Privacy Policy

1. Introduction and Data Controller

This Privacy Policy explains how COGNIVORA TECHNOLOGIES LTD, a company incorporated and registered in England and Wales under company number 17394031, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("Company", "we", "us" or "our"), collects, uses, stores, shares and otherwise processes personal data in connection with the website https://prmptforge.org/ and the services made available through it under the PromptForge brand.

COGNIVORA TECHNOLOGIES LTD was incorporated on 11 August 2026.

PromptForge is a web-based artificial intelligence service. Users access the Services through a web browser and may use the available functionality to optimise or improve text prompts and to generate images using artificial intelligence technologies.

Nothing is installed on the user's device as part of the ordinary use of the Services. PromptForge does not operate through licence keys, device activations, device limits or recurring subscriptions. Instead, users may purchase internal virtual credits ("Credits") and use those Credits to request individual operations available through the Service.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation ("EU GDPR"), COGNIVORA TECHNOLOGIES LTD acts as the data controller in relation to the processing of personal data described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service and, where applicable, our Cookie Policy or cookie notice.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed when a person visits the PromptForge website, creates or uses an account, purchases or uses Credits, submits prompts or image generation requests, receives generated results, contacts customer support or otherwise interacts with the Services.

The Privacy Policy applies both to information provided directly by a user and to certain technical, transactional and operational information generated automatically through the use of the Services.

The Privacy Policy does not govern the independent processing activities of third parties that act as separate controllers of personal data, including payment service providers or other third-party services whose own privacy policies may apply directly to users.

3. Categories of Personal Data We Process

We aim to process only the personal data that is reasonably necessary for the operation, security and administration of PromptForge and for compliance with our legal obligations.

3.1. Account and Registration Data

When you create an account, we may collect and process information necessary to identify and maintain that account. This primarily includes your email address, internal account identifier, date of registration, email verification status and information relating to the current status of the account.

Email verification is required before access to the user dashboard and the main functionality of the Services is provided.

We may also process records showing when the account was accessed, when material account actions were performed and whether requests relating to the account have been made through customer support.

We do not require or process device identifiers for licence validation, because PromptForge does not use a device-based licensing system.

3.2. Credits and Service Usage Data

PromptForge operates through Credits purchased by users or, where applicable, allocated by us as a promotional or introductory bonus.

We maintain records relating to the acquisition and use of Credits, including the number of Credits purchased, allocated, reserved, spent, returned or cancelled, together with the date and status of relevant operations.

When a user submits a request, the applicable number of Credits may be temporarily reserved while the request is being processed. If the requested operation is successfully completed and a result is made available, the relevant Credits are deducted. If the operation fails and no result is provided, the reserved Credits may be returned automatically in accordance with the Terms of Service.

These records are necessary to maintain an accurate account balance, resolve billing or service disputes, provide customer support and demonstrate the history of operations performed through the account.

Credits are an internal accounting unit used only within PromptForge. They are not electronic money, legal tender, a deposit, a bank account balance or a transferable payment instrument.

3.3. Prompts, Requests and User Inputs

When you use PromptForge, we process the text and other information you submit for the purpose of obtaining a result from the Service.

This includes prompts, instructions, descriptions, parameters and any other input that you intentionally submit through the relevant interface.

Where you use the prompt optimisation functionality, the text you provide is processed in order to return an optimised, improved or otherwise transformed version of that prompt.

Where you use image generation functionality, the text prompt and associated generation parameters are processed in order to produce an image.

Users should avoid submitting personal data that is not necessary for the requested operation. In particular, users should not include passwords, authentication credentials, private keys, payment card credentials, access tokens or other sensitive secrets in prompts submitted to the Service.

3.4. Generated Results and Operation History

We process and store the results produced through the Service, including optimised text prompts and generated images.

We also maintain an operational history associated with the account. This may include the original prompt, generated result, type of requested operation, selected service quality, date and time of the request, Credits charged or returned, status of the operation and other information reasonably necessary to display the request history in the user's dashboard and administer the Service.

