Privacy Policy

At LeanPrompts, we take your privacy and the security of your data seriously. This Privacy Policy details how we collect, process, and protect your information across the LeanPrompts website (leanprompts.app), our newsletter waitlists, and the LeanPrompts browser extension.

1. The LeanPrompts Philosophy: Local-First

We believe your intellectual property belongs entirely to you. By default, the core LeanPrompts browser extension operates under a **local-first** paradigm:

• No Cloud Storage: Your prompts, templates, version history, variables, and workflow configurations are stored locally on your device within the browser's IndexedDB.
• No Access: We have no access to your prompts, AI chat histories, or the contents of your AI interfaces.
• Tracking-Free: The extension does not track your online behavior, keystrokes, or which AI models you use.

2. Peer-to-Peer Workflow Sharing (Optional Cloud Storage)

While the studio operates locally by default, you may deliberately choose to share a workflow with team members, clients, or the community by using the "Share Workflow" feature.

• What is Stored: When you generate a shareable web link, your workflow template (the title, chain of prompt steps, and any referenced snippet or knowledge base titles and text) is transmitted to and hosted on our database (Supabase) as an unlisted link.
• Automatic Privacy Exclusion: Saved variable presets, internal run values, and attached personal files are automatically excluded by our server pipeline to prevent accidental disclosure of private credentials.
• Public Access by URL: Anyone in possession of the unique share link URL can view the template and import it into their own Studio installation with one click.
• User Responsibility and Prohibited Content: You are solely responsible for reviewing your prompt text before creating a share link to ensure it contains no confidential company secrets, personal identifying information (PII), API keys, or unauthorized third-party intellectual property.
• Storage Period (180 Days): In strict compliance with the data minimization principle (GDPR Art. 5), shared workflow links are automatically purged after 180 days. Users wishing to retain a template permanently should import it into their local Studio installation or download the raw JSON file.
• Data Erasure: Any creator or affected party can request the immediate deletion of a shared workflow at any time by utilizing the "Request Link Deletion" link on the shared workflow page or by emailing support@leanprompts.app with the workflow ID.

3. Data We Collect on the Website & SaaS Ecosystem

While the extension is local-first, accessing our web services, waitlists, or purchasing digital blueprints requires processing certain data:

• Account Authentication (Supabase): If you sign in to access premium blueprints or future Pro SaaS features, your email is processed securely via Supabase Auth. We use passwordless One-Time Passcodes (OTP) for secure login. A session token is stored in your browser's local storage to keep you authenticated.
• Waitlist Pre-registration: If you join the waitlist for the Pro SaaS edition, we collect your email address. We process this list via a secure newsletter endpoint to notify you when service openings become available.
• Purchases (Lemon Squeezy): When buying digital blueprints or licensing premium workflows, payments are processed by Lemon Squeezy (our merchant of record). They collect billing information and share transaction confirmation details (such as your email and purchase status) with us. We do not store or process your credit card details on our servers.

4. Data Collected via the Extension Feedback Feature

If you choose to use the optional "Feedback & Support" form in the extension, the following data is transmitted to us:

• The message content and selected category (Bug, Question, or Feature).
• Optional email address (used strictly to reply to your query). You can submit feedback anonymously by leaving the email field blank.
• Technical metadata (operating system, browser type, and LeanPrompts version) to help us troubleshoot issues.
• We use a secure backend pipeline (via Google Apps Script) to receive and resolve these support tickets.

5. Third-Party Services & Browser Permissions

The LeanPrompts browser extension requests standard permissions:

• Storage / UnlimitedStorage: To save your prompt database locally.
• Scripting / ActiveTab: To safely inject prompts into supported AI web portals (e.g., ChatGPT, Claude, Gemini).
• ContextMenus: To enable the right-click "Save selection as prompt" shortcut.

When utilizing the "Direct Inject" function, your inputs are passed to the active third-party AI website. Your data is then governed by the respective privacy policies of those providers (e.g., OpenAI, Anthropic, or Google).

6. Your Rights (GDPR / DSGVO Compliance)

Under the General Data Protection Regulation (GDPR) and other global privacy laws, you have specific rights regarding your personal data:

• Right to Deletion: You can purge all your local extension data instantly by uninstalling the extension or clearing your browser's site data.
• Right to Portability: You can export your entire prompt library at any time via the extension settings.
• Data Request / Erasure: If you would like us to delete your waitlist email, purchase history records, or support emails from our systems, please reach out to us.

7. Contact Us

If you have questions regarding this Privacy Policy or wish to request data erasure, please open an issue in our official GitHub repository or submit a ticket through the extension's feedback panel.