Privacy Policy

Effective date: 19 October 2026
Last updated: 19 October 2026

Promptuoso is operated by BUYLIFETIMEAPPS, a sole proprietorship registered in India. In this policy, "Promptuoso", "we", "us" and "our" mean that business. You can reach us at support@promptuoso.com or at 51, Ambazari Road, Nagpur, Maharashtra 440033, India.

This policy covers the Promptuoso desktop app, the Promptuoso Claude Code plugin and MCP server that ships with it, the website at promptuoso.com, and the support channels listed below.

1. The short version

• Your library stays on your computer. Prompts, snippets, scripts, skills, projects, plans, records and vault contents are stored in a folder on your PC. We do not have a server that holds them.
• Sync is optional and goes to your own cloud account. If you connect Google Drive or OneDrive, Promptuoso writes to a folder in your Drive or your OneDrive. That data travels between your computer and your cloud provider. We never receive it.
• We do not sell your data, use it for advertising, or use it to train AI models. We do not receive your library in the first place.
• No sign-in to use the app. There is no Promptuoso account inside the app.
• Three things do contact servers by default or on a schedule: the licence check (Freemius), the update check (GitHub releases, direct-download build only), and, only if you press Send, a problem report to our post box. Details are in section 4.
• Usage counts are off until you turn them on. If you do, the app sends us a small weekly report of counts only, never anything you wrote. Section 4A says exactly what is in it.
• AI apps only see what you allow. MCP access for Claude Code, Codex, Gemini, Cursor and similar apps on your PC is off until you turn it on, and each AI app is limited to the folders and permissions you choose.
• You can disconnect and delete at any time. See section 13.

2. What stays on your computer

Promptuoso is local-first. These live in the app's data folder on your PC and are not sent to us:

• Your prompts, snippets, scripts, skills, templates, folders, tags and version history.
• Projects, knowledge graphs, project memory, plans, the AI team's transcripts and coordination files, the Desk inbox, reminders and changelogs.
• Business records and documents you add to the Records vault, and the API keys you add to the Keys vault. Both are encrypted with a password you choose (see section 10).
• Clipboard history (which is never synced), usage counts and settings.
• Sign-in tokens for cloud sync, stored in Windows Credential Manager (not in the library, and not in any file that sync or backup copies).

What we do not collect while you type. The text expander matches abbreviations in memory as you type and does not write your keystrokes to disk. In programs on your excluded list the expander records no keystrokes at all, and password managers are excluded by default. An optional expander log exists for troubleshooting; it is off by default, holds no text, stays on your PC and is kept for one day.

Usage counts are opt-in. The app does not report which features you use unless you switch on "Share anonymous usage counts" in Settings. It is off by default, and nothing is sent until you turn it on. It never reports what you type or what is in your library. Section 4A has the full list.

3. Information we collect, in plain terms

We do not collect your library, your clipboard, your keystrokes or your API keys.

4. What leaves your computer, and when

Everything below happens only when you turn it on or ask for it, except the licence check and the update check, which are marked.

Promptuoso's own servers are limited to the post box for reports, the usage-count counter described next (only if you opt in), and, if you opt in, the newsletter list. There is no Promptuoso server that stores your library.

4A. Anonymous usage counts (opt-in)

This is off until you switch on "Share anonymous usage counts" in Settings. You can switch it off again at any time, and the app then stops sending. Settings has a "See what is sent" button that shows the exact report before and after it goes.

What the weekly report contains:

• A random identifier the app made for this purpose. It is kept apart from your licence key and your install identifier, so it cannot be matched to either.
• The app version, your operating system (Windows, macOS, Android or iOS), and the date.
• The main kind of work you picked from a list in the app, and your AI team mode.
• Counts, as plain numbers: which built-in playbooks you started, which companions you installed, how many times you used each feature, how many times you opened each tab, and which first-use steps you reached.