Unlike services that process prompts only temporarily and immediately discard them, PromptForge stores prompts, generated results and the history of operations on its systems for the purposes described in this Privacy Policy.

Users should therefore assume that content submitted to and generated through PromptForge may be retained in association with their account, subject to the retention rules described below.

3.5. Generated Image Files

Generated image files are stored for a limited period.

A downloadable image file may remain available in our storage for up to 7 days following generation or until the first successful download, whichever occurs first.

After the applicable period ends, or after the file has been downloaded where the Service is configured to remove it following the first download, the downloadable image file may be removed from active storage.

Removal of the image file does not necessarily mean that every record relating to the relevant operation is deleted at the same time. We may continue to retain information such as the request date, transaction status, Credits charged, internal identifiers, support records and other metadata necessary for accounting, security, customer support, dispute handling or legal compliance.

The expiry or deletion of a generated file does not itself result in a refund or restoration of Credits where the relevant service has already been successfully provided.

3.6. Payment and Transaction Data

Users may purchase Credits through third-party payment service providers.

The payment provider may collect information such as payment card details, billing details, payer information, transaction identifiers and other data necessary to process a payment.

We do not normally receive or store complete payment card numbers, CVV codes or equivalent payment authentication credentials.

However, we may receive transaction-related information from the payment provider, such as the date of payment, transaction identifier, amount, currency, payment status, refund status, chargeback status or other limited information required for payment reconciliation, customer support, fraud prevention, accounting and legal compliance.

Payment service providers may process personal data under their own privacy policies and may act as independent controllers in relation to certain processing activities.

3.7. Customer Support and Communications

If you contact us by email, through the website contact form or through another support channel made available by us, we will process the information contained in your communication.

This may include your email address, account information, the contents of your request, attachments and records of communications between you and our support team.

Support communications may concern, among other things, technical issues, Credits, payments, refunds, withdrawal from the contract, cancellation of payments where available, withdrawal of unused Credits where permitted, personal data requests, account deletion or other issues relating to the Services.

We retain support correspondence for as long as reasonably necessary to handle the relevant request, maintain an appropriate record of our response and protect our legitimate interests in the event of a dispute.

3.8. Technical, Security and Log Data

When you visit or use PromptForge, certain information may be generated automatically.

This may include your IP address, browser type, operating system, access time, session information, server logs, security events, request logs and similar technical information.

Such information may be processed where necessary to establish a connection with the Service, authenticate users, maintain website functionality, identify errors, prevent unauthorised access, detect fraudulent or abusive activity and protect our infrastructure.

We do not use technical data for the purpose of enforcing licence keys or device activation restrictions.

4. Purposes for Which We Process Personal Data

We process personal data primarily to provide, administer, secure and improve PromptForge.

Account and registration information is used to create and maintain user accounts, verify email addresses, enable dashboard access and allow us to associate Credits, prompts, results and operational history with the correct account.

Prompts and other user inputs are processed for the purpose of performing the operation requested by the user. Generated outputs are processed in order to make the result available, maintain the user's history and provide evidence that the requested operation was completed.

Credits and payment-related information are processed in order to maintain balances, reserve Credits during processing, deduct Credits when an operation is completed, return Credits where an operation fails, reconcile payments and resolve disputes relating to transactions or service usage.

We also process personal data in order to provide customer support, respond to requests for refunds, withdrawals, account deletion or access to personal data, prevent misuse of the Services, investigate technical incidents, maintain system integrity and comply with applicable legal, accounting, tax and regulatory obligations.

Where necessary, personal data may also be processed for the establishment, exercise or defence of legal claims.

5. AI Processing and Disclosure of Prompts

PromptForge relies on third-party artificial intelligence technologies to perform prompt optimisation and image generation.

When you submit a request, the content necessary to perform that request is transmitted to an AI service provider or otherwise made available to infrastructure used to perform AI processing.

