Privacy policy
Last updated · 2026-04-22How Promptable Ltd collects, stores, and uses personal data. Applies to visitors to promptable.co.uk and users of the Promptable product.
Who we are
Promptable Ltd is a UK-registered company (Companies House No. 14852910) based in Sheffield, UK. For questions about this policy, email [email protected].
What we collect
On this marketing site we collect limited information:
- Analytics data (via Mixpanel) if you accept analytics cookies — anonymised page views and event data used to improve the site.
- Form submissions when you request a demo, ask for a guide, or contact us — we store the fields you submit (name, email, company, role, industry, team size, message) in our secure database.
- Referrer and UTM data attached to any form submission so we can see how people find us.
In the Promptable product (app.promptable.co.uk) we collect what's needed to run your workspace — see our Terms of Service and Data Processing Addendum for that.
Lawful basis
We rely on:
- Consent — for marketing cookies, analytics, and future newsletter communications.
- Legitimate interest — for following up on demo requests and support enquiries.
- Contract — for providing the Promptable product to customers.
How long we keep it
Marketing leads (demo requests, guide signups, contact enquiries) are retained for up to 24 months unless you ask us to delete them earlier. Analytics data follows Mixpanel's default retention. Product data follows the terms of your subscription.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict processing of, or port your personal data. You also have the right to object to processing based on legitimate interest. Email [email protected] — we'll respond within 30 days.
You can revoke cookie consent at any time using the "Cookie settings" link in the footer. Withdrawing consent doesn't affect processing that already happened.
Sub-processors
We use third-party services to run Promptable. A full current list with region and purpose lives at /security. Key relationships: Supabase (UK hosting), Cloudflare (UK edge + DDoS), Anthropic + OpenAI (LLM inference, no training), Resend (email), Stripe (billing), Mixpanel (analytics, if accepted).
Changes to this policy
We'll update this page when our practices change. The "last updated" date at the top of this document shows when. Material changes affecting existing customers will also be emailed.