Privacy Policy

PromptFable Academy (“we”, “us”) is an online training platform for AI prompt engineering, operated by Nifsoft, established in New Delhi India. We are the data controller for the personal data described here.

You can reach us about anything in this policy at contact@promptfable.com, or by post at R-73 Ayesha Apartment, Jamia Nagar, Okhla 110025, South Delhi, India.

If you create an account: your name, email address, and either a password (which we store only as a bcrypt hash, never in readable form) or, if you sign in with Google, the profile details Google returns — name, email address and profile picture.

As you use the platform: your progress through lessons, quiz attempts and scores, prompts you save or attempt, bookmarks, certificates issued to you, and an activity log of actions such as viewing a lesson or submitting a quiz, with timestamps. We also store the in-app notifications we send you, such as reminders and certificate announcements, and whether you have read them.

Automatically, when you visit: your IP address and standard request information, which our hosting provider processes in order to serve the site; and analytics and advertising data gathered through cookies, described below.

We do not ask for payment details, and we do not knowingly collect data from children.

To provide the service — creating your account, signing you in, storing your progress, issuing certificates. Without this data the platform cannot work, so we process it to perform our contract with you.

To keep the service secure and working — preventing abuse, diagnosing faults. This rests on our legitimate interest in running a functioning service.

To understand usage and show advertising — analytics and ads rely on cookies that are not strictly necessary. Where consent is required by law, that is our basis; see the limitation noted under Cookies.

Strictly necessary: when you sign in we set a session cookie so the site knows you are logged in. The site does not function without it, and it is not used for tracking.

Analytics: Google Analytics 4 sets cookies to measure which pages are visited and how the site performs.

Advertising: Google AdSense sets cookies to serve and measure advertising. Google may use them to personalise ads. You can review and change your ad settings at adssettings.google.com.

Please note: we do not currently present a cookie consent banner. Analytics and advertising cookies are set when you load the site. If you are in a jurisdiction that requires prior consent for such cookies, you can block them in your browser settings or through an ad blocker until we add a consent mechanism.

We do not sell your personal data. We share it only with the providers below, each acting on our behalf or as described in their own policies.

Certificate verification: each certificate you earn has a public verification page, reachable by anyone who has its serial number or link. That page shows your name, the program completed and the issue date, so that an employer or anyone else you share it with can confirm it is genuine. It is excluded from search engines, and it shows nothing else about you.

We may also disclose data where we are legally required to, or to protect our rights.

Account and learning data is held in a PostgreSQL database hosted by Supabase in AWS’s Tokyo region (ap-northeast-1). The site itself is served by Vercel’s global network, and requests may be processed in other regions. Our analytics and advertising providers operate internationally, including in the United States.

If you are in the UK or EEA, this means your data may be transferred outside your region. Those transfers rely on the safeguards each provider puts in place, such as the European Commission’s Standard Contractual Clauses.

Account and learning records are kept for as long as your account exists. If you ask us to delete your account, we remove it and the associated records, except anything we must keep by law. Analytics data is retained according to Google Analytics’ own retention settings.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy in a portable form, and withdraw consent where we rely on it.

How to exercise them: the platform does not yet offer self-service export or account deletion. Email contact@promptfable.com and we will action your request. We aim to respond within one month.

If you are in the UK or EEA and are unhappy with how we have handled your data, you may complain to your local supervisory authority.

Passwords are stored only as bcrypt hashes. The site is served over HTTPS, and access to the database is restricted. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your data.

We may update this policy. The date at the top shows when it last changed materially, and significant changes will be made evident on the site.

See also our Terms of Service.