Back to Workspace

Privacy Policy

Last Updated: September 08, 2026

Data Controller

Lockhart Arts Ltd

703a Seven Sisters Rd, England, N15 5LA, United Kingdom

Contact: [email protected]

Data Protection Officer (DPO)

Rob Lockhart

Email: [email protected]

1. WHAT INFORMATION DO WE COLLECT?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Data Provided by You:

  • Identifiers & Account Data: Names, email addresses, passwords, phone numbers, contact preferences, and user handle.
  • Payment & Billing Data: Financial transactions and billing information processed securely via Stripe. All payment data is stored directly by Stripe; you can view their privacy notice at https://stripe.com/privacy .
  • Technical & Log Information: IP addresses, browser specifications, operating systems, referring URLs, device details, and system interaction logs.
  • Google API Services Compliance: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation, authentication, and user account management.
  • To deliver, maintain, and improve prompt engineering toolsets, generative AI processing, and cloud services.
  • To process subscriptions, billing, and transactional invoicing via Stripe.
  • To respond to user inquiries and offer technical customer support.
  • To enforce our terms, conditions, and policies, as well as to protect our legal rights.
  • To prevent fraudulent access, unauthorized usage, and secure our system infrastructure.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, such as the EU/UK General Data Protection Regulation (GDPR) and Canada Personal Information Protection and Electronic Documents Act (PIPEDA).

  • Consent: We process your data if you have given us permission to use your personal information for a specific purpose.
  • Performance of a Contract: We process your information to fulfill our contractual obligations to you under our Terms of Service.
  • Legitimate Interests: We process data when reasonably necessary to achieve our legitimate business interests, such as improving platform performance and securing data.
  • Legal Obligations: We may disclose information where required by statutory laws, court orders, or governmental requests.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your data with third-party service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.

Categories of Third-Party Vendors & APIs:

  • Payment Processor: Stripe (for credit card checkout, billing, and subscription management).
  • Location & Geolocation APIs: Google Maps Platform APIs (for address verification and geolocation services).
  • Cloud Infrastructure & AI: Google Cloud Platform & Vertex AI / Gemini API endpoints.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

The Services may contain links to third-party websites, online services, or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content or privacy and security practices and policies of any third parties.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Detailed information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

For complete details, please visit our Cookie Policy .

To opt out of Google Analytics tracking across all websites, visit https://tools.google.com/dlpage/gaoptout.

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

AI Product Offerings & Data Boundaries

CompilePrompt provides artificial intelligence (AI) feature sets powered by Google Cloud AI and Vertex APIs for prompt compilation, refinement, and image generation.

  • Your user prompts and generated image output remain your personal data and are not sold to third-party advertisers.
  • We do not utilize proprietary customer prompt data to train public foundation models without your explicit opt-in consent.

8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you choose to register or log in to our Services using a social media account (such as Google or GitHub), we may have access to certain information about you from that provider, including your name, email address, profile picture, and account ID. We use this data solely for account creation and login security.

9. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law.

Standard Retention Schedule:

We retain account credentials and associated prompt datasets for the duration of an active user account, plus up to 24 months past account termination to comply with tax, legal, and statutory audit obligations.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

11. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal data from minors has been collected, we will take reasonable measures to delete such data from our records immediately.

12. WHAT ARE YOUR PRIVACY RIGHTS?

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability.

Regulatory Contact & Supervisory Authorities:

UK Information Commissioner’s Office (ICO) Helpline: 0303 123 1113 or visit https://ico.org.uk.

If you are located in the EEA or Switzerland, you may contact your national Data Protection Authority.

13. CONTROLS FOR DO-NOT-TRACK FEATURES & GLOBAL PRIVACY CONTROL (GPC)

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

We recognize and honor browser-level Global Privacy Control (GPC) signals sent by your user agent. GPC is a standard web privacy signal defined at globalprivacycontrol.org .

⚪ GPC Signal Not Detected — Default privacy control settings active.

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you are granted specific rights regarding access to your personal information under state privacy statutes (e.g., CCPA / CPRA).

Categories of Personal Information Collected (CCPA Categories A–L):

CategoryExamplesCollected
A. IdentifiersName, alias, email address, IP address, account handleYES
B. Customer RecordsPayment details, credit card billing address via StripeYES
C. Protected ClassificationsAge, gender, marital status (if voluntarily provided)YES
D. Commercial InfoPurchase history, subscription tiers, product usageYES
E. Biometric DataFingerprints, voiceprints, facial recognition characteristicsNO
F. Internet ActivityBrowsing history, search interactions, feature accessYES
G. Geolocation DataApproximate location derived from IP address or Google Maps APIYES
H. Sensory DataAudio, electronic, visual, thermal dataNO
I. Professional DataJob title, business affiliation, employer nameNO
J. Education DataStudent records, directory informationNO
K. InferencesProfiles derived from user prompt preferences & usage metricsYES
L. Sensitive Personal InfoGovernment ID numbers, financial access codesNO

15. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email our Data Protection Officer (DPO), Rob Lockhart, at [email protected] or contact our primary privacy intake team at [email protected], or by post to:

Lockhart Arts Ltd

Attn: Data Protection Officer (Rob Lockhart)

703a Seven Sisters Rd

England, N15 5LA

United Kingdom

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, change that information, or delete it. Use our native interactive DSAR portal below to submit your request directly.

Exercise Your Data Subject Access Rights (DSAR)

Directly submit data requests under GDPR, CCPA, and applicable global privacy regulations. Click any card below to launch the interactive request portal.

Request Personal Data Copy

Access

Receive a full machine-readable export of all your identity data, prompt generations, and usage metrics.

Launch Request

Correct Data Information

Rectification

Submit corrections for inaccurate or outdated personal profile and billing contact details.

Launch Request

Request Account Erasure

Erasure

Permanently delete account credentials and scrub personal data identifiers from our records.

Launch Request

CCPA Opt-Out (Do Not Sell)

Opt-Out

Opt out of third-party advertising tracking, cookies, and data sale under California CCPA regulations.

Launch Request
All requests are logged securely and processed within statutory timelines.