What it never contains: anything you typed, your prompts, snippets or library, file, folder or project names, file paths, repository addresses, the instructions in your own playbooks, your email, name or licence key, or anything the app worked out by reading your files. A report has no free text in it at all.

What we do with it. The server checks each report against a fixed list of allowed fields and refuses anything else. It adds the numbers to weekly totals and throws the report away. We do not keep the report, your IP address or your identifier. To stop the same install being counted twice in one week, we keep a one-way scrambled form of the identifier (made with a secret only the server has) for three weeks, then delete it. The IP address is used only to limit how often one address can send, in the same scrambled form, and is deleted within two days. The totals are never used for advertising, never sold and never used to train AI models. In our own reports we show a group only when 20 or more installs are behind it; smaller groups are hidden.

5. Cloud sync and Google and Microsoft permissions

Cloud sync with sign-in is optional, and "Keep on this machine only" is always available. Direct sync works through a folder on your PC and needs no sign-in to any Promptuoso permission.

5.1 Google Drive (Google API Services User Data Policy)

When you choose Google Drive with sign-in, Promptuoso asks Google for exactly one permission:

Promptuoso does not request access to your email, contacts, calendar, profile, or any Drive file it did not create. It does not request the broader drive, drive.readonly or drive.metadata scopes.

Google API Services User Data Policy: Limited Use disclosure.

Promptuoso's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice, for information received from Google APIs:

• Promptuoso uses it only to provide and improve the sync feature you asked for: writing your library to, and reading it back from, your own Drive folder.
• It is not transferred to us or to anyone else. It moves directly between your PC and Google. We operate no server that receives it, so no human at Promptuoso can read it.
• It is not used for advertising, including retargeting or interest-based advertising.
• It is not sold, rented or used to determine creditworthiness or for lending.
• It is not used to develop, improve or train generalised AI or machine-learning models.
• Google sign-in tokens are kept in Windows Credential Manager on your PC. They are not stored in your library and are never sent to us.

How the sign-in works. Promptuoso opens your browser to Google's own sign-in page and receives the result on a temporary local address (127.0.0.1) on your PC, using PKCE. The app contains no client secret.

How to revoke access. In Promptuoso, open Settings > Sync and backup and disconnect Google Drive; the app asks Google to revoke its token and deletes its copy from your PC. You can also remove Promptuoso at any time in your Google Account at https://myaccount.google.com/permissions. Your files already in Drive stay in your Drive until you delete them.

5.2 Microsoft OneDrive

When you choose OneDrive with sign-in, Promptuoso asks Microsoft for these permissions:

Promptuoso does not request access to the rest of your OneDrive, your email, your calendar or your profile. Tokens are kept in Windows Credential Manager on your PC. Information received from Microsoft is used only to run the sync you asked for, is not sent to us, and is not used for advertising or to train AI models.

How to revoke access. In Promptuoso, open Settings > Sync and backup and disconnect OneDrive; Promptuoso deletes its copy of the sign-in from your PC. Microsoft does not offer an app-side call that cancels the grant itself, so to remove the permission completely, remove Promptuoso from your Microsoft account's app permissions (personal accounts: https://account.live.com/consent/Manage; work or school accounts: https://myapps.microsoft.com). Files already in your OneDrive stay there until you delete them.

5.3 Dropbox

Promptuoso has no Dropbox integration in this version. It requests no permission from Dropbox and sends nothing to Dropbox. If a Dropbox option is added later, this policy will be updated, with the exact permissions requested, before that version ships.

5.4 Direct sync (folder)

Direct sync writes JSON documents into a folder on your PC that you choose. If that folder lives inside your own OneDrive or Google Drive, that provider's desktop app uploads the files under your agreement with that provider. We do not see them.

6. Purchases, accounts and licence checks (Razorpay and Freemius)

To buy, you sign in with your BuyLifetimeApps account, the same account for every product we make. Signing in shares your name and email with this website, and we keep an order record and your licence key with it. This website never sees your password.