The information transmitted may include the prompt or other input entered by you, generation instructions, parameters associated with the requested operation and technical information necessary to route and process the request.

For example, where you request optimisation of a prompt, the text of the prompt must be transmitted for AI processing. Where you request image generation, the text describing the requested image and relevant parameters must likewise be transmitted for processing.

The AI provider then returns a result, which may subsequently be stored in our systems and displayed in your account history.

The Service may present quality options such as Standard and Ultra. These names describe the service level or quality option available to the user and do not necessarily identify a specific underlying AI model.

The model or AI provider used for a particular quality option may change from time to time for technical, commercial, quality, availability or operational reasons.

We therefore do not guarantee that a particular provider or model will always be used for a particular request.

6. AI-Generated Content and Provider Restrictions

Outputs produced through PromptForge are generated automatically by artificial intelligence systems.

We do not manually review or determine the substantive content of each individual response before it is produced.

AI providers may apply their own technical restrictions, acceptable-use rules, content moderation mechanisms or safety requirements. As a result, a request may be rejected, blocked, limited or modified by the relevant AI provider.

Where an operation cannot be completed because the underlying AI provider refuses or fails to process a request, the treatment of reserved Credits will be determined in accordance with the Terms of Service and the technical status of the relevant operation.

Because AI-generated results are probabilistic, they may be inaccurate, incomplete, unexpected, offensive or otherwise unsuitable for a user's intended purpose. Users remain responsible for reviewing generated content before relying on or using it.

The processing of personal data under this Privacy Policy does not determine the ownership or intellectual property status of AI-generated outputs. Rights in generated content are governed separately by the Terms of Service, applicable law and, where relevant, terms or licensing conditions imposed by underlying AI providers.

7. Legal Bases for Processing

Where UK GDPR or EU GDPR applies, our processing is carried out on one or more recognised legal bases.

7.1. Performance of a Contract

We rely on Article 6(1)(b) UK GDPR and, where applicable, Article 6(1)(b) EU GDPR where processing is necessary to enter into or perform our contract with you.

This legal basis applies, in particular, to creating and maintaining an account, verifying an email address, processing user prompts, generating outputs, operating the Credits system, maintaining the operational history necessary to provide the Service and responding to service-related support requests.

Without such processing, we would not be able to provide the requested functionality of PromptForge.

7.2. Legitimate Interests

We rely on Article 6(1)(f) UK GDPR or EU GDPR where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Our legitimate interests include ensuring the technical security and stability of the Services, preventing fraud and abuse, detecting technical errors, maintaining transaction and operational records, resolving disputes, responding to support requests, protecting our systems and defending the Company against legal claims.

Where we rely on legitimate interests, we consider the nature of the information processed, the reasonable expectations of users and the potential impact on their rights.

7.3. Legal Obligations

We rely on Article 6(1)(c) UK GDPR or EU GDPR where processing or retention is necessary to comply with a legal obligation.

This may include obligations relating to taxation, accounting, financial records, court orders, regulatory requests and other mandatory record-keeping requirements.

Accordingly, certain transaction or payment records may be retained even after a user has requested account deletion.

7.4. Consent

Where applicable law requires consent for a particular activity, we may process personal data on the basis of Article 6(1)(a) UK GDPR or EU GDPR.

This may apply, for example, to certain non-essential cookies or direct marketing communications.

Where processing is based on consent, that consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.

8. Disclosure of Personal Data to Third Parties

We may share personal data with third parties where this is necessary for the provision, administration or security of PromptForge.

Prompts and relevant request data are disclosed to AI providers to the extent necessary to perform prompt optimisation or image generation.

Payment information is processed by payment service providers that handle the payment transaction. Those providers may receive information directly from the user and may also provide us with limited transaction information.

We may also use cloud hosting, data storage, email delivery, security, anti-fraud, analytics or technical service providers where their services are necessary for the operation of the platform.

