Privacy Policy

Promptoll (“Promptoll”, “we”, “us”) provides an AI gateway that routes API requests to multiple large language model providers through a single OpenAI-compatible endpoint. This Privacy Policy explains what we collect, how we use it, and the choices you have. It applies to our website, API, and mobile apps.

1. Information we collect

• Account data. Your email address and a securely hashed password. We never store your password in plain text.
• Usage data. Per-request logs including the model used, token counts, latency, cost, and timestamps. These power your dashboard, billing, and usage logs.
• Billing data. Your account balance and a record of top-ups. Card details are handled entirely by our payment processor and never reach our servers.
• API keys. We store a one-way hash of each API key you generate, never the raw key after creation.

2. AI request content

When you send a request through Promptoll, the prompt and related parameters are forwarded to the upstream model provider you selected (or that our router selects on your behalf) so the request can be fulfilled. We do not use your request content to train models. We retain request metadata (model, token counts, latency, cost) for billing and your logs, but we do not sell your request content.

3. How we use your data

• To provide, operate, and secure the service.
• To calculate usage, maintain your balance, and process top-ups.
• To show you dashboards, request logs, and cost breakdowns.
• To send essential account email (verification, password reset, billing notices).
• To detect abuse, fraud, and violations of our terms.

4. Third-party processors

We share data only with the processors needed to run the service:

• Upstream AI providers. Your request content is forwarded to the model provider that serves your request.
• Payment processor. Top-up payments are processed by our third-party payment provider, which handles your card data under its own privacy policy.
• Email delivery. Transactional email is sent via our email delivery provider.
• Hosting & infrastructure. Our servers and databases run on cloud infrastructure providers.

5. Data retention

We keep account and usage data for as long as your account is active. When you delete your account, we permanently delete your account and its associated data (API keys, usage logs, balance records). Limited records may be retained where required for legal, tax, or fraud-prevention purposes.

6. Your rights and account deletion

You can access and update your account information at any time. You can permanently delete your account and all associated data directly in the app under Settings → Delete Account, or by contacting us at the address below. Depending on your location, you may also have rights to access, correct, export, or restrict the processing of your personal data.

7. Security

We protect your data with encryption in transit, hashed credentials, scoped API keys, and access controls. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

8. Children

Promptoll is a developer tool and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction).

9. International transfers

Promptoll operates globally. Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

11. Contact

Questions about this policy or your data? Contact us at slm2026@chhqvip.com.