Loading the page
Opening the page…
Opening the page…
You can explore PromptFace without creating an account. This policy explains the data involved in browsing, submitting a question, voting and contacting us, and the optional tools you control.
Last updated: 2 November 2026
Softcompose Karol Piasecki, Warsaw, Poland. Polish tax identification number (NIP): 7991978123. Contact for privacy, data rights and complaints: privacy@promptface.io.
PromptFace is operated by this controller. This notice concerns the public website and related correspondence. A lack of registration does not mean that visits or requests are anonymous in every respect.
To deliver the website, our infrastructure processes connection information such as IP address, requested URL, time, browser information and response status. Security logs and short-lived abuse-prevention records help protect availability and investigate incidents. Our legal basis is our legitimate interest in operating and protecting the service (Article 6(1)(f) GDPR).
Display preferences and the record of your cookie choice are stored in your browser. They are not advertising identifiers. A first-party question-view counter records an aggregate count; the website proxy does not forward your cookies or IP headers to that counter. Ordinary infrastructure connection data may still be processed.
Do not include personal, confidential or sensitive information in search terms. Requested URLs may appear in infrastructure logs.
When you request monitoring, we receive your question, selected or suggested category, email address, submission context and time. Your email is used to handle the request and communicate about that question; it is not a newsletter subscription or permission for advertising.
We use this information to provide the monitoring you request and take related steps at your request (Article 6(1)(b) GDPR). Where you act for an organisation, our legitimate interest in handling its request applies (Article 6(1)(f)). Abuse prevention and protection of claims rely on Article 6(1)(f).
Your email and question are required for the monitoring request; you can still browse without submitting them. Questions and category suggestions are reviewed. An accepted question and its AI answers may become public in the library; your submission email is not published. Submit market questions suitable for publication, without anyone’s personal or confidential information.
If you vote, we store the question, your rating and a pseudonymous voter identifier. A signed first-party cookie remembers your voting identity for up to 365 days and helps maintain one active vote per browser and question. It is set when you use voting and is separate from analytics and advertising.
We rely on our legitimate interest in maintaining useful, reliable question ratings and preventing duplicate votes (Article 6(1)(f) GDPR). A random identifier is not a public account. You can change a vote by choosing the other rating; the interface does not currently offer vote withdrawal. Contact us about applicable data rights.
If you email us, we process your email address, message and information you provide to reply, prepare a quote or fulfil an agreed report order. Steps towards or performance of a contract rely on Article 6(1)(b) GDPR; organisation enquiries and ordinary correspondence rely on our legitimate interest in handling communications (Article 6(1)(f)). Accounting and other mandatory records rely on Article 6(1)(c).
Providing contact information is voluntary, but we need a reply address to respond. Paid reports are agreed separately; browsing or using the report calculator does not place an order.
With your separate choices, we can use Google Analytics 4 for audience measurement, Microsoft Clarity for heatmaps and session replays, and Meta Pixel for advertising measurement. These tools can process IP connection information, device/browser information, page visits, interactions and cookie identifiers. Clarity may capture click, scroll and layout information; page text and form values are masked by the website.
These integrations run only if configured and you have allowed their category. Before permission, and after rejection, we do not load their scripts or send cookieless measurement pings. GA advertising features are disabled. Clarity advertising storage is denied. The website does not send your monitoring email or form values as tracking events or enable Meta advanced matching. Meta may associate visits with your Meta account and use them for advertising purposes.
The legal basis is your consent (Article 6(1)(a) GDPR); optional storage or access on your device also requires consent under Article 399 of the Polish Electronic Communications Law. Browsing and requesting monitoring do not require these permissions. lets you withdraw consent at any time, without affecting earlier lawful processing. Withdrawal stops future use and reloads the page if a tool was running.
See the cookie and provider notice for names, storage periods, provider policies and the current integration status.
Our library contains recorded AI responses and information from cited public websites. This can incidentally include professional names, roles, business details or statements about people, obtained from AI outputs and the source URLs shown with each record rather than directly from those people. Public library visitors and report recipients may receive this information.
We process relevant public research material on the basis of our legitimate interest in documenting AI answers and their sources for market research (Article 6(1)(f) GDPR). Public availability does not remove data protection rights. AI responses can be inaccurate. If a record contains your personal information, contact us with its URL so we can consider correction, removal, restriction or an objection. Do not rely on an AI record to make decisions about a person.
Authorised people operating PromptFace and contracted hosting, database, infrastructure and email providers may process data to provide and protect the service. Professional advisers and competent authorities may receive data where needed for legal obligations or claims. Public question and research content has the recipients described above; monitoring email addresses are not part of that publication.
When you permit configured tools, recipients include Google Ireland Limited / Google LLC (Analytics), Microsoft Ireland Operations Limited / Microsoft Corporation (Clarity), and Meta Platforms Ireland Limited / Meta Platforms, Inc. (Meta Pixel). Providers may act as processors or as controllers for their own purposes under their respective terms. For Meta Business Tools collection and transmission, the applicable Controller Addendum describes joint-controller responsibilities; Meta handles subsequent processing under its own policy.
Provider processing may involve countries outside the EEA, including the United States. Transfers require an applicable GDPR safeguard, such as an adequacy decision for a covered, certified recipient or standard contractual clauses with the required supplementary measures. Consent to cookies is not a substitute for these transfer safeguards. You can ask us for information about the providers and safeguards relevant to your data, including a copy where applicable.
Source websites have their own privacy rules. The reader may load a cited website’s favicon directly with no referrer; that request exposes your IP address and browser connection information to the website. Opening a source link also connects you to its operator. Fonts used by PromptFace are hosted locally.
Your cookie decision lasts 180 days unless you clear browser storage, change it, or the policy/configuration changes enough to require a new choice. Essential display choices remain until you change them or clear browser storage. The voting cookie lasts up to 365 days; stored votes are separate from that cookie.
Monitoring requests and their email addresses are kept for the handling of the request and related question communications. Correspondence is kept while the enquiry or agreed service remains relevant. Afterwards, records are retained only to meet a legal duty or establish, exercise or defend claims within the applicable limitation periods. Security records are retained for the operational need to detect and resolve abuse or incidents. Public research records are kept while relevant to the research library, subject to applicable rights and review.
Provider cookie lifetimes are listed in the cookie notice; these are different from server-side event retention. Provider-side records follow the configured project retention and the provider’s applicable terms. Withdrawal stops future collection; it does not by itself delete all historical provider records. Contact us to exercise an applicable erasure request.
Depending on the processing and legal conditions, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent at any time. If personal data is used for direct marketing, you can object at any time. We do not use this website to make solely automated decisions with legal or similarly significant effects about you. Advertising tools may use profiling as described in their own policies.
Email privacy@promptface.io with enough information to locate the relevant request or record. We may need proportionate verification of identity; do not send identity documents unless a necessary, secure verification process has been agreed. We generally respond within one month; where GDPR permits an extension, we will explain it within that month.
You can lodge a complaint with the Polish supervisory authority, President of the Personal Data Protection Office (UODO), or the competent authority in your place of habitual residence, work or the alleged infringement.
We update this notice when relevant processing changes and show the revision date above. Material changes to optional tools or their purposes require a new choice; continuing to use the site is not consent.