Privacy Policy

Introduction

FranklyPrompt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use FranklyPrompt ("the Service"), visit our website, or interact with us.

1. Information We Collect

1.1 Personal Information

We collect the following types of personal information:

• Full name
• Email address
• Company name (if applicable)
• Role or job title
• Account credentials

1.2 Payment Information

When you purchase the Service, our payment processor (Stripe) collects your payment details. We do not store or have access to your full payment information.

1.3 Communication Preferences

• Newsletter subscriptions
• Marketing preferences
• Demo registration
• Scheduling preferences for support calls or onboarding

1.4 Usage Information

We collect information automatically about your use of the Service, such as:

• Log data
• Device information
• IP address
• Browser type and language
• Usage activity within FranklyPrompt

2. How We Collect Information

2.1 Direct Collection

We collect personal information directly when you:

• Sign up for an account
• Subscribe to our Service
• Participate in product demos
• Contact support or request information
• Subscribe to email communications

2.2 Third-Party Tools and Services

We use the following services:

• Vercel – Hosting and deployment (may collect logs and diagnostic information)
• Tally – Form collection and early access registration
• Stripe – Payment processing

3. How We Use Your Information

3.1 Service Provision

• Manage and authenticate your account
• Process payments
• Provide customer support
• Deliver Service functionality
• Notify you of service updates and changes

3.2 Marketing and Communication

• Send product updates, newsletters, and promotions
• Conduct surveys and collect feedback
• Manage registration and participation in demos

3.3 Service Improvement

• Analyze usage patterns
• Improve Service functionality and user experience
• Develop new features
• Diagnose technical issues

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contractual Necessity
• Legitimate Interests
• Consent (for marketing communications)
• Legal Obligations

5. Your Rights and Choices

5.1 GDPR Rights (EEA Residents)

• Right to access, correct, or delete personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

5.2 Managing Marketing Preferences

You may opt out of marketing communications by:

• Clicking "unsubscribe" in our emails
• Updating your communication preferences
• Contacting us directly

5.3 Consequences of Withholding or Withdrawing Consent

Certain services may become unavailable if required information is withheld or consent is withdrawn.

6. Data Retention and Deletion

6.1 Retention Periods

• Account info: duration of account + 1 year
• Payment records: 7 years (legal requirement)
• Marketing data: 2 years from last interaction
• Technical logs: 90 days

6.2 Data Deletion Requests

You can request data deletion at any time. We will:

1. Verify your identity
2. Remove data from active systems within 30 days
3. Purge backup data within 90 days

6.3 Automated Deletion

• Inactive accounts deleted after 2 years
• Unused marketing data removed after 2 years
• Technical logs purged after 90 days

7. Data Disclosure

7.1 Categories of Recipients

We share information with:

• Stripe – Transaction processing
• Tally – Form collection
• Hosting Providers – Infrastructure provision

7.2 International Transfers

Some data may be stored or processed outside the EEA. Where applicable, we rely on:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Technical and contractual safeguards

7.3 Legal Requirements

We may disclose information:

• To comply with legal obligations
• To protect our legal rights
• In emergencies or investigations

8. Data Security

We apply best-practice security measures:

• Encryption in transit and at rest
• Secure authentication and access controls
• Periodic vulnerability assessments
• Incident response procedures

9. Children's Privacy

Our Service is not intended for users under the age of 16. We do not knowingly collect personal data from children. If we learn that we have, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. You will be notified of any material changes via:

• Email (if subscribed)
• In-app notices
• Updated posting on our website

11. Contact Us