Privacy Policy

Effective Date: 28 August 2026

This Privacy Policy explains how we collect, use, and protect your information when you use Prompt Scripter (“the Service”).

By installing or using the Service, you agree to the practices described in this Policy.

1. Who We Are

The controller of the personal data described in this Policy is:

Javier Aguilar Martín, a sole trader established in the United Kingdom, trading as AGILabs (“we,” “our,” or “us”).

Address: 82 Chatterton Road, BR2 9QE, United Kingdom
Email: info@javieraguilar.ai

AGILabs is a trading name, not a registered company. There is no company number.

We have not appointed a Data Protection Officer; we are not required to. Writing to the address or the email above reaches the person responsible.

2. Information We Collect

Chat Data: Prompts, responses, and datasets you explicitly choose to store.
Account Data: Email, login credentials, subscription status.
Technical Data: Device/browser type, extension version, limited usage logs (for debugging and abuse prevention).

We do not automatically collect your chat content unless you request storage.

Mailing List Data: If you submit your email address through the sign-up form on our website, we store that address so we can write to you about Prompt Scripter. Giving it is entirely optional and is not required to use the Service.
Payment Data: If you subscribe to Pro, you pay Stripe rather than us, and your card details never reach us. From Stripe we receive an identifier for your Stripe customer record and the state of your subscription — enough to know which account to switch on, and when. See section 5.

3. How We Use Your Data, and Our Lawful Basis

We process personal data only for the purposes below. Each is listed with the lawful basis under Article 6 of the UK GDPR that we rely on.

Providing the Service — creating your account, signing you in, and letting you create, store, run, export and delete your templates and datasets. Basis: performance of a contract with you.
Running a Pro subscription — knowing whether your account is entitled to Pro, and acting on what Stripe tells us about your subscription. Basis: performance of a contract with you.
Keeping the Service working and safe — debugging, abuse monitoring, safety filtering, and preventing misuse of the Service or of the AI platforms it works with. Basis: our legitimate interests in running a service that is not broken and is not abused, weighed against your interests.
Writing to you about Prompt Scripter, where you gave us your address through the sign-up form on our website. Basis: your consent, which you can withdraw at any time.
Meeting legal obligations — including keeping records the law requires us to keep, and responding to lawful requests. Basis: compliance with a legal obligation.

We do not sell your data, and we do not share it with advertisers.

4. Automated Decision-Making

We do not make decisions about you by automated means that produce legal effects or similarly significant effects. Enforcing a plan limit — declining to create an eleventh template on the free plan, say — is a fixed rule applied to a count, not a decision about you.

5. Who Receives Your Data

We keep this list as short as running the Service allows.

Stripe — Stripe takes the payment and is the merchant of record for the sale, which makes Stripe the seller and a controller in its own right for the purchase, the receipt and the tax on it. When you pay, Stripe collects and holds your payment and billing details under its own privacy policy. What comes back to us is your subscription status and an identifier, not your card.
Our infrastructure suppliers — the hosting platform and the managed database that run the Service, which necessarily hold what you store in it. They act on our instructions as processors. We will tell you who they currently are if you ask.
Third-party AI platforms — see section 9. These are the platforms you are already using; Prompt Scripter works alongside them.
Anyone we are legally required to disclose to — a court, a regulator, or law enforcement acting under a valid legal power.

We do not pass your data to anyone else.

6. Data Retention

Stored chat data is kept only as long as needed for you to use the Service.
If you delete data, it will be removed from your view immediately.
We may retain deleted data briefly (within third-party AI providers’ retention policies, e.g. 24h–55 days) for safety and legal purposes.
An email address submitted through the website sign-up form is kept until you ask us to remove it, which you can do at any time by writing to info@javieraguilar.ai. We use it only to send occasional updates about Prompt Scripter. We do not sell it, and we do not pass it to anyone else for their own marketing.
Account data is kept for as long as your account exists. Moving from Pro back to the free plan deletes nothing — see the Terms of Service. If you close your account, we delete your account data and the content you stored, subject to the short windows above and to any record we must keep for tax or legal reasons.
The record of a payment is kept by Stripe as the seller, under Stripe’s own retention rules, and by us where UK tax law requires it.

7. Your Rights

If you are located in the UK, EU, or another jurisdiction with data protection laws, you have the right to:

Access your data.
Correct inaccuracies.
Request deletion (“right to be forgotten”).
Restrict or object to certain processing.
Port your data (export in machine-readable format).
Withdraw your consent at any time, where we rely on consent. Withdrawing it does not affect processing that already took place.

You can exercise these rights by contacting us at info@javieraguilar.ai. We will respond within one month.

Complaints. If you think we have handled your data badly, please tell us first — it is usually the fastest way to fix it. You also have the right to complain to a supervisory authority without going through us. In the UK that is the Information Commissioner’s Office, at ico.org.uk. If you are in the EEA, you can complain to the authority in the country where you live.

8. Security

Traffic between the extension, our website and our backend is encrypted in transit over HTTPS.
Passwords are stored hashed, never in a form we can read.
Sessions use tokens that expire.
We never handle your card details; Stripe does.
Access to the systems holding user data is limited to the person operating the Service, and is not given to anyone who does not need it.

No service can promise data is safe against every possible attack, and we do not make that promise. If a breach affects your data and the law requires us to tell you, we will.

9. Third-Party AI Platforms

Prompt Scripter interacts with third-party AI platforms (e.g., OpenAI, Anthropic, Google). Your use of those platforms is governed by their own terms and policies.

We do not control how those providers process or retain data.

10. International Transfers

We are established in the United Kingdom and your data is processed here. Some of our suppliers, including Stripe and the AI platforms above, operate outside the UK and the EEA, so your data may be transferred to and processed in other countries, including the United States.

Where that happens we rely on a transfer mechanism recognised under the UK GDPR: an adequacy decision covering the destination country, or the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with any additional safeguards the transfer calls for. Ask us and we will tell you which applies to a particular supplier.

11. Children’s Privacy

The Service is not intended for users under 16. We do not knowingly collect data from children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the extension or our website.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us at:
info@javieraguilar.ai

Javier Aguilar Martín, trading as AGILabs
82 Chatterton Road, BR2 9QE, United Kingdom