Privacy Policy

1. Introduction

Prompt Toaster, Inc. ("Prompt Toaster," "we," "us," or "our"), Ste. 1400 - 18 King Street East, Toronto, Ontario, Canada, M5C 1C4, operates Prompt Toaster and related websites, applications, APIs, and services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the Service.

By using the Service, you acknowledge the practices described in this Privacy Policy. If you use the Service on behalf of an organization, you represent that you are authorized to accept this Privacy Policy on its behalf.

2. Definitions

Account means an account created to access the Service.

Personal Data means information relating to an identified or identifiable individual.

Customer Data means information submitted to the Service by or for a customer, including conversation data and agent telemetry.

Service Providers means third parties that process information on our behalf to operate, secure, analyze, or support the Service.

Usage Data means information collected automatically about interaction with the Service and its infrastructure.

3. Information We Collect

Account and contact information

We may collect your name, work email address, company, account credentials, billing details, support messages, and other information you provide when you register, contact us, or use the Service.

Conversation and agent data

If you connect a voice or chat agent, the Service may process conversation transcripts, audio or recording references, messages, agent responses, prompts, model and provider identifiers, tool calls, timestamps, call outcomes, evaluation results, reviewer labels, and related metadata.

Customer Data may include information submitted by your users or customers. You are responsible for providing appropriate notice and obtaining any permissions required to collect and evaluate that data.

Telemetry and technical data

We may collect traces, logs, metrics, error events, device information, IP address, browser type, operating system, referring pages, timestamps, diagnostic information, and other data sent through the Service.

Usage data

We collect information about pages viewed, features used, configuration changes, evaluation runs, prompt corrections, and Service performance so we can operate and improve the Service.

4. Cookies and Similar Technologies

We use necessary cookies and similar technologies for authentication, security, session management, language preferences, and basic functionality. We may also use first-party identifiers to understand how visitors use our websites.

You can configure your browser to reject cookies or notify you when cookies are sent. Some Service features may not function correctly without necessary cookies.

We honor Global Privacy Control signals where applicable. Our Service does not respond to every browser Do Not Track signal.

5. How We Use Information

• To provide, operate, maintain, and secure the Service
• To authenticate users and manage Accounts
• To monitor voice and chat agent conversations and evaluate quality
• To identify failures, regressions, policy issues, and technical causes
• To generate evaluation results, prompt suggestions, and automated test runs
• To provide support and respond to requests
• To send service, security, and administrative communications
• To process payments and manage subscriptions
• To comply with legal obligations and enforce agreements
• To analyze usage and improve the Service, models, evaluations, and reliability

6. Prompt Corrections and Evaluations

Prompt Toaster may use conversation evidence and evaluation results to identify prompt or agent issues and generate suggested corrections. Depending on your configuration, suggested changes may be tested against prior failures, defined scenarios, or other evaluation sets before you approve or deploy them.

Prompt Toaster does not make changes to your production agent without the permissions and configuration you provide. You remain responsible for reviewing changes, evaluation criteria, and deployment decisions.

7. How We Share Information

We may share information in the following circumstances:

• Service Providers: with vendors that provide hosting, infrastructure, security, email, payments, analytics, or other services on our behalf.
• Business transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets.
• Legal and safety reasons: when required by law or reasonably necessary to protect rights, safety, security, or property.
• With your direction or consent: when you instruct us to share information or otherwise authorize disclosure.

We do not sell Personal Data as commonly understood. We do not use Customer Data to advertise to your users.

8. Service Providers

We may use the following providers to operate the Service:

• AWS — infrastructure and email delivery services
• Cloudflare — network, security, delivery, and infrastructure services
• Stripe — payment processing and subscription billing

These providers may process information under their own privacy policies and our contractual instructions.

9. Data Retention

We retain Personal Data and Customer Data for as long as reasonably necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, enforce agreements, and protect the Service. Retention for Customer Data may depend on your plan, configuration, or agreement. You may request deletion of data subject to legal, security, backup, and operational limitations.

10. International Transfers

Information may be processed in Canada, the United States, or other jurisdictions where Prompt Toaster or its Service Providers operate. Where required, we use appropriate safeguards for international transfers and take reasonable steps to protect Personal Data in accordance with this Privacy Policy.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, and security monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your Personal Data, and to withdraw consent where processing is based on consent. You may also have the right to opt out of certain sharing or targeted advertising activities.

To exercise a right, contact us at support@prompttoaster.com. We may need to verify your identity before completing a request. You may also have the right to appeal a decision regarding your request or contact your local data-protection authority.

13. GDPR Information

For individuals in the European Economic Area, the United Kingdom, or Switzerland, applicable legal bases may include consent, performance of a contract, compliance with a legal obligation, and our legitimate interests in operating, securing, and improving the Service.

Subject to applicable law, you may request access, correction, erasure, restriction, portability, or objection to processing. You may withdraw consent at any time, although this does not affect prior lawful processing.

14. California Privacy Notice

California residents may have rights to know, access, correct, delete, opt out of the sale or sharing of Personal Data, limit use of sensitive Personal Data, and receive equal service for exercising their rights.

We may collect identifiers, professional information, internet or network activity, commercial information, and inferences generated from use of the Service. We collect this information directly from you, automatically through the Service, and from Service Providers. Contact support@prompttoaster.com to submit a request.

15. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child has provided Personal Data, contact us so we can take appropriate action.

16. Links to Other Websites

The Service may contain links to third-party websites. We are not responsible for their content or privacy practices and encourage you to review the privacy policy of each website you visit.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may also provide notice through the Service or by email.

18. Contact

Questions about this Privacy Policy can be sent to support@prompttoaster.com.