Privacy policy

1. Who processes the data

Data controller: 4Piemai.

For any request about your data, write to 4piemai@gmail.com.

2. What data we process

• Account data: email address, name and profile picture (if you sign in with Google, those provided by Google).
• Firms: the firm or firms you belong to, your role and the invitations you send or receive.
• Content: the requests you write in the generator, generated prompts, favourites, templates, public links and the firm's business profile.
• Usage data: number of requests, AI model used, amount of text processed and cost, to apply usage limits and control the cost of the service.
• Technical data: the technical cookies described on the Cookies page and the server's technical logs, which do not contain the text of requests or prompts.

3. Sensitive data in requests

Before a request is sent to the AI model, AIPrompter recognises emails, phone numbers, IBANs, card numbers, Italian tax codes and VAT numbers and replaces them with a placeholder. The original values stay only in the page open in your browser: they do not reach the model and are not stored, not even in history.

Recognition does not cover people's names, addresses or other data: please do not enter personal data about clients, employees or other people unless it is necessary.

4. Why we process it and on what basis

We do not use your data for advertising or profiling, we do not sell it and we do not use analytics or tracking tools.

• Providing the service (account, firms, prompt generation, history, library): performance of the contract, i.e. the Terms of service.
• Applying usage limits, preventing abuse and protecting the service: the controller's legitimate interest.
• Complying with legal obligations and responding to authorities: legal obligation.

5. Who we share it with

To run the service we rely on providers that process data on our behalf as data processors:

• Hostinger: servers and database, located in Germany (European Union).
• Clerk: sign-up, sign-in, firm management and sending of sign-in and invitation emails (United States), also through its own sub-processors, for example Cloudflare to protect the sign-in domain from bots.
• OpenRouter and the AI model providers reached through OpenRouter: processing of requests, already stripped of recognised sensitive data (United States and other countries).

6. Transfers outside the European Union

Some providers are located outside the European Union. Transfers rely on the safeguards provided by the GDPR (adequacy decisions, such as the EU–US Data Privacy Framework, or standard contractual clauses). You can ask for details by writing to 4piemai@gmail.com.

7. How long we keep it

• Account and content: for as long as you keep your account. Prompts and templates you delete disappear immediately.
• Content shared with a firm: stays with the firm after you leave, without your name, until the firm deletes it.
• Public links: until the chosen expiry or revocation.
• Usage data: for cost reporting; after the account is deleted it is no longer linked to your name or email.
• Server technical logs: up to 30 days, after which they are deleted.
• Logs of access to the server by system administrators (with time and IP address, including failed access attempts): 180 days, as required by the Italian Data Protection Authority for system administrators.

8. Your rights

You can request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. From the “My account” page you can download your data and delete your account yourself; for anything else write to 4piemai@gmail.com.

You also have the right to lodge a complaint with the supervisory authority (in Italy, the Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. Security

Communications are encrypted, each firm's data is kept separate from the others' at database level too, and access to the administration area is restricted. No system is completely secure: if you notice a problem, please write to us.

10. Minors

AIPrompter is designed for professionals and businesses and is not intended for anyone under 18.

11. Changes

If this policy changes significantly, we will let you know in the service. The date of the last update is shown at the bottom of the page.