Privacy Policy
Effective
This policy explains what information ("we") collects through the (the "Service"), and how we use it. We collect as little as we need to run the Service.
What we collect
- Subscription details: your name, email address, plan, and subscription status, received from our payment provider when you subscribe.
- Access code: we store only a scrambled (hashed) version, so we can't read your code.
- Usage: which topics you generate prompts for, how many per day, and when you last used the Service. We use this to apply daily limits and prevent misuse.
- Details you type: information you enter about your practice is sent to our AI provider to write your prompt. We don't store it, and generated prompts aren't saved on our side. The Service isn't designed for patient information: please don't enter Protected Health Information (PHI).
- Browser storage: your browser saves your access code on your device so you don't need to re-enter them. You can clear this anytime by signing out.
We do not receive or store your card or bank details; those are handled by Stripe and Link. We don't use advertising trackers. Search terms you type are used to find matching prompts and are not stored.
How we use it
- To provide the Service and apply your plan's limits
- To email your access code, replacement codes, and important account or policy notices
- To prevent code sharing, bulk copying, and abuse
- To answer your support requests
We don't sell or rent your personal information.
Who we share it with
- Stripe and Link, which process payments as merchant of record (see the Stripe Privacy Policy and Link Privacy Policy).
- Cloudflare, which hosts the Service, stores account data, and runs the AI model (Workers AI) that writes your prompts.
- Resend, which delivers our emails.
- Authorities, if required by law.
AI tools you use
Prompts are pasted into AI tools you choose, outside our Service. What you enter there is governed by those tools' privacy policies. Don't enter personal or confidential information into AI tools.
Retention
We keep your account information while your subscription is active and for up to [24 months] afterward for records and support, then delete it. Daily usage records are deleted automatically after 3 days; a running total of prompts opened is kept with your account.
Your choices and rights
You can ask us to access, correct or delete your information by emailing . Depending on where you live, you may have additional rights under local law. We'll respond within 30 days.
Security
Data is encrypted in transit, access codes are stored only as hashes, and admin access is restricted. No system is perfectly secure; contact us right away if you think your code has been exposed.
Children
The Service is for businesses and isn't directed to anyone under 18.
Changes
We'll post updates here and email subscribers about material changes.