Privacy policy

Updated 16 October 2026 · Terms of service · Eesti keeles

This page explains what personal data PromptStats collects, why, who processes it for us, and what your rights are.

Who we are

PromptStats is run by Hypester OÜ, registry code 11542879, VAT number EE101256119, Roseni tn 9-5, 10111 Tallinn, Estonia. Email info@promptstats.ai.

Hypester OÜ is the controller of the personal data described here.

Account: your email address, the brands you can see, your role, and when you signed in.
Signing in: one-time sign-in links and sessions, stored only in hashed form, so they cannot be read back. With Google sign-in, Google tells us your email address and that it is verified. Nothing else.
Free check and trial: the website address you enter, the email address you give us, the plan you chose and your questions.
Security: a hash of your IP address, used to limit repeated requests. We do not store the address itself.
Brand data: the questions we ask for a brand, the AI answers, the sources they cite, and the public pages of the brand's website. This is mostly business data, not personal data.
Public contacts: some sites the AI cites publish a contact address on their own pages. We store it to show where a brand could get listed. People's personal addresses are never shown to clients.
Emails you send us.
Payments, when you choose a paid plan: handled by Stripe. We keep the plan, its status and Stripe's customer reference, never card details.

To provide PromptStats: your account, scans, reports and emails about your account. The basis is our contract.
To keep the service secure and prevent abuse. The basis is legitimate interest.
To improve how we measure, using answers and sites in aggregated form. The basis is legitimate interest.
To keep accounting records. The basis is a legal obligation.
To measure our ads: if you came from our Meta ad and confirmed the free check's email, we tell Meta that a check started. We send your email address in hashed form, the ad click id, your IP address and browser. In any other case Meta gets nothing. The basis is legitimate interest, and you can object to it.
We do not sell personal data.

Vercel (USA): hosts the website and the app.
Supabase: the database, on servers in the European Union (Sweden).
GitHub (USA): runs the daily scans.
Resend (USA): sends our emails.
Google (USA): our email (Google Workspace), Google sign-in, and Google AI Overview results.
OpenAI (USA): answers from ChatGPT, and writing and checking questions and suggestions.
Anthropic (USA): answers from Claude.
DataForSEO: Google AI Overview results and search volumes.
Apify (Czech Republic): runs questions in ChatGPT's app.
Stripe (Ireland and USA): payments, once paid plans start.
Meta (Ireland and USA): only measuring confirmed free checks that came from our Meta ads.

The AI services get the questions, the brand's name and its public pages, not your email address.

When data leaves the European Union, it is protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

Account and brand data: while you use PromptStats. When you ask us to delete your account, we delete it within 30 days.
Free check results: kept so the link keeps working. Ask and we delete them.
Sign-in links expire within minutes to days, sessions after 30 days.
Invoices and accounting records: 7 years, as Estonian law requires.

ps_session: keeps you signed in, 30 days.
ps_lang: remembers the question language you chose, until you close the browser.
ps_ui: remembers the app's language (Estonian or English), 1 year.
ps_ai: remembers whether you see the AI-written texts in your own language, 1 year.
A short-lived cookie while you sign in with Google, 10 minutes.
vai_access: used only by our own team.

We use no advertising or tracking cookies, so there is no cookie banner.

You can ask to see, correct, delete or move your data, or object to how we use it. Write to info@promptstats.ai. We answer within 30 days.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

When this policy changes, we update the date above. For important changes we also email account holders.