Where such providers act on our behalf as processors, we take reasonable steps to ensure that appropriate contractual arrangements and data protection safeguards are in place.

Personal data may also be disclosed to our professional advisers, including lawyers, accountants, auditors and insurers, where reasonably necessary.

We may disclose information to courts, law enforcement bodies, regulators, tax authorities or other competent authorities where disclosure is required by law or reasonably necessary for the establishment, exercise or defence of legal claims.

If our business, assets or relevant service operations are acquired, transferred, reorganised or merged, personal data may be disclosed to the parties involved in the transaction, subject to appropriate confidentiality and data protection arrangements.

We do not sell personal data to third parties.

9. International Transfers

Some of the third parties that support PromptForge may process personal data in countries outside the United Kingdom or the European Economic Area.

This may be relevant in particular to AI providers, cloud infrastructure providers, payment service providers and other technology suppliers that operate internationally.

Where applicable data protection law requires additional safeguards for international transfers, we take reasonable steps to ensure that an appropriate transfer mechanism is used.

Depending on the circumstances, this may include reliance on an adequacy regulation or adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, the European Commission's Standard Contractual Clauses or another recognised lawful transfer mechanism.

Additional technical, organisational or contractual safeguards may also be implemented where appropriate.

10. Data Retention

We do not retain every category of personal data for the same period.

The applicable retention period depends on the purpose for which the information is processed, the nature of the data, the status of the user's account and any legal obligations requiring further retention.

Account information may generally be stored for as long as the account remains active and for a reasonable period thereafter where this is necessary to complete account closure, resolve disputes or comply with law.

Prompts, generated text results and information relating to operations may be retained in connection with the user's account in order to provide the account history, administer Credits, investigate service issues and maintain appropriate records of Services already provided.

Generated image files are subject to the shorter retention period described above. Such files may be deleted after 7 days or after the first download, whichever occurs first.

Support communications may be retained for a reasonable period after the relevant request has been resolved.

Payment, accounting, tax and transaction records may be retained for a longer period where required by applicable law or reasonably necessary for audit, fraud prevention, dispute resolution or legal claims.

Where personal data is no longer required, we may delete it, anonymise it or retain it in a restricted archive where continued retention is legally justified.

11. Account Deletion

Users may request deletion of their account by contacting customer support at:

support@prmptforge.org

Account deletion is not performed through an automatic subscription-cancellation process because PromptForge does not operate on a subscription basis.

Once an account deletion request has been verified and processed, the account will be closed and the user will no longer be able to access the dashboard or use Credits associated with that account.

Any remaining Credits will be cancelled in accordance with the Terms of Service.

Account deletion does not necessarily result in the immediate or complete deletion of every record connected with the account.

We may retain payment records, accounting records, transaction identifiers, records of previous Credits purchases or usage, support correspondence and other information where retention is required by law or reasonably necessary for fraud prevention, dispute resolution, enforcement of agreements or the establishment, exercise or defence of legal claims.

Where information is no longer necessary for any such purpose, it will be deleted or anonymised in accordance with our retention practices.

12. Data Subject Rights

Subject to applicable law, you may have certain rights in relation to your personal data.

You may request confirmation as to whether we process personal data relating to you and, where applicable, obtain access to that information.

You may request correction of inaccurate personal data or completion of incomplete information.

In certain circumstances, you may request deletion of personal data, restriction of processing or object to processing based on our legitimate interests.

Where the legal requirements are satisfied, you may also have a right to receive certain personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller.

Where processing is based on consent, you may withdraw that consent at any time.

These rights are not absolute. Applicable law may permit or require us to refuse a request in certain circumstances, for example where continued retention is necessary to comply with a legal obligation, protect the rights of another person or establish, exercise or defend a legal claim.

To exercise any data protection rights, contact:

support@prmptforge.org

We may request information reasonably necessary to verify your identity and to confirm that the request relates to an account or personal data belonging to you.

