Security

Security at Promptivo starts with collecting as little as possible. The less we hold, the less there is to protect. Here’s how we handle the data we do touch.

Data in transit

All traffic to and from Promptivo is served over HTTPS/TLS. The site is hosted on Vercel’s edge network.

Minimal data at rest

• No raw IP addresses. Anonymous rate limits key off a one-way SHA-256 hash of your IP, never the address itself.
• No stored prompts. Generated prompts are assembled on the fly and are never written to a database.
• Minimal subscriber data. We store only the name and email a subscriber provides — no passwords, because there are no passwords to store.
• Auto-expiring records. Daily usage counters expire after 48 hours; subscriber records after a year of inactivity.

Cookies

The single functional cookie we set (pv_uid) is HttpOnly and SameSite=Lax, so it can’t be read by client-side scripts and isn’t sent on cross-site requests.

Third-party processors

We rely on Vercel (hosting), Upstash (data store), and Anthropic (follow-up question generation). Each is an established provider with its own security program. See our Privacy Policy for the full list and what each one handles.

Reporting an issue

Found a vulnerability or have a security concern? Please email aj@aideptsolutions.com and we’ll respond promptly. We appreciate responsible disclosure.