Privacy Policy

Effective date: 31 July 2026

WitchPrompt ("WitchPrompt", "we", "us") is operated by SADHVIKAIR LTD, a company registered in England and Wales (company number 16642622, registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE). SADHVIKAIR LTD is the data controller responsible for the personal data described in this policy. This policy explains what personal data we collect when you use witchprompt.com and our API/MCP service, why we collect it, and the choices and rights you have.

1. Data we collect

Account data. when you sign up, our authentication provider, Clerk, collects your email address, name, and authentication credentials (password hash or OAuth identity). We receive and store your Clerk user ID, email, and name to operate your account.
Content you create. prompts, projects, workspace/organization data, and any variables or metadata you add. This is stored in our database (Google Cloud Firestore). Public prompts (the Free-tier default) are publicly accessible and may be indexed by search engines, cached by third parties, or copied by other users. do not publish confidential or personal information in a public prompt. Private prompts (a Pro/Team feature) are accessible only to you and, where applicable, members of your shared workspace.
Billing data. if you subscribe to a paid plan, billing is managed through Clerk, which integrates with Stripe to process payments. We do not receive or store your card details; we receive subscription status (plan, active/trialing/cancelled) to determine what features your account can access.
API/MCP usage. if you generate an API key and connect a third-party AI client (e.g. Claude, an MCP-compatible agent) to WitchPrompt, requests you make through that client to read or write your prompts pass through our servers. We do not initiate any background sharing of your content with AI providers. this only happens when you connect a client of your choosing and make a request. You are responsible for the third-party AI clients and services you choose to connect; once content is transmitted to those services, it's governed by their own privacy policies and terms, not ours.
Support communications. any information you voluntarily provide when you contact us (for example, through the Contact form or by email).
Technical data. standard server logs (IP address, request timestamps, user agent) for security and abuse prevention. We do not currently use any analytics or tracking service.
Cookies. we use only the cookies necessary to authenticate users, maintain secure sessions, and operate the Service (set by our authentication provider, Clerk). We do not currently use advertising or analytics cookies.

AI content warning: WitchPrompt stores prompts exactly as you submit them. Avoid including passwords, API keys, secrets, health information, financial information, or other sensitive personal data in a prompt unless you intend to store that information with us.

2. Why we process your data, and our lawful basis

To provide and operate the Service (account creation, storing and serving your content).
To process payments and manage subscriptions for paid plans.
To respond to support requests submitted through our Contact form.
To maintain security, prevent abuse, and enforce our Terms of Service.
To comply with applicable laws, accounting requirements, fraud-prevention obligations, and lawful requests from public authorities.

Under UK/EU GDPR, we rely on the following lawful bases for these activities:

Processing	Lawful basis
Creating and operating your account	Performance of a contract
Billing and subscriptions	Performance of a contract
Security and abuse-prevention logs	Legitimate interests
Responding to support requests	Legitimate interests
Tax and accounting records	Legal obligation

3. Who we share data with

We do not sell your personal data. We share data only with the service providers (subprocessors) that help us run WitchPrompt, each acting as a data processor on our behalf. As of the effective date above, these are:

Clerk. authentication, session management, and billing/subscription management.
Stripe. payment processing, via Clerk's billing integration.
Google Cloud (Firestore). our primary database.
Any third-party AI client or agent you personally choose to connect via your own API key. content it retrieves is governed by that third party's own terms, not ours.

We'll update this list if we add other subprocessors (for example, an email-delivery provider).

These providers may process data outside the United Kingdom or European Economic Area. Where that happens, we take steps to ensure appropriate safeguards are in place, including reliance on Standard Contractual Clauses or other lawful transfer mechanisms where applicable.

4. Data retention

We keep your account and content data for as long as your account is active. If you delete your account, we aim to delete or anonymize your personal data within 30 days, except where we're legally required to retain it (for example, billing records for tax/accounting purposes).

Removing a public prompt removes it from WitchPrompt, although copies or cached versions held by search engines or other third parties may remain outside our control.

5. Your rights

If you're in the UK or EEA, UK/EU GDPR gives you the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. Depending on your location, you may have additional rights under applicable privacy laws (for example, the CCPA in California). To exercise any of these, contact us at support@witchprompt.com. You may delete your account at any time through Settings, or by contacting us.

If you have a concern about how we handle your data, please contact us first so we can try to resolve it directly. UK/EEA users can also lodge a complaint with the UK Information Commissioner's Office (ICO) or their local supervisory authority.

6. Children

WitchPrompt is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect personal data from children under 16.

7. Security

We take reasonable technical and organizational measures to protect your data, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security. Access to personal data is restricted to personnel and service providers who require it to operate the Service.

8. Governing law

This policy is governed by the laws of England and Wales.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you.

10. Contact

Questions about this policy or your data: contact us at support@witchprompt.com.