Google analytics are off.
Last updated: August 31, 2026
This Privacy Policy describes how Promptective (“Promptective”, “we”, “us”) collects, uses, discloses, and protects personal information when you visit our website, create an account, or use our workforce AI security products, including our web dashboard, APIs, browser extension, desktop application, command-line tools, and endpoint agents (together, the “Services”).
We build security software and apply the same discipline to personal information: routine records are content-minimised, metadata and cryptographic hashes are preferred over content, and conditional or exceptional processing is identified below.
Prompt and response text can be analysed transiently for threat detection. Default hosted interaction records exclude the text and store bounded metadata with SHA-256 hashes. A legacy raw-content switch is restricted to isolated development or testing with non-sensitive data and is prohibited for production and customer data.
For visitors detected in Australia, Google Tag Manager and configured analytics tags are on by default and can be turned off at any time. They remain off until allowed in regions that require prior opt-in and when location is unknown or has not been assessed for opt-out. The setting lasts for 180 days and never grants advertising consent.
Routine product security events record surfaces, verdicts, timestamps, and identifiers. Raw prompt, response, and source content are deliberately excluded from routine telemetry.
Organisation administrators control protection modes and policies and can record enterprise retention limits. Those settings do not by themselves prove that deletion has run. You can request access, correction, or deletion at any time.
01
Promptective provides workforce AI security across browser, endpoint, gateway, and code-assistant surfaces, including supported MCP-aware code-assistant hooks. This policy covers the public website at promptective.ai, the web dashboard and APIs, and installed clients such as the browser extension, desktop application, command-line tools, and endpoint agents.
You can raise any question or request under this policy with privacy@promptective.ai or through the privacy contact form linked at the end of this policy.
02
For personal information collected through the website, account registration, contact forms, and billing, Promptective is the data controller.
For routine security telemetry generated when an organisation deploys the Services, we process personal information on that organisation’s behalf and under its instructions. The organisation’s administrators decide protection modes and policies and may set retention-policy limits, subject to the deployed service and customer agreement. If you use the Services through your employer or another organisation, please direct privacy requests about that data to your administrator; we support organisations in responding.
03
When you register, or are invited to an organisation, we process:
04
When you submit a contact, demo, or partner enquiry, we collect the details you choose to provide, which can include your name, work email address, company, role, phone number, region, website, team or client size, selected topic, and message or goals, with your consent. The form handlers send the enquiry through Resend to relevant Promptective mailboxes; they do not write the enquiry content to our application database.
To prevent abuse, we keep short-lived request counters keyed by SHA-256 hashes derived from your email address and source IP address. Each counting window lasts 10 minutes, and stale counters are deleted during later form processing once they are more than 24 hours old.
05
Public marketing routes use regional analytics controls. For visitors detected in Australia, Google Tag Manager and configured analytics tags are enabled by default after a brief notice, with an immediate option to turn them off. They remain blocked until an affirmative choice in the European Economic Area, United Kingdom, Switzerland, and Crown Dependencies. Missing, malformed, or otherwise unevaluated location information also remains opt-in. Visitors browsing without JavaScript do not receive a GTM fallback. A browser Do Not Track or Global Privacy Control signal keeps analytics off in every region.
The GTM container can run configured analytics tags. Depending on the active tags and events, Google may receive:
Advertising storage, advertising user data, and advertising personalisation remain denied. Avoid putting personal information in website URLs because configured analytics can receive the full URL while analytics are on.
06
Paid subscriptions are processed by Stripe. Payment card details are entered directly with Stripe and never reach our systems. We store Stripe customer and subscription identifiers, package and entitlement state, and licensed endpoint quantities to operate your subscription.
07
When an organisation deploys Promptective, our clients and APIs generate routine security records that are deliberately metadata-first:
On supported inspection paths, prompt and response text can be analysed in real time to reach an allow, audit, sanitise, require-approval, or block decision. Short prompt excerpts used by supported on-device explanations stay within the local application, expire automatically, and are not transmitted in routine telemetry.
08
To enrol and manage installed clients we process:
09
Public website analytics is described in the section above. Separately, where error monitoring is enabled, a browser error that reaches the marketing error hook is reduced to a fixed route category, a generic error label, and bounded code stack locations before it is sent. Form and input values, request and response content, headers, cookies, query strings, and prompt or response text are excluded, and reports are sent without cookies or credentials. Where Sentry is configured for the Control API, standard server-side request error monitoring can process error messages and stack traces, request methods, route and path details (which can include query strings), route metadata, request headers that may include authentication or cookie values, and parsed cookies. The Sentry SDK can filter some network identifiers, but the Control API currently applies no application-owned header allowlist or before-send scrubber. The exact context depends on the error and SDK processing.
Our servers write operational logs to operate and troubleshoot the Services, and the application logger sends them to Better Stack when that integration is configured. The gateway logger rejects fields named for content, messages, responses, credentials, and similar sensitive values; other service code is designed to log operational facts while excluding customer content. Where Promptwatch crawler logging is enabled, the marketing server forwards requests presenting a recognised AI crawler user-agent. These records contain the request time, method, path, response status and content type, crawler IP address, hostname and user-agent string. Query strings and referrers are excluded.
When a user explicitly chooses Send diagnostic report in our browser extension, the extension sends us a one-off report containing its version and current enrolment, protection mode, policy, and upload-queue status. We associate the report with the authenticated organisation and browser installation and record the source network address. Prompts, responses, page addresses, and file contents are excluded. We use the submitted report to investigate support issues and improve service reliability and security.
10
Current source implements the following boundaries:
11
We use personal information to:
Where the GDPR or UK GDPR applies, we rely on performance of a contract, our and our customers’ legitimate interests in securing workforce AI use, our legitimate interest in understanding AI crawler access to the public website, consent for enquiry forms and optional website analytics, and compliance with legal obligations. For visitors detected in Australia, we collect the limited website analytics described above to understand and improve our public website, subject to the notice and opt-out controls described in this policy.
14
Retention differs by record and deployed service:
We respond to verified privacy requests within the period required by applicable law or an applicable customer agreement. We do not make a universal 30-day deletion promise where no such requirement or agreement applies.
15
If you are in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles give you rights to access and correct your personal information, and to complain about how it is handled, first to us and then to the Office of the Australian Information Commissioner (OAIC).
If you are in the European Economic Area or the United Kingdom, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, to withdraw consent, and to complain to your supervisory authority.
To exercise any right, contact privacy@promptective.ai or use the privacy contact form. We verify the identity of requesters before acting. Where your data is processed on behalf of your organisation, we may refer the request to your administrator and assist them in responding.
16
We protect personal information with encryption in transit, salted password hashing, hashed server-side storage of Promptective API keys, installation credentials, and enrolment tokens, expiry and access controls for authentication sessions, authenticated encryption for upstream API keys, cryptographically signed policy bundles, replay-protected client requests, organisation-scoped access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
17
Our service providers may process personal information in the United States and other countries. Transfer locations and safeguards depend on the provider, deployment, and customer agreement. Where applicable law requires safeguards, we use the contractual or other transfer measures applicable to that processing; contact us for deployment-specific details.
18
The Services are business software and are not directed to individuals under 16. We do not knowingly collect personal information from children.
19
We may update this policy from time to time. We will post the updated policy on this page and revise the “Last updated” date. We will give additional notice where applicable law or a customer agreement requires it.
20
For any privacy question, request, or complaint, contact our privacy team at privacy@promptective.ai or use the privacy contact form below.
