PromptKit

GDPR overview

The site never uses the words GDPR or General Data Protection Regulation, on any page, so compliance is neither claimed nor denied. There is no EU representative under Article 27, no named data protection officer, no data processing agreement, no legal basis cited for any processing and no retention period. Third parties are described only by category, namely AI coding assistant services, payment processors and cloud service providers, and none is named; no hosting country or region is stated. The privacy policy does list rights that resemble GDPR rights: access and export of project data, deletion of the account and associated data, opt-out of non-essential data collection, and correction of personal information, with privacy@promptkit.tools as the contact. Both legal documents carry the notice Last Updated: January 2024. EU buyers should treat this as an informal framework rather than a documented one.

Who owns the data?

Section 3 of the terms states that users keep full ownership of their project information, their code and the documentation PromptKit generates. That documentation may be used across the user's own organisation and development tools, and the FAQ repeats that it can be freely used, modified and shared. Ownership of the service stays with the publisher: the AI models, algorithms and documentation templates remain its property, and reselling or redistributing those templates and optimisation techniques is prohibited. No corporate entity is named anywhere on the site, so the counterparty holding those rights is identified only by the PromptKit name and the contact address ethan@ethanyu.me, on a third-party domain.

Reuse rights

Generated documentation can be reused without asking permission: the terms allow it to be used inside the user's organisation and development tools, and the FAQ adds that it can be modified and shared at will. The only restriction is on PromptKit's own material, since reselling or redistributing its templates and optimisation techniques is forbidden. On the publisher's side, the privacy policy lists account data (name, email, professional details), authentication data, usage data and billing data, plus project metadata and structure, documentation templates and content, integration settings and preferences. Stated purposes are generating and optimising documentation, improving AI model performance and documentation templates, improving the platform, technical support, and handling payments and subscriptions. Data is shared with the AI coding assistant services the user selects, with payment processors and with cloud providers; the policy states that personal data and project information are never sold. One tension inside the site deserves attention and is not resolved by the site itself: the FAQ says project details are never stored once documentation has been created, while the terms describe storing essential project metadata and using aggregated, anonymised data to improve the AI models and templates. No opt-out from that reuse is documented; the only opt-out offered covers non-essential data collection.

Data retention & training

Hosting summary

The site states no hosting country and no hosting region. The privacy policy mentions the use of cloud service providers for infrastructure support without naming any of them, and the terms add that documentation is processed in isolated environments, with encryption during processing and transmission. No jurisdiction, no data centre location, no transfer mechanism and no data processing agreement are described. As a purely technical observation, and not as a commitment made by the publisher, the domain resolves to 76.76.21.21, an anycast front-end address geolocated in the United States on AS16509 (Amazon.com Inc.). That indicates where the entry point answers, not where project data is stored or processed. Anyone with a hosting-location requirement will need a written answer from the publisher, at privacy@promptkit.tools, before relying on the service.