Privacy Policy
BADATAI, Inc. — yourpromptssuck.com
Effective date: August 4, 2026 Last updated: August 4, 2026
1. Who we are
BADATAI, Inc. is a Colorado corporation and is the data controller for information collected through yourpromptssuck.com ("YPS", "the Service").
Contact: jerry@infinite-bit.com
If you are in the EEA or UK, you may contact us at the address above regarding any matter relating to your personal data.
2. What we collect
We collect three categories of information. We collect nothing else.
2.1 Account information
- Email address, provided when you create an account
- Authentication identifiers issued by our authentication provider
Source: you, directly, at sign-up. Purpose: to create and secure your account, and to contact you about the Service.
2.2 Content you submit
- The text of prompts you paste or type into the Service
- The text of conversations you have with the Service
- Files you attach, and text extracted from them
- Prompts you choose to save to your library
Source: you, directly, each time you use the Service. Purpose: to provide the Service. Your prompt text is sent to a third-party model provider (see §4) in order to analyse and rewrite it, and is stored so that you can retrieve your own history.
This field is unbounded. You can type anything into a prompt box, including personal information about yourself or other people. We do not filter or inspect what you submit before processing it. Do not paste personal, confidential, health, financial, or legal information into the Service. We cannot un-send text you have already submitted, and we cannot control what you choose to include.
2.3 Usage information
- Pages viewed and features used
- Approximate location derived from IP address
- Device and browser type
- Events associated with your account identifier, including model calls and their token counts and costs
Source: automatically, as you use the Service, via our analytics provider (see §4). Purpose: to understand how the Service is used, diagnose errors, and measure cost.
2.4 What we do not collect
We do not collect payment information.
We do not use advertising cookies, third-party ad networks, or cross-site tracking. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under California law.
We do not collect ratings, thumbs, or satisfaction feedback on the Service's output.
3. Legal bases for processing (EEA/UK)
| Processing | Legal basis |
|---|---|
| Creating and maintaining your account | Performance of a contract |
| Processing prompt text to provide analysis | Performance of a contract |
| Storing your history so you can retrieve it | Performance of a contract |
| Usage analytics | Legitimate interests — understanding and improving the Service |
| Security, abuse prevention, error diagnosis | Legitimate interests |
| Responding to legal requests | Legal obligation |
You may object to processing based on legitimate interests. See §7.
4. Who we share it with
We use the following subprocessors. This list is complete as of the effective date above. We will update it when it changes.
| Subprocessor | What it processes | Purpose | Location |
|---|---|---|---|
| Anthropic PBC | Prompt text, conversation content | Model inference | United States |
| Supabase | Account data, prompt text, conversation content, embeddings | Database and authentication | United States (us-east-1, North Virginia) |
| Vercel | Request data in transit, server logs | Hosting | United States |
| Cloudflare | Request data in transit | DNS and network | Global edge |
| PostHog | Usage events, account identifier, IP-derived location | Product analytics | United States (US Cloud) |
On model training. Prompt text is sent to Anthropic's commercial API. Under Anthropic's Commercial Terms of Service, inputs and outputs submitted through the API are not used to train Anthropic's models.
We do not use your prompts to train any model of our own. We do not have one.
We do not sell your personal information. We do not share it with anyone not listed above, except:
- When you direct us to
- To comply with a law, subpoena, or court order
- To protect the rights, safety, or property of BADATAI, Inc. or others
- In connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different policy
5. How long we keep it
We retain your account information, conversations, and saved prompts until you delete them or close your account. We do not currently delete data on a fixed schedule.
Usage analytics events are retained on our analytics provider's default schedule. Data transmitted to the subprocessors listed in §4 is subject to each provider's own retention period, which we do not control.
When you ask us to delete your data, we delete it as described in §7. Copies may persist in backups until those backups age out.
We will state specific retention periods here when we implement scheduled deletion. Until then, the sentence above is the accurate description of what happens.
6. Where it goes
We are based in the United States, and all of the subprocessors listed in §4 process data in the United States. If you are in the EEA or UK, your personal data will be transferred outside your jurisdiction.
Those transfers are made under the Standard Contractual Clauses, which are incorporated into each subprocessor's data processing agreement.
7. Your rights
Regardless of where you live, you can:
- Access a copy of the personal information we hold about you
- Correct information that is inaccurate
- Delete your account and the content associated with it
- Export your prompts and conversations in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
How to exercise them. Email jerry@infinite-bit.com.
These requests are handled manually. There is currently no self-serve delete-my-account control in the product. Email us and we will action your request within 30 days.
Deletion covers: your account record, your conversations, your saved prompts, embeddings derived from them, and your analytics events. It does not cover data already transmitted to a subprocessor and held under that subprocessor's own retention schedule, which will age out on that provider's timeline.
EEA/UK residents may also lodge a complaint with your local supervisory authority.
California residents. BADATAI, Inc. does not currently meet the applicability thresholds of the California Consumer Privacy Act. We honour the rights listed above for California residents regardless. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes other than providing the Service.
Colorado residents. The Colorado Privacy Act does not currently apply to BADATAI, Inc. based on processing volume. We honour the rights listed above for Colorado residents regardless.
8. Security
We do the following:
- All traffic to and from the Service is encrypted in transit using TLS
- Authentication is required on every route that reads or writes your data
- Every query that reads your data is scoped to your account identifier server-side, so a request cannot return another user's rows
That list is what we do. We are not making a broader claim.
No system is completely secure. We cannot guarantee the security of information transmitted to or stored by the Service.
9. Children
The Service is not directed to anyone under 18 and we do not knowingly collect personal information from them.
If you believe someone under 18 has provided us with personal information, contact us and we will delete it.
10. Changes to this policy
We will post any changes here and update the "last updated" date.
If we make a material change to how we handle information we have already collected, we will notify you and obtain your consent before applying the change to that data. We will not apply new, more permissive practices retroactively to data collected under an earlier version of this policy.
11. Contact
BADATAI, Inc. A Colorado corporation jerry@infinite-bit.com