Security & Compliance

Security at Promptsy

We take the security of your data seriously. Learn about the measures we take to protect your prompts and personal information.

Encryption at Rest

All data stored in our database is encrypted using AES-256 encryption. Your prompts are protected even at the storage level.

Encryption in Transit

All connections to Promptsy use TLS 1.3 encryption. Data is encrypted from your device to our servers.

Row-Level Security

Database access is protected by row-level security policies. Users can only access their own data.

Secure Authentication

We support email/password and OAuth authentication with secure session management and optional 2FA.

Infrastructure

Promptsy is built on a modern, secure infrastructure stack:

  • Supabase - SOC 2 Type II certified database and authentication platform
  • Cloudflare - Enterprise-grade CDN, DDoS protection, and WAF
  • Vercel - Secure, globally distributed edge infrastructure

All infrastructure providers maintain comprehensive security certifications and undergo regular third-party audits.

Data Handling

  • Your prompts are never used to train AI models
  • AI optimizations are processed through Cloudflare AI Gateway for security and privacy
  • Data is backed up regularly with point-in-time recovery
  • You can export or delete your data at any time

Compliance

GDPR

We comply with GDPR requirements for EU users, including data access, portability, and deletion rights.

CCPA

California residents have rights under CCPA to access, delete, and opt out of data sales.

Report a Vulnerability

If you discover a security vulnerability, please report it responsibly. We appreciate your help in keeping Promptsy secure.

Contact Security Team