We will respond within the period required by applicable law.

Where UK data protection law applies, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). You may also have the right to complain to another competent supervisory authority where applicable.

13. Data Exports and Copies of Personal Data

If you wish to obtain a copy of personal data associated with your account or request an export of data available under applicable data protection law, you must contact:

support@prmptforge.org

We may provide information in an electronic format where appropriate and where technically and legally feasible.

The scope of any export will depend on the information we hold, the legal basis of the request and any applicable limitations under data protection law.

A request for account deletion and a request for data export are separate requests. If you require a copy of your information before account deletion, you should submit the export request before or together with the deletion request.

14. Security of Personal Data

We implement technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Such measures may include encrypted transmission, authentication controls, access restrictions, server-side security controls, monitoring, logging, infrastructure protections, backup procedures and internal restrictions on access to personal data.

Access to personal data is limited to persons or service providers that require access for legitimate operational purposes.

Although we take reasonable steps to protect the Services, no internet service, transmission method or information system can be guaranteed to be completely secure.

Users are responsible for maintaining the security of their own email account, authentication credentials and devices used to access PromptForge.

If you believe that your PromptForge account has been compromised, you should contact us promptly at support@prmptforge.org.

15. Cookies and Similar Technologies

PromptForge may use cookies and similar technologies to maintain website functionality, authenticate users, maintain sessions, remember relevant preferences, protect the Service against abuse and understand the operation of the website.

Some cookies may be strictly necessary for the operation of the Service and may therefore be used without consent where permitted by applicable law.

Where non-essential cookies or similar technologies are used and consent is legally required, those technologies will be activated only in accordance with the applicable consent requirements.

Further information may be provided through a separate Cookie Policy or cookie notice available on the website.

16. Age Requirement

PromptForge is intended only for individuals who are 18 years of age or older.

We do not knowingly permit persons under 18 to create or use PromptForge accounts.

If we become aware that personal data relating to a person under 18 has been collected contrary to this requirement, we may take reasonable steps to delete that information and close the relevant account, subject to any legal obligation requiring limited retention.

If you believe that a person under 18 has provided personal data to us, please contact:

support@prmptforge.org

17. Automated Processing

The core functionality of PromptForge relies on automated AI processing.

Prompts submitted by users are automatically processed in order to generate the requested text or image output.

This automated processing is necessary to provide the Service requested by the user.

We do not intend such processing to constitute automated decision-making producing legal effects or similarly significant effects on users within the meaning of Article 22 UK GDPR or EU GDPR.

Content restrictions or technical refusals imposed by AI providers are generally designed to determine whether a particular request can be processed by the relevant AI system and do not constitute decisions concerning a user's legal status, financial eligibility, employment, creditworthiness or comparable significant matters.

18. Contact Details

The data controller responsible for PromptForge is:

COGNIVORA TECHNOLOGIES LTD

Company number: 17394031

Registered in: England and Wales

Date of incorporation: 11 August 2026

Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Website: https://prmptforge.org/

For general enquiries:

info@prmptforge.org

For customer support, account deletion, personal data requests, withdrawal requests and other matters relating to the use of the Services:

support@prmptforge.org

For communications submitted through the website contact form:

contact@prmptforge.org

19. Governing Law

This Privacy Policy is governed by the laws of England and Wales, subject always to any mandatory data protection rights or remedies that apply to a user under applicable law and cannot lawfully be excluded by agreement.

Nothing in this Privacy Policy is intended to restrict rights granted to individuals under the UK GDPR, the Data Protection Act 2018, the EU GDPR where applicable, or other mandatory data protection legislation.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time where reasonably necessary to reflect changes in the Services, our data processing practices, applicable law, the use of third-party providers, technical infrastructure or our business operations.

Any updated version will be published on https://prmptforge.org/ and will indicate the date on which it was last updated.

Where applicable law requires additional notice of a material change, we will provide such notice in an appropriate manner.