🔐 Privacy Policy

Effective Date: April 10, 2025 Last Updated: May 31, 2024

PrompTale AI ("we", "us", or "our") values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you use our websites, applications, APIs, AI services, Web3 offerings, and any other PrompTale AI services (collectively, the "Services"). This Policy applies globally, including jurisdictions covered by the GDPR, UK GDPR, PIPA, CCPA/CPRA, and other applicable data protection laws.


1. Data We Collect

We may collect the following types of personal data:

a. Information You Provide

  • Account information: email address, wallet ID, username, profile data

  • Input data: text, sketches, photos, voice, uploaded content

  • Annotation data: including voting, key-in inputs, and other federated learning signals

  • Payment data (via third-party providers)

b. Information We Generate or Observe

  • AI-generated content ("Output") based on your Input

  • Logs, metadata, device/browser type, OS, IP address

  • Activity, usage, and preference patterns

  • Wallet-based data (e.g. on-chain interaction with PrompTale AI smart contracts)

c. Cookies & Tracking

We may use cookies and similar tracking technologies for personalization, performance monitoring, and analytics.


2. How We Use Your Data

We use your data to:

  • Provide, maintain, and improve our Services

  • Personalize user experience and content

  • Train models using anonymized or federated data (with opt-out options)

  • Operate Web3 features like data2earn, NFT transactions, and creator launchpads

  • Process transactions (crypto and fiat)

  • Respond to support inquiries and enforce our Terms

  • Prevent fraud, abuse, and violations

Federated Learning

Annotation and Input data may be used in decentralized training to improve AI outputs. This data is anonymized or aggregated when possible. Federated data includes data users voluntarily contribute through participation in data2earn programs, such as labeled inputs, key-ins, and votes, and is never shared without user consent.

User-contributed data through data2earn programs is processed in a way that maintains privacy and may support future model enhancement efforts through privacy-preserving infrastructure.

Personalized Artstyles

If you upload or fine-tune a custom artstyle or character, we will keep this content private to your account. These personalized elements are not shared with other users and are used only to generate personalized outputs for your use.


3. Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers under strict data protection terms

  • Web3 smart contracts (for transparency, not for sale)

  • Law enforcement, regulators, or as required by law

  • Business partners, if authorized by you or required to provide a feature

  • Other users only if you explicitly publish your content


4. Web3 Data and On-Chain Activity

Certain actions on PrompTale AI (e.g., minting NFTs, earning tokens, publishing styles) are visible on public blockchains and may be permanently stored. PrompTale AI is not able to delete, modify, or obscure on-chain data once written.


5. Children’s Data

You may not use the Services if you are under the digital age of consent in your jurisdiction (e.g. 13 or 16 depending on country), unless you have verified parental consent. We do not knowingly collect data from minors without such consent.


6. Your Rights

Depending on your region, you have the right to:

  • Access or correct your personal data

  • Request deletion of your account and data

  • Withdraw consent for processing (where applicable)

  • Export your data in a machine-readable format

  • Object to certain types of processing

Please contact [email protected] to make such requests. We may require proof of identity to process requests.


7. Data Retention

We retain personal data only as long as necessary for the purposes described above or to comply with legal obligations. Blockchain data may remain indefinitely on-chain due to its design.


8. Security

We apply commercially reasonable administrative, technical, and organizational measures to protect your data. These include:

  • Encryption in transit and at rest

  • Role-based access controls

  • Smart contract audit and transaction monitoring

However, no system is 100% secure. Use Web3 features at your own risk.


9. International Transfers

We may process your data in jurisdictions outside your own, including the United States, the EU, and Asia-Pacific. Where required, we implement appropriate safeguards such as Standard Contractual Clauses.


10. Supplemental Disclosures

a. California Residents (CCPA/CPRA)

You have additional rights including:

  • The right to know what we collect and how we use it

  • The right to deletion

  • The right to opt-out of data selling (we don’t sell data)

b. Europe / UK / PIPA

We rely on legitimate interest, consent, and contract fulfillment as legal bases. You may contact your local data protection authority for complaints.


11. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you via email or platform alert.


12. Contact Us

Email: [email protected]

Last updated