Privacy Policy

This Privacy Policy explains how READPROMPT PRIVATE LIMITED ("ReadPrompt", "we", "us", or "our") collects, uses, shares, and protects personal data when you use the ReadPrompt website, management application, documentation, APIs, and related services (collectively, the "Services").

For data-protection purposes, ReadPrompt is the controller of personal data we collect about account holders, website visitors, and other individuals who interact directly with the Services. When an organization uses the Services to process its own content, that organization is generally responsible for ensuring it has a lawful basis to provide that content.

Account and workspace information

We collect account details such as your name, email address, authentication credentials, organization and project details, user roles, and API-key metadata. We also collect information you choose to enter into prompt configurations, including source prompts, schemas, versions, model targets, and routing preferences.

Execution information

ReadPrompt processes prompt instructions and validated runtime variables to execute a request. By default, we do not retain full execution inputs or outputs in execution logs. We retain execution metadata, such as request identifiers, selected provider and model, status, latency, token counts where available, routing and fallback information, and safe error details, for up to 180 days.

Technical and security information

We may collect IP address, device and browser details, timestamps, session and authentication events, audit activity, and diagnostic information needed to operate, secure, and improve the Services.

Communications

When you contact us, we collect the information in your request and our correspondence with you.

• Provide, authenticate, maintain, and support the Services.
• Optimize, route, execute, validate, and troubleshoot prompt workflows you configure.
• Prevent abuse, fraud, unauthorized access, and service disruption.
• Respond to requests, enforce our agreements, and comply with legal obligations.
• Analyze aggregate and de-identified service performance to operate and improve the platform.

We share information only as needed to provide and protect the Services, including with:

• Model and infrastructure providers: Prompt content and runtime variables may be sent to the third-party model provider selected through the targets configured for your prompt. These providers process data under their own terms and privacy practices.
• Service providers: We use providers that support hosting, managed databases, observability, authentication, email, and customer support, subject to appropriate contractual and security commitments.
• Organization users: Authorized users in your organization may view workspace information according to their role and permissions.
• Legal and safety recipients: We may disclose information when required by law or when reasonably necessary to protect users, ReadPrompt, or the public.
• Corporate transactions: Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy or successor protections.

We do not sell customer prompt content or personal data.

We retain personal data for as long as necessary to provide the Services, maintain security and records, resolve disputes, and comply with legal obligations. Execution metadata is retained for up to 180 days unless a longer period is required for security, legal compliance, or an agreed enterprise arrangement.

Account and workspace data remains available while the relevant account is active. You may request deletion or export of personal data by contacting us. We may retain limited information where necessary for fraud prevention, accounting, security, legal compliance, or dispute resolution.

ReadPrompt is based in India and our providers may process information in India and other countries. When transferring personal data internationally, we use safeguards required by applicable law, which may include contractual protections and other lawful transfer mechanisms.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of your personal data. Where processing is based on consent, you may withdraw consent at any time. You may also have the right to complain to your local data-protection authority.

To make a request, contact us using the details below. We may need to verify your identity and authority before completing a request. Organizational users should first contact their organization administrator where the request concerns organization-managed content.

We use reasonable administrative, technical, and organizational measures designed to protect information. These include access controls, encrypted transport where supported, credential safeguards, role-based permissions, and monitoring for service integrity. No service can guarantee absolute security, so you should protect your credentials and report suspected unauthorized access promptly.

The Services are intended for business and professional use and are not directed to children. Do not use the Services to submit personal data about children unless you have an appropriate lawful basis and all required notices or consents.

We may update this Policy as the Services or applicable law changes. We will post the revised version here and update the "Last updated" date. For material changes, we will provide additional notice when required by law.