Privacy Policy

Last updated: June 2026

Prompt Firewall ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

When you use Prompt Firewall, we collect:

Account information: Your name and email address when you sign up.
Payment information: Handled entirely by Paddle. We never see or store your card details.
API usage data: A short preview (first 80 characters) of each message analyzed, the verdict (PASSED or BLOCKED), and a timestamp. We do not store full message content.
Technical data: IP address and request metadata for rate limiting and security purposes.

2. How We Use Your Data

To provide and maintain the Prompt Firewall service
To send you your API key and account-related emails
To detect abuse and enforce rate limits
To improve the blacklist and security rules

3. Data Sharing

We do not sell your data. We share data only with:

Paddle — for payment processing
Railway — for hosting and infrastructure

4. Data Retention

Security event logs are retained for 90 days and then automatically deleted. Account data is retained until you cancel and request deletion.

5. Your Rights

You have the right to access, correct, or delete your personal data at any time. Email us at hello@promptfirewall.com to make a request.

6. Contact

Questions? Email us at hello@promptfirewall.com