Privacy Policy
Last updated: February 2026
1. Who we are
Prompt Cowboy is an online platform operated by Fourday AI Pty Ltd (ABN 44 678 770 799), headquartered in Sydney, Australia. We help people design, store and run AI prompts.
This policy explains — in plain English — how we handle your information under:
- the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as amended by the Privacy and Other Legislation Amendment Act 2024
- other laws that may apply where you live, including the EU/UK GDPR, the California Consumer Privacy Act (CCPA) and similar rules worldwide.
Need help or have questions? Email us at privacy@promptcowboy.com — we're real humans and happy to explain anything in this policy.
2. Scope
This policy applies to anyone who:
- browses Prompt Cowboy without signing in (anonymous users)
- creates a Free, Pro or Teams account using email/Supabase Auth or Google Sign-in
- interacts with our website, mobile or desktop apps.
3. What we collect — and why
| Category | Details | Why we need it |
|---|---|---|
| Authentication data | Email address (Supabase), Google account name, email & profile picture | Log you in & secure your account |
| Payment data (Pro & Teams) | Processed by Stripe | Process subscriptions & invoices |
| Prompts & outputs | Your prompts, AI responses, timestamps, model info | Deliver core service, show history, troubleshoot |
| Workspace info (Teams) | Organisation name, team-member emails | Enable team features & access controls |
| Usage analytics | Aggregated click-stream & error data via PostHog (IP truncated) | Improve performance & plan new features |
| Device / logs | Browser, OS, rough location (city-level), cookies | Keep the service running safely & efficiently |
4. How we use your information
To deliver and improve the Platform, we:
- Process your prompts and outputs as part of providing the service to you
- Analyse anonymised, aggregated usage patterns to improve our tools, features, templates, and workflows
- Authenticate you and keep your account secure
- Process payments and send invoices/receipts
- Send essential service emails (password reset, incident notices)
- Send optional product updates or tips (you can unsubscribe any time)
- Comply with laws, prevent fraud and enforce our Terms of Service
What we never do:
- Use your data to train large language models
- Sell your data to anyone
- Share your content with third parties, other than trusted service providers (such as hosting and payment processors) who process data solely on our behalf to operate the Platform
Service providers: We use trusted service providers (including Supabase for hosting, Stripe for payments, and PostHog for analytics) to operate the Platform. These providers process data on our behalf under strict contractual obligations and do not use your data for their own purposes. Full details are in section 6 of this policy.
Talk to us: We're always refining how we handle data and we want to get it right. If you have questions, concerns, or suggestions about any of this, please reach out to privacy@promptcowboy.com — we read every message and it directly shapes how we build the platform.
5. Legal grounds for processing
| Region | Legal basis |
|---|---|
| Australia | Reasonably necessary to provide the service (APP 3) |
| EU / UK | GDPR Art. 6(1)(b) "contract"; Art. 6(1)(f) "legitimate interests" |
| California | We do not sell personal information |
7. Security
- TLS 1.3 encryption in transit and AES-256 encryption at rest
- Supabase Row-Level Security so each account can read only its own data
- Annual staff privacy & security training
- Continuous monitoring & logging
8. Data retention & deletion
You are in control of your data. You can delete your account at any time from Account → Delete. When you do:
- we begin a secure purge of all personal data within 30 days, including back-ups, except where law requires longer retention (e.g. billing records)
- until deletion is complete, your data is inaccessible to normal operations
If you keep your account open, we retain data only as long as needed for the purposes in this policy.
| Data | Typical retention | Purpose |
|---|---|---|
| Prompts & outputs | Life of account | Provide history & team features |
| Authentication data | Life of account | Sign-in & security |
| Billing records | 7 years (tax law) | Regulatory compliance |
9. Your choices & rights
| Right | How to exercise it |
|---|---|
| Access / Correction | Self-service in Account → Profile or email privacy@promptcowboy.com |
| Delete account & data | Account → Delete — secure purge within 30 days |
| Marketing opt-out | Click unsubscribe in any non-essential email |
If we can't resolve an issue, you may complain to the Office of the Australian Information Commissioner or your local data-protection authority.
10. Automated decision-making
We do not make decisions that have legal or similarly significant effects on you. If this changes, we'll explain the logic involved and your options.
11. Age requirement
The Platform is intended for users aged 16 and over. By using Prompt Cowboy, you confirm you meet this age requirement.
12. Changes to this policy
We may update this policy for legal, technical or business reasons. When we do, we will post the new version on the Platform and use reasonable endeavours to notify registered users of material changes. Your continued use of Prompt Cowboy after changes are posted constitutes your acceptance of the updated policy.
13. Governing law & jurisdiction
These terms are governed by the laws of New South Wales, Australia. By using Prompt Cowboy you agree that any dispute will be subject to the non-exclusive jurisdiction of the courts of New South Wales, Australia.
14. Contact us
| Role | Details |
|---|---|
| Privacy Officer (Australia) | privacy@promptcowboy.com |
| Address | Fourday AI Pty Ltd, Surry Hills, Sydney NSW 2000, Australia |
© Fourday AI Pty Ltd. All rights reserved.