Privacy Policy

This Privacy Policy describes how PandaPrompts ("we", "our", or "us") collects, uses, and protects your personal information when you use our service. PandaPrompts is a product by Buro Ops AS (VAT: 832405612), Ullevålsveien 12, 0171 Oslo, Norway.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Username
• Password (stored in encrypted/hashed format)

1.2 Content You Create

We store the prompts and related content you create, including:

• Prompt text and descriptions
• Prompt versions and revision history
• Tags and organizational data
• Test results and feedback
• Ratings and preferences

1.3 API Keys

If you choose to add API keys (such as OpenRouter API keys) to use our testing features, we store these keys in encrypted format. You can add, update, or delete your API keys at any time through your account settings.

1.4 Usage Data

We collect information about how you use our service, including:

• API usage logs (tokens used, costs, models used)
• Test history and timestamps
• Last login information
• User preferences and settings

1.5 Technical Data

We automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device information
• Authentication tokens (stored locally in your browser)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Authenticate your account and manage your session
• Store and organize your prompts and content
• Process API requests when you use our testing features
• Track usage statistics and costs
• Respond to your requests and provide customer support
• Send you important service-related communications
• Comply with legal obligations

3. Data Storage and Security

We take data security seriously:

• Passwords are stored using industry-standard hashing algorithms
• API keys are encrypted before storage
• Data is stored in secure databases with access controls
• We use HTTPS encryption for all data transmission
• Authentication tokens are stored locally in your browser's localStorage

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share data with third-party service providers who help us operate our service (e.g., hosting providers, database services)
• API Providers: When you use our testing features, your prompts and input data are sent to third-party API providers (such as OpenRouter) as necessary to process your requests
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access your account data at any time through your account settings
• Export: You can request an export of your data in a machine-readable format
• Correction: You can update your account information and content at any time
• Deletion: You can delete your account and all associated data at any time
• API Keys: You can add, update, or delete your API keys at any time

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

6. Cookies and Local Storage

We use browser localStorage to store authentication tokens and user preferences. These are stored locally on your device and are necessary for the service to function properly. You can clear this data by clearing your browser's local storage or by logging out.

7. Third-Party Services

Our service integrates with third-party API providers (such as OpenRouter) when you use our testing features. When you use these features:

• Your prompts and input data are sent to these third-party services
• These services have their own privacy policies
• We are not responsible for the privacy practices of these third-party services
• We recommend reviewing their privacy policies before use

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Company: Buro Ops AS
• VAT: 832405612
• Address: Ullevålsveien 12, 0171 Oslo, Norway
• Email: team@buroventures.com