Privacy policy
Last updated: 2025-05-18
Welcome to promptengineering.be. This privacy policy explains how D4N SRL ('we', 'us', 'our') collects, uses, and protects your personal information when you visit our website and use our services. We are based in Belgium and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data controller information
- D4N SRL
- Brussels, Belgium
- Email: hello@d4nt.be
- VAT: BE1022224996
- Registered company with the Crossroads Bank for Enterprises (BCE/KBO/CBE).
Introduction
Your privacy is important to us. This policy outlines our practices for handling your personal data and your rights concerning that data.
1. Information we collect
1.1 Account registration & authentication data (Supabase)
When you create an account or log in, we collect information necessary for authentication and account management, processed via Supabase. This includes: your email address, hashed password (if using password authentication), information provided by OAuth providers (e.g., Google) such as your name and email, if you choose to log in via OAuth. Supabase acts as a data processor for this information. You can view Supabase's privacy policy at: https://supabase.com/privacy
1.2 Contact form data
When you use our contact form, we collect: your name, your email address, the content of your message. This data is used to respond to your inquiries.
1.3 Purchase data (Stripe)
When you purchase prompt packs, we collect information necessary to process your payment through Stripe, such as: your name, your email address, billing address, payment details (processed directly by Stripe). Stripe processes and stores this information according to their privacy policy. You can view Stripe's privacy policy at: https://stripe.com/privacy
1.4 Website analytics data (Umami)
We use Umami.is for website analytics to understand how visitors use our site and to improve user experience. Umami is a privacy-focused analytics tool that collects anonymized data. We host our own instance of Umami or use their cloud service. The data collected may include: pages visited, referrer source, browser type, operating system, country of origin (derived from IP, but IP is anonymized). No personally identifiable information (PII) is stored, and cookies are not used by default for tracking if configured for cookieless tracking. Our Umami tracking ID is: 17c3919a-e3ae-4db6-b7b3-28fda421ba60. You can learn more about Umami's privacy practices at: https://umami.is/privacy
1.5 Cookie preferences
We store your cookie consent preferences (e.g., for analytics or marketing cookies if used in the future) locally in your browser using localStorage. This includes whether you've set preferences and your choices for different cookie categories.
2. How we use your information
2.1 Providing services
To create and manage your account, authenticate you and provide access to our platform, process your purchases and deliver prompt packs, respond to your inquiries submitted via the contact form.
2.2 Improving our website
To analyze website traffic and user behavior using Umami to improve our website's functionality, content, and user experience.
2.3 Communication
To send you important information about your account, purchases, or changes to our terms and policies. For marketing communications, only if you have explicitly consented.
2.4 Legal compliance
To comply with legal obligations, such as tax and accounting requirements related to purchases.
3. Data storage, security, and processors
3.1 Data storage locations
Your personal data may be stored on servers provided by our data processors, which may be located within or outside the European Economic Area (EEA). We ensure that any data transfers outside the EEA are protected by appropriate safeguards, such as standard contractual clauses.
3.2 Security measures
We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes measures like data encryption, access controls, and regular security assessments.
3.3 Data processors
We use the following third-party services as data processors: Supabase (for authentication and database services), Stripe (for payment processing), Umami.is (for website analytics - if using their cloud, or self-hosted), Resend.com (for transactional emails, e.g., contact form responses, password resets). We have data processing agreements in place with these providers where required.
4. Your rights under GDPR
As a user in the European Union, you have the following rights regarding your personal data:
- The right to access: you can request a copy of the personal data we hold about you.
- The right to rectification: you can request that we correct any inaccurate or incomplete data.
- The right to erasure ('right to be forgotten'): you can request that we delete your personal data, under certain conditions.
- The right to restrict processing: you can request that we limit the processing of your data, under certain conditions.
- The right to data portability: you can request that we transfer your data to another organization, or directly to you, under certain conditions.
- The right to object: you can object to our processing of your data, under certain conditions (e.g., for direct marketing).
- The right to withdraw consent: if we process your data based on your consent, you can withdraw it at any time.
To exercise these rights, please contact us at hello@d4nt.be. We will respond to your request within one month. You also have the right to lodge a complaint with a supervisory authority, such as the Belgian Data Protection Authority (autorité de protection des données / gegevensbeschermingsautoriteit) if you believe your data protection rights have been violated.
5. Data retention
Account data: we retain your account information as long as your account is active and for a reasonable period thereafter as necessary to comply with our legal obligations or resolve disputes.
Purchase data: retained for as long as necessary to comply with legal and financial obligations (e.g., tax and accounting laws, typically 7-10 years).
Contact form data: retained for up to 24 months to manage inquiries and for relationship management, unless a longer period is required for legal reasons.
Analytics data (Umami): anonymized or aggregated data may be kept for longer periods for trend analysis. Raw, non-identifiable data is typically retained according to Umami's standard practices or our self-hosted configuration (e.g., 12-24 months).
Cookie consent preferences: stored in your browser's localStorage until cleared by you or until they expire based on browser settings.
6. Cookies and tracking technologies
We use cookies and similar technologies for various purposes. Some cookies are strictly necessary for the website to function. For others, such as those used for analytics or marketing (if implemented), we will ask for your consent.
You can manage your cookie preferences at any time through our cookie consent banner or the 'cookie settings' link in the footer. For more detailed information, please refer to our cookie policy (or integrate details here).
7. International data transfers
As mentioned, some of our data processors may be located outside the EEA. We ensure that any such transfers are compliant with GDPR, typically through the use of standard contractual clauses approved by the European Commission or other appropriate safeguards.
8. Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The 'last updated' date at the top of this policy will indicate when it was last revised. We encourage you to review this policy periodically.
9. Contact us
If you have any questions, concerns, or requests regarding this privacy policy or how we handle your data, please contact us at: D4N SRL, Brussels, Belgium. Email: hello@d4nt.be.
