

We may disclose data where required by law, to enforce our Terms, or to protect the rights and safety of users and the public.

6. International transfers

Some providers are located outside the EU/EEA (e.g. in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the service, then for a limited period to meet legal, accounting and security obligations. You can ask us to delete your account and associated data, subject to those obligations.

8. Your rights

Subject to applicable law (including the GDPR), you can request access to your data, correction, deletion, restriction or portability, and you can object to certain processing or withdraw consent at any time. To exercise these rights, write to support@promptlab.ai.

You also have the right to lodge a complaint with your local data protection authority.

9. Cookies & security

We use essential cookies for sign-in and security, and basic analytics to operate and improve the site. We apply reasonable technical and organisational measures to protect your data, but no method of transmission or storage is completely secure.

10. Children & changes

The service is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy; the current version is always on this page and material changes take effect when posted. Privacy questions: support@promptlab.ai.

See also our Terms of Service.