Privacy Policy — Prompt House

1. Who we are

Prompt House is a subscription library of AI image prompts and outputs for brands and creators, operated by Stagg Street Media LLC, doing business as Prompt House. This policy explains what we collect when you visit the site or use your account.

2. What we collect

Account info — your email address, and, if you sign in with Google, the basic profile details Google returns (name, email, avatar). We never receive your Google password.
Billing info — subscription status and plan. Payments run through Stripe; we never see or store your full card number.
Usage data — which prompts you view, copy, favorite, or download, plus basic device and browser information.
Things you send us — contact form messages, prompt/shoot requests, and onboarding survey answers.

3. How we use it

To give you access to the library and manage your subscription
To send transactional email (sign-in links, receipts, account notices)
To decide what to shoot next and improve search, tags, and recommendations
To respond to support and request submissions
To detect account sharing, scraping, and other abuse
To measure the performance of our advertising on Meta/Facebook and to improve our campaigns

We do not sell your personal data.

4. Who we share with

We share data only with the providers we need to run Prompt House:

Stripe — payments, subscriptions, and the billing portal
Lovable Cloud — hosting, database, authentication, and file storage
Google — only if you choose Google sign-in
Klaviyo — marketing email and product updates, which you can opt out of at any time
Meta / Facebook — ad measurement and conversion tracking. We share only the actions you take on our site (such as signing up, starting checkout, or subscribing) so we can measure ad performance. Meta may use cookies and similar technologies in regions where consent is required; you will see a consent banner in those regions and can decline.
Our transactional email provider — to deliver sign-in links and account email from notify.prompthouse.co
AI providers — we send our own prompt and image assets (never your personal data) to AI services that generate tags, descriptions, and search metadata for the library

Each processes data on our behalf under its own privacy policy and standard data-processing terms. We may also disclose data if legally required, or as part of a business transfer.

5. Cookies

We use essential cookies and local storage to keep you signed in and remember preferences such as dismissed banners and filters.

In regions that require consent, we also ask before loading Meta/Facebook measurement cookies. If you decline, those cookies are not loaded. You can change your choice anytime by clearing site data or contacting us.

6. Data retention

We keep account data while your account is active and for a reasonable period afterward to handle billing, tax, legal, and audit needs. Usage events may be retained in aggregated or de-identified form. You can request deletion at any time (see below).

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email us through the contact page and we'll respond within a reasonable time. Deleting your account does not automatically refund an active subscription — see the Terms.

8. US state privacy rights

If you live in California, you may request, once a year and free of charge, the categories of personal information (if any) we disclosed to third parties for their direct marketing purposes in the preceding calendar year. We do not sell personal information, and we do not share it with third parties for their own direct marketing. Nevada residents may opt out of any future sale of covered personal information by contacting us — please note we do not currently sell personal information as defined under Nevada law.

9. Security

Sign-in is passwordless, so there's no password for us to store. Data is transmitted over encrypted connections, original assets live in private storage served through expiring signed links, and database access is restricted by row-level security policies. No system is perfectly secure; if you spot a vulnerability, report it via the contact page.

10. Children

Prompt House is not intended for users under 13, and we don't knowingly collect data from children.

11. International users

Our infrastructure may store and process your data in regions outside your home country, including the United States. By using the service, you consent to that transfer.

12. Changes

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

13. Contact

Questions about this policy? Reach us through our contact page, or write to Stagg Street Media LLC (DBA Prompt House), 5542 Lightning Whelk Ln., Lakewood Ranch, FL 34211.