Prompt Architect — Privacy Policy

Effective date: March 2, 2026

Prompt Architect is a Chrome extension that helps users build optimized AI prompts from plain-language task descriptions. This policy explains what data we collect, how it is used, and your choices.

1. Data We Collect

Task descriptions you submit. When you click "Assess & Build Prompt," the text you entered is sent to Anthropic's Claude API via our secure Cloudflare Worker proxy for analysis. This is the only user-generated content that leaves your browser.

IP address. Our proxy server sees your IP address for the purpose of rate limiting (preventing abuse). IP-based counters are stored in Cloudflare KV with a 24-hour TTL and automatically deleted.

Subscription status. If you subscribe to Pro, ExtensionPay (our payment processor) stores your email address and payment status. We do not have access to your credit card number or payment details.

2. Data We Do NOT Collect

• We do not collect browsing history, page content, or URLs (except the hostname of the active tab to determine if prompt injection is available).
• We do not collect analytics, telemetry, or usage tracking beyond the rate limit counter.
• We do not use cookies or tracking pixels.
• We do not sell, share, or transfer any user data to third parties for advertising or marketing purposes.

3. Local Storage

The extension stores the following data locally in your browser using Chrome's storage API:

• Daily usage count — resets each day, used to enforce rate limits.
• Last assessment result — cached so results persist if you close and reopen the popup.
• Subscription status cache — a short-lived cache (60 seconds) of your Pro/Free status to reduce network calls.

This data never leaves your browser and can be cleared by removing the extension.

4. Third-Party Services

• Anthropic Claude API — processes your task descriptions to generate assessments. Subject to Anthropic's Privacy Policy.
• Cloudflare Workers — our proxy that forwards requests to Anthropic. Subject to Cloudflare's Privacy Policy.
• ExtensionPay / Stripe — handles Pro subscription payments. Subject to Stripe's Privacy Policy.

5. Data Retention

Task descriptions are processed in real-time and are not stored on our servers. IP-based rate limit counters expire after 24 hours. Subscription data is managed by ExtensionPay/Stripe per their retention policies.

6. Your Choices

• You can stop using the extension at any time by removing it from Chrome.
• Removing the extension deletes all locally stored data.
• To cancel a Pro subscription, visit the ExtensionPay management page accessible from the extension's options.

7. Security

All network communication uses HTTPS. The proxy validates a client token to prevent unauthorized access. CORS is restricted to the extension's origin. The Anthropic API key is stored server-side and never exposed to the client.

8. Changes to This Policy

We may update this policy as the extension evolves. Material changes will be noted in the extension's changelog. Continued use after changes constitutes acceptance.

9. Contact

For privacy questions, contact: rosalesgglgn@gmail.com