Privacy Policy

Last updated: September 4, 2026

This policy describes what LegendPrompts (legendprompts.ai) collects and how it is used. Short version: we collect the minimum needed to run a subscription service, we never see your card details, nothing you do here is fed to AI models or used for AI training, and we do not sell your data.

What we do NOT collect

No passwords — sign-in is by Google or one-time email link, so there are no passwords to store or leak. No card numbers — payments never touch our servers. No advertising trackers or cross-site tracking. No precise location, no contact lists, no browsing history beyond our own site.

What we collect

When you create an account we store your email address and, if you sign in with Google, the display name Google provides. As you use the site we store your subscription tier and status, your saved favorites, and standard technical records (such as IP addresses used for rate-limiting and abuse prevention). That is the full list.

AI and your data

LegendPrompts sells prompt text; it does not run AI models. Nothing you do on this site — your email, your favorites, your activity — is sent to any AI model provider, and none of it is used to train or improve AI models, by us or anyone else. When you take a prompt to a model like Kling or Veo, that happens on the provider's platform under their privacy policy, entirely outside this site.

Payments

Payments are processed entirely by Stripe. Your card number never touches our servers — we store only your Stripe customer reference, subscription status, and billing period, so the site knows what you have access to. Stripe's handling of your data is described in Stripe's privacy policy at stripe.com/privacy.

Service providers

We use a small set of processors to run the service, each receiving only what it needs: Supabase (database and authentication — supabase.com/privacy), Stripe (billing — stripe.com/privacy), Cloudflare (media hosting and delivery — cloudflare.com/privacypolicy), and Vercel (website hosting — vercel.com/legal/privacy-policy).

Cookies

We use only the cookies required to keep you signed in. There are no advertising cookies, no third-party analytics cookies, and no cross-site tracking of any kind.

Emails

We send transactional emails only: sign-in links and billing-related messages. No marketing emails without your explicit opt-in.

How long we keep data

Account data (email, tier, favorites) is kept while your account exists and deleted when your account is deleted, except billing records we must retain for tax and accounting purposes. Technical rate-limiting and security records are kept only for a limited period and then purged.

Your rights

Wherever you live, you can ask us what data we hold about you, ask for it to be corrected, or ask for it to be deleted — email us from your account's address and we will respond within 30 days. If you are in the EEA or UK, this includes your GDPR rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority; our legal bases for processing are performing our contract with you and our legitimate interest in securing the service. If you are a California resident, you have the rights to know, delete, and correct under the CCPA — and to opt out of the sale or sharing of personal information, which is straightforward here: LegendPrompts does not sell or share personal information, period.

Where data lives

Our systems are hosted in the United States. If you use the service from elsewhere, your data is transferred to and processed in the US; our processors safeguard international transfers through their standard contractual mechanisms.

Security

All traffic is encrypted in transit (HTTPS), data is encrypted at rest by our providers, there are no passwords to breach, and no payment card data exists on our systems. If a breach ever affects your personal data, we will notify you as required by law.

Children

The service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes and contact

If this policy changes materially, we will post the update here with a new date. Questions or requests: visionarylabsmedia@gmail.com — we respond within 30 days.