If you pay from India, you pay BUYLIFETIMEAPPS through Razorpay, under Razorpay's own terms and privacy policy, and Razorpay tells us whether the payment succeeded. Elsewhere, Freemius is the seller and merchant of record: you share your name, email, billing country and payment details with Freemius at checkout, under Freemius's terms and privacy policy, and it sends us the details we need to support you. In both cases we never see your card details.

When you activate a licence, Promptuoso sends Freemius your licence key and a random install identifier created on first run, so Freemius can confirm the licence and count activations. One licence covers two desktop activations (Windows or Mac, in any mix) and two phone activations. The app re-checks the licence every 30 days. You can deactivate a computer from inside the app.

The 14-day trial is counted by the app on your computer. It does not need a card and does not contact Freemius.

7. Problem reports and support

Reports are optional. In Settings > Help, "Report a problem or suggest something" opens a form. Before anything is sent you can see exactly what is included. A report can contain:

• The type (problem or suggestion), the text you write in any language, and your steps.
• An optional screenshot you attach.
• Your email address (filled in from your licence if you have one) so we can reply.
• The app version and operating system, and your licence or trial identifier.
• Optionally, a diagnostic file you can inspect first. It contains no library text, clipboard contents, API keys or tokens.

Reports go to our post box at reports.buylifetimeapps.com, a small service on Cloudflare that checks the licence or trial identifier, limits how many reports one copy can send per hour, and replies with a ticket number. The post box does not keep reports. They are handed to our support help desk, which is not visible to customers, and which we host on a hosting provider (Spaceship). You can choose "Save as file" instead of sending. Nothing is sent unless you press Send.

8. Email

• Support and replies. We use your email only to answer you.
• News. If you tick the optional news box at first run, your email is added to one list at Zoho Campaigns. The box starts unticked, is never required, says what will be sent, and every email carries an unsubscribe link. We send no news email to anyone who has not ticked it.

9. AI apps, MCP and the Promptuoso Assistant

Promptuoso works with AI apps that you already use and pay for, such as Claude Code, Codex, Gemini CLI and Cursor. It does not resell, bundle or proxy them, and it has no access to your accounts with them.

• MCP access is off until you turn it on. You choose whether AI apps can read your library, edit it, or suggest changes, and which folders they can see. Changes follow the approval mode you pick (Ask every time, My list, Auto, or Bypass). Settings that protect your privacy, such as the excluded-programs list, clipboard rules and sync settings, cannot be changed by any AI app.
• Vaults are off-limits to AI apps by default. API keys in the Keys vault are never visible to AI apps or to the Promptuoso Assistant. A Records card is readable by an AI app only if you switch that card on, and the app still asks each time.
• What an AI app does with data it reads is governed by that app's provider. Anything an AI app reads through MCP, or any text you send to it, may be processed by that provider under your own account and its own privacy terms. Promptuoso does not receive that data and is not responsible for the provider's handling of it.
• The Promptuoso Assistant runs through an AI app on your PC or through your own API key, only when you ask it to. Text you send goes to the provider you chose.
• Cloud-based AI apps use your plan. Usage limits and charges are between you and the provider.

10. Vaults and encryption

The Keys vault (API keys and tokens) and the Records vault (business records and documents) are encrypted with a password you choose, separate from your library. You choose recovery options when you create a vault: this device, a one-time recovery code, or both. If you lose your password and every recovery route, nobody, including us, can open the vault. Vault sync and backup are optional and end to end: your cloud provider sees only encrypted data. A free user without a licence can use device sign-in or a code alone.

11. Our website

promptuoso.com is hosted on Cloudflare, which processes ordinary request data (such as IP address and browser details) to deliver pages and protect the site. The contact form sends what you type to us so we can reply. We do not use advertising cookies or advertising trackers. This website counts visits itself, on its own server: no script, no cookie and no outside analytics service. A visitor is counted once a day from a hash of their address and browser that is deleted the next day, and only totals are kept.

