PRIVACY POLICY
PromptLab
Effective Date: February 11, 2026

1. Introduction
   PromptLab ("we," "us," or "our") operates the website https://trypromptlab.com and the PromptLab AI procurement platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, use our platform, or interact with us in any way.
   By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect
   2.1 Information You Provide to Us
   We collect information that you voluntarily provide, including:
   Account information: name, email address, company name, job title, phone number, and billing information when you register for an account or subscribe to a plan.
   Procurement data: supplier information, RFQ details, pricing data, quote documents, purchase orders, and related business communications that you upload or input into the Service.
   Communications: messages, feedback, support requests, and other correspondence you send to us.
   Booking and inquiry data: information provided when you schedule a procurement audit or demo through our booking system.
   2.2 Information Collected Automatically
   When you access the Service, we may automatically collect:
   Device and browser information: IP address, browser type, operating system, device identifiers, and screen resolution.
   Usage data: pages visited, features used, time spent on pages, clickstream data, and navigation patterns.
   Log data: server logs, access times, referring URLs, and error reports.
   Cookies and similar technologies: we use cookies, web beacons, and similar tracking technologies to enhance your experience and collect analytics data (see Section 7).
   2.3 Information from Third Parties
   We may receive information from third-party sources, including:
   Integration partners: data from third-party tools or platforms you connect to the Service (e.g., email providers, ERP systems, messaging platforms such as Telegram or WhatsApp).
   Analytics providers: aggregated usage and performance data from analytics services.
   Publicly available sources: business information from public directories, company websites, and trade databases used to enrich supplier profiles.

3. How We Use Your Information
   We use the information we collect for the following purposes:
   Provide, operate, and maintain the Service, including AI-powered procurement automation, RFQ processing, price variance analysis, and supplier comparison features.
   Process and manage your account, subscriptions, and payments.
   Analyze procurement data using artificial intelligence and machine learning to generate insights, recommendations, and automated workflows.
   Communicate with you regarding your account, service updates, technical notices, security alerts, and support inquiries.
   Improve and develop the Service, including training and refining our AI models using aggregated and anonymized data.
   Detect, prevent, and address technical issues, fraud, and security threats.
   Comply with legal obligations and enforce our Terms and Conditions.
   Send marketing communications about our products and services, subject to your opt-out preferences.

4. AI and Automated Data Processing
   Our Service uses artificial intelligence and machine learning technologies to process your procurement data. This includes:
   Automated analysis of supplier quotes, pricing trends, and procurement patterns.
   Natural language processing of RFQ documents, emails, and business communications.
   AI-generated recommendations for supplier selection, pricing negotiation, and procurement optimization.
   Automated RFQ distribution, follow-up scheduling, and response tracking.
   Important: AI-generated outputs are provided as decision-support tools. You retain full control over all procurement decisions and are responsible for reviewing AI-generated recommendations before acting on them.
   Model training: We may use aggregated and anonymized data to improve our AI models. We do not use your identifiable procurement data, supplier-specific pricing, or confidential business information to train models that would be accessible to other customers without your explicit consent.

5. How We Share Your Information
   We do not sell your personal information or procurement data to third parties. We may share your information in the following circumstances:
   5.1 Service Providers
   We engage trusted third-party service providers to assist in operating the Service, including cloud hosting, payment processing, analytics, email delivery, and customer support. These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.
   5.2 AI and Infrastructure Providers
   We use third-party AI model providers and cloud infrastructure services to power certain features of the Service. Data shared with these providers is subject to their data processing agreements and is used solely to deliver the Service functionality.
   5.3 Business Transfers
   In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and the choices you may have regarding your information.
   5.4 Legal Requirements
   We may disclose your information if required to do so by law or in response to valid legal requests by public authorities, including to meet national security or law enforcement requirements.
   5.5 With Your Consent
   We may share your information with third parties when you have given us explicit consent to do so.

6. Data Retention
   We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we retain your data for a period of thirty (30) days to allow for data export, after which it will be deleted from our active systems. We may retain certain information for longer periods as required by law, to resolve disputes, enforce agreements, or for legitimate business purposes such as maintaining aggregated and anonymized analytics.

7. Cookies and Tracking Technologies
   We use cookies and similar tracking technologies to collect and store information about your interactions with the Service.
   7.1 Types of Cookies We Use
   Essential cookies: required for the Service to function properly, including authentication, session management, and security.
   Analytics cookies: help us understand how visitors interact with our website and platform, enabling us to improve the user experience.
   Functional cookies: remember your preferences and settings to personalize your experience.
   7.2 Managing Cookies
   You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service. Most browsers allow you to refuse or delete cookies; consult your browser's help documentation for instructions.

8. Data Security
   We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
   Encryption of data in transit using TLS/SSL protocols.
   Encryption of sensitive data at rest.
   Access controls and authentication mechanisms to limit data access to authorized personnel.
   Regular security assessments and monitoring.
   Secure cloud infrastructure with industry-standard certifications.
   While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.

9. International Data Transfers
   Your information may be transferred to, stored, and processed in countries other than the Republic of Uzbekistan, including countries where our service providers and AI infrastructure partners operate. By using the Service, you consent to the transfer of your information to these countries. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

10. Your Rights
    Depending on your location and applicable law, you may have the following rights regarding your personal information:
    Access: request a copy of the personal information we hold about you.
    Correction: request correction of inaccurate or incomplete personal information.
    Deletion: request deletion of your personal information, subject to certain legal exceptions.
    Data portability: request a copy of your data in a structured, commonly used, and machine-readable format.
    Objection: object to the processing of your personal information for certain purposes.
    Withdraw consent: withdraw your consent to data processing at any time, where consent is the legal basis for processing.
    Restrict processing: request that we limit the processing of your personal information under certain circumstances.
    To exercise any of these rights, please contact us at hello@trypromptlab.com. We will respond to your request within thirty (30) days or as required by applicable law.

11. Children’s Privacy
    The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately.

12. Third-Party Links and Services
    The Service may contain links to third-party websites, services, or integrations (including booking platforms, messaging services, and analytics tools). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

13. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website and updating the "Effective Date" at the top of this page. For significant changes, we may also provide notice via email or through the Service. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us
    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
    PromptLab
    Email: norm@trypromptlab.com
    Website: https://trypromptlab.com