Privacy policy

Data fiduciary / operator: 42 Prompts
Address: 42 Prompts, Ranighat, Patna -06, Bihar, India
Privacy and grievance email: support@42prompts.com

1. Scope

This policy applies to 42prompts.com, our digital products, customer library and tools. It does not govern a third-party website or AI provider you choose to open from a guide.

2. Data we may collect

• Contact and consent: email address, support messages and marketing preferences.
• Orders and access: product, price, currency, market, order and payment references, payment status, entitlement and passwordless session data.
• Customer content: Business Context File fields, pasted notes, tool inputs and saved outputs that you choose to store.
• Usage and device data: page, event, campaign attribution, approximate market, browser/device information, timestamps, security logs and cookie or similar identifiers when analytics is enabled.

Razorpay processes payment credentials. 42Prompts does not ask for or intend to receive complete card numbers, UPI PINs, banking passwords or OTPs.

3. Why we use data

We use necessary data to provide requested downloads, create and verify orders, deliver products, secure customer access, provide support, prevent abuse, maintain records and comply with law. Where you choose optional features or communications, we use data according to your request or consent. Product analytics helps us understand reliability and which audience and product hypotheses merit further work.

4. Business Context File and AI tools

The initial Context File accepts structured fields and pasted text only. Do not enter passwords, payment credentials, health records, government identifiers, regulated records, confidential third-party information or personal customer data that is not necessary. When future features send content to an AI provider, the interface and relevant provider will be identified before submission.

5. Service providers and disclosure

We may share the minimum necessary data with service providers that host the website, process payments, deliver email, provide analytics, prevent fraud or support operations. Current or planned providers may include Vercel for hosting and Razorpay for payment processing; analytics or email providers are used only when configured. Providers act under their own terms and applicable contractual obligations. We do not sell personal data. We may disclose information when legally required or necessary to protect users, rights or service security.

6. International processing

Hosting, payment, email, analytics or AI providers may process data outside your country. Where applicable, we use available contractual and security measures and limit transfers to what is necessary for the stated purpose.

7. Retention

We keep contact requests for as long as needed to respond; optional marketing records until withdrawal or they are no longer useful; order, payment and entitlement records for customer support, fraud prevention, accounting and legal obligations; and customer content until you delete it or the service no longer needs it. Security backups and logs may persist for a limited additional period. We periodically review records and delete or anonymise data that is no longer required.

8. Cookies and analytics

A small preference value may remember light or dark mode. Essential cookies may keep a customer signed in securely. GA4, Meta Pixel/Conversions API or first-party event measurement may be enabled for product and advertising analysis. Where consent is required, optional measurement will be conditioned on the appropriate choice. Browser settings can restrict cookies, although secure library features may then stop working.

9. Security

We use reasonable technical and organisational controls, including restricted access, secure transport, signed payment events, hashed session tokens and least-data design. No internet system is risk-free. If you believe data or an access link has been compromised, contact us promptly.

10. Your choices and rights

Subject to applicable law, you may ask what personal data we hold, request correction or deletion, withdraw optional consent, export or delete your Context File, and raise a grievance. A withdrawal does not affect processing already lawfully completed. We may need enough information to verify the request and preserve records required by law or to establish legal claims.

11. Children

42Prompts is intended for adults and business or professional use. We do not knowingly solicit personal data from children. A parent or guardian who believes a child supplied data should contact us for review and deletion.

12. Changes and contact

Material changes will be posted here with a new effective date. Privacy requests and grievances may be sent to the Grievance Officer — Customer Support at support@42prompts.com or 42 Prompts, Ranighat, Patna -06, Bihar, India. We aim to acknowledge grievances within 48 hours and resolve them within one month, subject to applicable law.