This website sets only the cookies it needs to work, each for one purpose: one that keeps you signed in, one that protects forms from being sent by another site, one that carries a short message to the next page, one that remembers whether you chose rupees or dollars, and one that lasts ten minutes while you sign in. None of them tracks you, and none is shared with anyone.

12. Who else is involved

We do not sell your personal information and we do not share it for advertising.

13. Your choices: revoke, disconnect, delete

• Turn off MCP: Settings > MCP access. AI apps lose access immediately.
• Disconnect cloud sync: Settings > Sync and backup. See 5.1 and 5.2 for removing the permission at Google or Microsoft.
• Delete your data on your PC: uninstall Promptuoso and tick "Also delete my library, backups and sign-ins on this computer". It is unticked by default. Ticked, it removes your library, backups, cache, sign-ins and API keys, and releases the licence if you are online. Either way, uninstalling removes the AI app entries Promptuoso added. It does not touch your cloud copies, folders you chose, or your trial record.
• Delete your cloud copy: delete the Promptuoso folder in your Google Drive, or the Promptuoso app folder in your OneDrive. Only you can do this; we cannot reach it.
• Remove an item from one PC only, or everywhere: items that sync offer "Remove from this PC only" and "Delete everywhere".
• Data we hold about you: your account name and email, the purchase details Razorpay or Freemius sends us, any support emails or reports you sent, and the news list if you joined it. To access, correct or delete these, write to support@promptuoso.com; we will respond within a reasonable time, and no later than the period set by law. To unsubscribe from news, use the link in any email.

If you are in the European Economic Area, the United Kingdom, or another place with data-protection rights, you have the rights those laws give you, including access, correction, deletion, objection and complaint to a regulator. India's Digital Personal Data Protection Act, 2023, gives you comparable rights over personal data we handle. Write to us to use them.

14. Retention

• Library and vaults: on your PC until you delete them. We hold no copy.
• Problem reports: the post box keeps nothing. Support tickets are kept for 12 months after they are closed, then deleted.
• Purchase and licence records: as long as needed for support, accounting and tax law in India, which requires tax records to be kept for several years, and as required of a seller; Razorpay and Freemius keep their own records under their policies.
• Your account: until you ask us to delete it, except for the records the law requires us to keep.
• News email: until you unsubscribe.
• Contact-form and support emails: 12 months.
• Usage counts: the weekly totals are kept without a time limit and cannot be traced to an install. The scrambled identifier used to avoid counting twice is deleted after three weeks, and the scrambled address used for rate limiting within two days.

15. Security

Sign-in tokens live in Windows Credential Manager. Sign-in uses PKCE and holds no client secret. Updates are cryptographically signed and the app installs only updates that verify. Report uploads use HTTPS. Vaults use password-based encryption (Argon2id key wrapping) and refuse tampered or rolled-back files. No system is perfectly secure; report a security concern to support@promptuoso.com.

16. Children

Promptuoso is a professional productivity tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact support@promptuoso.com and we will delete it.

17. International transfers

We are in India. Razorpay, Freemius, Google, Microsoft, Cloudflare, GitHub, Spaceship and Zoho operate globally, so information you send them may be processed outside India. Your library does not travel through us.

18. Changes to this policy

When this policy changes we update the date at the top. If a change is material, for example a new permission request, a new third party or a new data flow, we will say so here and in the release notes before the change takes effect. Past versions are available on request.

19. Governing law and grievances

This policy is governed by the laws of India. The courts at Nagpur, India, have jurisdiction, without limiting any rights you have under consumer or data-protection law where you live. For privacy questions or grievances, write to support@promptuoso.com with "Privacy" in the subject, or to 51, Ambazari Road, Nagpur, Maharashtra 440033, India.

20. Contact

Promptuoso is operated by BUYLIFETIMEAPPS, a sole proprietorship registered in India.
Email: support@promptuoso.com
Postal address: 51, Ambazari Road, Nagpur, Maharashtra 440033, India
Website: https://promptuoso.com