Policy
Privacy policy
Written against what the code actually does, not against what would be convenient to say. Where a claim needed narrowing to stay true, it has been narrowed.
Last updated 4 September 2026
Who is responsible
PromptCaret is operated by Prateek Chaudhary, a sole proprietor in India, who is the data controller for everything below. Reach him at support@promptcaret.com.
When your prompt leaves your browser
This is the part worth being precise about.
- The score that moves as you type is local. It is computed by JavaScript already running on the page, with no network request. Nothing is sent while you are editing.
- Pressing Analyse sends it. The prompt, up to 8,000 characters, is stored with its score and the seven dimension results, so you get a history and so we can see which parts of prompts people most often leave out. That is how the Academy lessons get prioritised.
- An AI rewrite sends it further. The prompt is posted to our server, which calls the Anthropic API to generate the rewrite. Anthropic processes it to return a result and does not use API inputs to train its models.
- Publishing or posting is public and intentional. A prompt you share to the community board, or post to the daily drill, is visible to anyone. Your email address is never attached to it — the board shows only the display name you type.
What is stored
- Prompts and scores from analyses, searches, anything you save to your library, and any rewrite you rate.
- Account details if you sign in: your email address, and the name and avatar your Google or Apple account chooses to share. No password is ever created or held here.
- Payment records: the Razorpay payment identifier, the email it granted a pass to, and when. Card and UPI details are handled entirely by Razorpay and never reach this server.
- Usage counters — how many AI rewrites you have spent today — and Academy progress and drill entries.
- Your email address if you enter it into the newsletter box. No mail provider is connected yet, so nothing has ever been sent to that list.
Cookies
Two, both strictly functional. A signed-out visitor gets pa_anon, an HTTP-only cookie holding a random identifier that lasts a year — it is what keeps your daily rewrite allowance, your saved prompts and your drill streak attached to you without an account. Signing in adds a session cookie. There are no advertising cookies and no third-party trackers.
Who else sees it
Only the services needed to run the thing: Anthropic for AI rewrites, Razorpay for payments, MongoDB Atlas for storage, Vercel for hosting, PostHog for product analytics, and Google or Apple if you use them to sign in.
PostHog receives scores, grades, lengths and which dimension was weakest — never prompt or rewrite text. Nothing is sold, and nothing is shared with advertisers. Your prompts are not used to train any model, by us or by anyone we send them to.
How long it is kept, and how to delete it
Analyses and saved prompts are kept until you ask for them to be removed. Payment records are kept for as long as Indian tax and accounting rules require. Usage counters are per day and stop mattering the next day.
Email support@promptcaret.com from the address you signed in with and say what you want removed. Deletion covers your account, your stored prompts, your library and your drill entries. Prompts you deliberately published to the community board can be taken down too — ask, and include the link.
Children
The service is not directed at children under 13, and accounts should not be created for them.
Changes
If this policy changes materially, the date at the top changes with it. Related: terms of service and the refund policy.