Privacy

We store your account's email address, a record of your purchases and subscription, and a log of which full prompts your account opens and when, including openings the limit refuses. We keep them to deliver the prompts you unlocked, to protect the library from bulk copying, and to tell whether a purchase can still be refunded: it can, within 14 days, if you haven't opened any prompt from it.

We also use your email to send notices about your purchases, such as refund updates, renewal reminders or a notice before the library closes.

For each purchase we also keep three countries: the country of the billing address you enter at Stripe's checkout, the country that issued your card, and the country your connection came from at checkout, as reported by our hosting provider. We keep that country only, never your IP address.

We keep a record of what you agreed to at checkout: which version of the text, when, and for which purchase.

When you ask for a refund, we keep the request: the purchase, the date, how many of its prompts you had opened, the outcome, and Stripe's card fingerprint, a code that recognizes the same card without revealing its number.

We use these to apply the refund rights of the country you buy from (for example, the 7-day right of customers in Brazil), to show what you agreed to at checkout, and to prevent fraud and refund abuse.

Under Brazil's data protection law (LGPD), we use your purchase records, your consent record and the open log to perform our contract with you and to meet our legal obligations. We use the countries, the card fingerprint and your refund history on the basis of our legitimate interest in preventing fraud and refund abuse.

The countries, the checkout consent record and refund requests are kept for 5 years, so we can answer questions about payments, refunds and taxes. Each entry in the open log is kept for 12 months.

Accounts use an email address and a password, provided through Supabase, our authentication service.

Payments are processed by Stripe, our payment processor. Stripe collects your card details and billing address on its own checkout page; from them we keep only what this page lists. We never see your card number.

Our hosting provider (Lovable) records basic visit statistics so we can run the site: the pages you view, the page you came from, your browser and device type, your browser's language and an approximate country taken from your time zone. It counts the pages of one visit together with a cookie that expires after 30 minutes.

We use these statistics on the basis of our legitimate interest in running and securing the site. We do not use advertising trackers.

HB PROMPT is operated by Hiasmim Borinelli.

Questions about your data: hbprompt@gmail.com