Privacy & confidentiality

This notice applies to visitors of our marketing site, people who create a Prompt Crossing account, and anyone whose personal data appears in content you submit (for example an email address you type into a prompt). If you use the product for clients, you are responsible for having a lawful basis to process their data in our workspace. Prompt Crossing is operated by Datalabs AI Technologies S.R.L. (Romania).

Account & authentication

• Email address and hashed password (we do not store plaintext passwords).
• Email verification and password-reset tokens (time-limited, single-use).
• Account flags such as role, active status, email verified, subscription tier, and prompt usage counters.
• Last login timestamp when you sign in successfully.
• Account creation and update timestamps.

• Provide, secure, and improve the Prompt Crossing workspace (auth, brands, prompts, schedules, probes, analytics).
• Run scheduled and admin-triggered probes against configured AI answer surfaces using the prompts and brand context you supply.
• Analyse probe results (including with LLM assistance such as Gemini) to produce expansion suggestions, hit/entity extraction, sentiment, citations, and visibility-gap insights.
• Send transactional email (verification, password reset, password-changed notices) via our SMTP configuration.
• Enforce quotas and process subscriptions (Stripe Checkout/webhooks; legacy Netopia fields may exist for older billing paths).
• Prevent abuse, debug failures, and monitor reliability (including optional Sentry).
• Respond to support or sales requests you send through contact flows.

Where GDPR applies, we typically rely on: (a) performance of a contract—to run your account and GEO monitoring; (b) legitimate interests—securing the service, preventing abuse, and improving reliability in ways that do not override your rights; (c) consent—where we ask for it (for example optional marketing, if offered); and (d) legal obligation—when we must retain or disclose records. Product content you enter is processed as needed to deliver the service you request.

We use service providers to operate Prompt Crossing. Depending on configuration, that can include:

• Hosting, database, and queue infrastructure for the API, workers, Redis, and PostgreSQL.

We do not sell your personal data. We do not currently offer a standard customer DPA package. We may disclose data if required by law or to protect the service and users.

The marketing site and app are primarily local-storage based for session state rather than advertising cookies:

• access_token — JWT used to call authenticated APIs (browser local storage).
• geo-monitor-locale — UI language preference (browser local storage).

We keep account and product data while your account is active and as needed to provide the service. Soft-deleted terms may remain recoverable until permanently purged. Auth tokens expire and are marked used. Billing references are kept as needed for accounting and legal obligations. Account deletion is available today: email [email protected] from your registered address and we will delete or irreversibly deactivate your account and associated workspace data, subject to records we must keep by law (for example certain billing evidence).

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase data / request account deletion (subject to legal retention needs).
• Restrict or object to certain processing.
• Data portability for data you provided.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with your supervisory authority (for Romania: ANSPDCP).

To exercise rights—including account deletion—email [email protected]. We may need to verify your identity. Workspace content belonging to your account can also be edited or deleted in-product where those controls exist (for example pausing or deleting terms).

We operate Prompt Crossing with primary infrastructure in the European Union (EU). Some subprocessors—especially AI probe providers and Stripe—may process data in the EU, UK, US, or other regions under their own terms and transfer mechanisms. Where such transfers occur, they are limited to what is needed to deliver the features you use.

Brand portfolios, prompts, competitor lists, probe logs, and analytics are treated as confidential customer content. We use them to operate and support your workspace, not to sell as a standalone dataset. Personnel and subprocessors access them only as needed for delivery, security, and support. Outputs from AI providers remain subject to those providers’ terms; do not submit secrets (API keys, passwords, personal data you are not allowed to process) into prompts.

We may update this notice as the product evolves. Material changes will be reflected by updating the “Last updated” date on this page. For privacy, confidentiality, or account-deletion requests, contact Datalabs AI Technologies S.R.L. at [email protected].

[email protected] · Contact us · Terms