Privacy notice

Scale DM Ltd is the controller responsible for personal information handled through My First Prompt. Scale DM Ltd is registered in England and Wales under company number 12173975.

Privacy questions and requests can be sent to hello@myfirstprompt.co.uk.

We handle the information needed to operate My First Prompt, keep it secure and provide the features you choose to use.

• Account information: your email address, account identifier, sign-in records and subscription status.
• Prompt information: the rough prompt, selected category and generated result you submit to the service.
• Saved library information: the title, category, original prompt, improved prompt and save dates for prompts you choose to save.
• Security and operational information: session information, a hashed request fingerprint derived from IP address and browser information, and technical records needed to diagnose misuse or service failures. The fingerprint supports free-use enforcement, abuse prevention and rate limiting, including sign-in limits, and associates anonymous product events without using the prompt body.
• Billing information: subscription state and Stripe customer or subscription identifiers. Stripe and Link, rather than My First Prompt, collect and process your full payment-card details.
• Campaign and product journey information: a random journey identifier, approved campaign labels such as source and campaign name, an OpenAI advertising click reference (oppref) when one is supplied with an advert visit, the broad prompt category and product steps such as improvement completed or prompt copied. These records do not contain prompt text, generated results or email addresses.
• Optional analytics information: if you accept analytics, Google Analytics and, when enabled for a campaign, Meta receive limited information about visits to public pages and product journey events. Prompt text, generated results, email addresses, account identifiers and account pages are excluded from the event parameters we send.

Prompts are processed to generate your improved output. This requires sending the content of your prompt, its category and the instructions needed for the task to OpenAI as our AI subprocessor.

Unsaved prompts are not intentionally added to your prompt library or written to our application database. They may still be handled temporarily in transit or by operational, security and provider systems where this is necessary to deliver and protect the service.

If you start sign-in and checkout from an unsaved result, a versioned hand-off containing the draft, result and requested next action is stored in sessionStorage for that browser tab. It expires after 60 minutes and is removed after the action resumes successfully. If you accept analytics, limited campaign labels, a random journey identifier and an OpenAI advert click reference when present are also kept in that tab so the visit can be measured across the public journey. Browser sessionStorage also usually clears when the tab closes. During the sign-in step, those limited campaign values may also be carried temporarily in the page address so checkout attribution survives a refresh.

If you choose to save a prompt, its original and improved text are stored encrypted at rest until you delete that prompt or delete your account. The prompt title, category and timestamps are stored alongside the encrypted text so the library can work.

Do not include confidential, highly sensitive or third-party personal information unless you have a lawful reason and are comfortable using it with an AI service.

We use information to perform our agreement with you, including signing you in, generating prompt improvements, saving prompts you ask us to save and providing subscription features.

We also use limited information for our legitimate interests in securing the service, preventing abuse, maintaining reliability, responding to support requests, understanding service failures and measuring the broad steps completed during a campaign visit. Where consent is legally required, we will ask for it.

If you accept optional analytics, we use that information with your consent to understand how public pages and product steps are used and improve the service. You can withdraw that consent through “Cookie settings” at any time.

We use specialist providers to run the service. These include OpenAI for AI processing, Stripe and Link for checkout, subscription billing and Managed Payments, Google Analytics for consented public-page analytics, Meta for consented campaign measurement when enabled, and providers for hosting, databases and transactional email.

Those providers process information under their own contractual and security arrangements. Some processing may take place outside the UK or European Economic Area. Where required, we use recognised transfer safeguards or rely on another lawful transfer mechanism.

We may also disclose information where the law requires it, to protect the service or its users, or as part of a business transfer subject to appropriate safeguards. We do not sell your personal information.

Saved prompts remain in your encrypted library until you delete them or delete your account. Account, subscription and transaction records are kept only for as long as needed to provide the service, meet legal or accounting duties, resolve disputes and prevent fraud.

The browser-tab checkout hand-off expires after 60 minutes and is removed after a successful resume. Login codes expire after 10 minutes. Security, diagnostic and backup records may remain for a limited operational period before being deleted or overwritten. Stripe may retain payment records under its own legal obligations.

If analytics is accepted, Google Analytics cookies may remain for up to two years and event-level analytics data may be retained for up to 14 months. Withdrawing consent stops future analytics collection and removes the analytics cookies available to this site.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of your personal information, and to receive a portable copy. You may also withdraw consent where processing depends on consent.

You can delete individual saved prompts, delete your account and manage subscription billing from Account. For any other privacy request, email hello@myfirstprompt.co.uk. We may need to verify your identity before acting.

You can complain to the UK Information Commissioner’s Office or your local data-protection authority. We would welcome the chance to address your concern first.

We use measures designed to protect information, including encrypted storage for saved prompt text, hashed authentication records and secure session cookies. No online service can promise absolute security.

We may update this notice as the service, providers or law change. Material changes will be made clear in the service or by another appropriate method. The date below shows when this version was last updated.