Trust & Transparency
Privacy Policy
Core Privacy Guarantee: Promptnote is an offline-first desktop application. Your prompt notes, iterations, tags, and collections are stored exclusively on your local machine. We do not inspect, collect, synchronize, or train AI models on your prompt library.
1. Overview & Scope
At Promptnote ("we", "us", or "our"), we build software designed to streamline prompt engineering, workflow iteration, and developer productivity. We hold a fundamental belief that your intellectual property, prompts, engineering notes, and creative experiments belong strictly to you.
This Privacy Policy explains the nature, scope, and purpose of personal data processed through our website (https://promptnote.app) and our Windows desktop application (Promptnote).
2. Desktop Application (Promptnote for Windows)
The Promptnote desktop application is architected with a strict offline-first, zero-cloud dependency paradigm:
- 100% Local Storage: All prompt records, version histories, category trees, favorited tags, and notes are saved entirely on your local workstation (in local file databases).
- No Cloud Sync or Transmission: The application does not upload, transmit, or replicate your prompts to our servers or any cloud database.
- Zero AI Model Training: We do not use, harvest, sell, or license any of your prompt texts or workflow iterations to train AI models (large language models, multimodal models, or otherwise).
- No Application Telemetry on Prompts: We do not track what you write, search for, or paste via the global Quick Picker (Ctrl+Shift+P). What happens on your machine stays on your machine.
3. Website Data & Telemetry (promptnote.app)
When you visit our public website, read our technical documentation and blog articles, or initiate a software download, certain technical information is processed:
A. Free Download Event Verification
When initiating a download of the free trial installer (Promptnote-Setup.exe), the website records an anonymous installation event sent to our logging endpoint (logs.promptnote.app) to prevent abusive automated scraping and quantify download volumes. This event includes:
- Operating system name and architecture (e.g., Windows 10/11)
- Browser user-agent string and viewport screen resolution
- Approximate geolocation derived from your IP address (country, region, and ISP via public IP lookup services)
- Graphics hardware capability indicators (unmasked WebGL renderer vendor, for minimum hardware compatibility analysis)
- A randomly generated anonymous session/device identifier
B. Server Logs & Infrastructure Diagnostics
Like most web properties, our hosting servers automatically log standard web requests (including your IP address, browser type, referring URL, timestamp, and requested asset). These access logs are maintained solely for security audit trails, detecting malicious traffic, and verifying server health.
C. Direct Communications
If you email us at hello@promptnote.app for product support, volume licensing, or bug reports, we retain your email address and correspondence history to fulfill your inquiry and provide customer assistance.
4. Purchases & Billing (Sell.app)
When you purchase a full lifetime license for Promptnote, payments are securely processed by our third-party merchant and payment processor, Sell.app (or integrated gateways such as Stripe / PayPal).
- Promptnote never receives or stores your credit card numbers, CVVs, or full payment credentials.
- Sell.app provides us with purchase fulfillment data: transaction reference ID, buyer email, license key generated, date of order, and country.
- This purchase confirmation data is used exclusively to deliver your license key, validate license activation, and process refunds if requested.
5. Local Storage & Cookies
We favor privacy-preserving web architectures and keep client-side persistence to an absolute minimum:
- No Cross-Site Tracking: We do not deploy third-party advertising cookies, cross-site trackers, or third-party behavioral profiling scripts.
- First-Party LocalStorage / SessionStorage: We use browser
localStorageandsessionStoragestrictly for functional website requirements, such as remembering your anonymous session continuity between download clicks and caching UI preferences.
6. Third-Party Service Providers
We partner with a limited number of service providers who assist us in operating our digital infrastructure:
- Sell.app: Merchant of record and license delivery infrastructure for software purchases.
- Cloud Hosting & Storage (Amazon Web Services): Host our web content, blog publications, and downloadable executable binaries securely via Amazon S3 / CloudFront.
- Coarse IP Lookup APIs: Public IP lookup utilities (e.g.
freeipapi.comorapi.ipify.org) accessed on free download initiation to determine country/region routing.
7. Security & Protection
We implement industry-standard organizational and technical safeguards to protect information:
- All web traffic to
promptnote.appandlogs.promptnote.appis strictly encrypted in transit via modern Transport Layer Security (TLS 1.3 / HTTPS). - Executable installers are packaged, hosted on authenticated cloud storage, and protected with checksum validation to ensure file integrity.
- Administrative access to telemetry logs and email correspondence is restricted to authorized team members using multi-factor authentication (MFA).
8. Data Retention
We retain information only as long as necessary to fulfill the operational purposes described in this policy:
- Download Telemetry Logs: Aggregated or purged periodically (typically within 90 to 180 days).
- Purchase Records: Retained as required for accounting, tax compliance, and license validation throughout the lifetime of the software.
- Customer Support Correspondence: Retained for ongoing customer support context, and deleted upon user request.
9. Your Rights (GDPR, CCPA/CPRA & International)
Depending on your geographical jurisdiction (such as the European Economic Area under the General Data Protection Regulation (GDPR), or California under the CCPA/CPRA), you possess specific privacy rights:
- Right to Access & Portability: You may request a copy of the personal data we hold about you (such as your purchase records or support email history).
- Right to Rectification: You may request corrections to inaccurate personal records.
- Right to Erasure ("Right to be Forgotten"): You may ask us to delete your email address and associated order fulfillment records from our support archives, subject to statutory tax and financial retention laws.
- Right to Opt-Out of Sale / Sharing: We do not sell, rent, or trade your personal data. We never have, and never will.
To exercise any of these rights, simply email us directly at hello@promptnote.app. We respond to all verified requests within thirty (30) days.
10. Children's Privacy
Our software and website are designed for professionals, developers, and adult productivity users. We do not knowingly collect or solicit personal information from individuals under the age of 16. If we become aware that we have inadvertently collected information from a minor without parental consent, we will promptly delete such records.
11. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect modifications in our software, infrastructure, or applicable regulatory standards. Any revisions will be published on this page with an updated "Last Updated" date at the top. For material updates affecting data handling, we will display an announcement on our home page.
12. Contact Information
If you have questions, feedback, or privacy-related requests regarding this policy or Promptnote's data practices, please get in touch with our team: