Privacy Policy

Welcome to PromptBlaster, a service provided by Wullup GmbH ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our browser extension and web application (collectively, the "Service"). It also describes your rights regarding your personal data under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using PromptBlaster, you agree to the collection and use of information in accordance with this policy.

The data controller responsible for your personal data is:

We collect the following types of information:

We use your information for the following purposes:

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with the PromptBlaster service as agreed in our Terms of Service.
• Legitimate Interests: Processing for service improvement, security, and fraud prevention, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as for analytics and marketing communications. You can withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with legal requirements.

We use the following third-party services:

We collect anonymized usage data to improve our service. This includes:

• Page views and navigation patterns
• Feature usage (which features are used most)
• Error occurrences and performance metrics
• Session duration and frequency of use

Important: We do not track the content of your prompts for analytics purposes. Your prompt content remains private and is only used to provide you with the service.

We use the following types of cookies:

You can manage your cookie preferences at any time through our cookie consent settings or your browser settings.

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our service (hosting, analytics), under strict data processing agreements.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.
• With Your Consent: When you explicitly authorize us to share information.

Your data is primarily stored and processed within the European Union. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the EU
• Adequacy decisions by the European Commission (where applicable)
• Other legally recognized transfer mechanisms under GDPR

We retain your data for the following periods:

• Account Data: Until you delete your account or request deletion.
• Prompts and Content: Until you delete them or your account is closed.
• Usage Analytics: Anonymized data retained for up to 24 months for service improvement.
• Legal Records: As required by applicable law (typically 6-10 years for financial records).

When you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it.

As a data subject under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data we hold.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@wullup.com. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls and employee training
• Incident response procedures

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breach affecting your rights as required by law.

PromptBlaster is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at info@wullup.com.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes (where appropriate)

We encourage you to review this Privacy Policy periodically. Your continued use of the service after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

For data protection inquiries, you can also contact your local data protection authority. In Germany, the relevant authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.