GDPR Compliance Statement
Our commitment to user privacy, data security, and rights under the European Union General Data Protection Regulation (EU 2016/679).
1. Overview & Data Controller
Prompt Image acts as the Data Controller for personal data collected through our prompt directory platform, community boards, and creator services. We design all features according to the principles of Privacy by Design and by Default.
2. Your Rights Under GDPR
Under Chapter III of the GDPR, European citizens and international platform users enjoy the following fundamental rights regarding their personal data:
- Right to Access (Art. 15): You have the right to request a complete machine-readable copy of any personal data we hold about you.
- Right to Rectification (Art. 16): You may update or correct your profile details, display name, and prompt submissions directly through your creator dashboard.
- Right to Erasure / \"Right to be Forgotten\" (Art. 17): You can request full deletion of your user account, favorites, and custom moodboards at any time.
- Right to Restrict Processing (Art. 18): You can pause or restrict the processing of your data in contested circumstances.
- Right to Data Portability (Art. 20): Export your saved prompts, collections, and submission records in structured JSON or CSV format.
- Right to Object (Art. 21): Object to any non-essential telemetry or analytics tracking.
3. Legal Grounds for Processing
We process your personal information only when one of the following legal grounds applies under Article 6:
- Contractual Necessity: To provide account authentication, prompt curation, and user favorites.
- Consent: Explicit opt-in for transactional email updates, newsletters, or optional public creator badges.
- Legitimate Interests: Preventing fraud, rate-limiting malicious scraping, and platform security hardening.
4. International Data Transfers
Our server infrastructure is protected by industry standard encryption protocols (TLS 1.3 in transit, AES-256 at rest). Any international transfer of personal data adheres to standard contractual clauses (SCCs) approved by the European Commission.
5. Exercising Your Rights (DPO Contact)
To submit a formal Data Subject Access Request (DSAR) or request account erasure, contact our designated privacy officer: