Privacy
Last updated 19 September 2026
Who is responsible
The data controller for prmpt.bio is:
MOONQUEST di Gazzoni Matteo, a sole proprietorship Quartiere XXV Aprile 17, 36061 Bassano del Grappa (VI), Italy VAT number IT04626340246 REA VI-418063 Certified email matteo.gazzoni@pec.it Support support@prmpt.bio
What we hold about you
Signing in with Google gives us the identity Google asserts and your verified email; we keep those two. The rest you give us as you use the platform: the profile you fill in (display name, bio, link, socials, avatar, banner, affiliates), the pages you write, the assets in your Library (an upload's master keeps its file metadata privately, and every derivative strips it), your runs and their outputs, your comments, follows, likes, saves, blocks, and reports, every credit and every posting in the ledger, and the payout details you give at your first cash-out: legal name, country, rail, and the rail's account email. From a purchase we keep the payment reference, the billing country, and the price paid, never card data. The servers keep logs and error reports carrying your address and browser.
Why, and on what basis
To provide the platform you signed up for, which is the performance of our contract. To keep the tax and accounting records Italian law requires, which is a legal obligation. To keep the platform secure, to prevent abuse, to moderate what is reported, and to find and fix errors, which is our legitimate interest. Nothing rests on consent: there is no marketing, and no optional processing to consent to.
Who processes it for us
Google, for sign-in. Stripe, for payments: the checkout collects your card and billing address, and we never see the card. Runware, for the models a run calls: it receives the prompt and the files a step binds, and every image and video passes through its safety check. Fly.io, for hosting and its logs. Tigris, for storage: public derivatives serve from cdn.prmpt.media, everything else stays private. Amazon Web Services, for delivering email. Sentry, for error reports. Wise and Payoneer, for payouts, from the payout details you gave. Some of these are in the United States; those transfers rest on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies
The platform sets one cookie of its own, the session cookie that keeps you signed in, and reads nothing else. It runs no analytics and no tracker, and it shows no banner because it needs none. Views are counted without identifying you: an opening counts once a day by a key that never outlives the day.
How long
Your account lives until you delete it, which takes effect 14 days after you ask. Deletion erases the person and never the ledger: your email, name, bio, link, socials, avatar, banner, affiliates, payout details, and the identity Google asserted go; the money records stay for the ten years tax law requires, sold work stays readable to its buyers, an upload a buyer's entitlement still reaches stays under the platform's ownership, and every tombstone wears no name. Logs and error reports are kept for at most 90 days.
Your rights
Under the GDPR you may ask for access to your data, its correction, its erasure, a restriction of its processing, a copy of it in a machine-readable form, and you may object to the processing that rests on our legitimate interest. Write to support@prmpt.bio; we answer within a month. You may also complain to your supervisory authority, which in Italy is the Garante per la protezione dei dati personali.
Children
prmpt.bio is not for anyone under 18, and we knowingly hold no data about a child. If you believe a child has an account, write to support@prmpt.bio and we will delete it.
Changes
We may update this page, and the date at the top says when. A material change reaches you by email.
Contact
Support: support@prmpt.bio. Certified email: matteo.gazzoni@pec.it.