PromptScore Privacy Policy
Last Updated: June 13, 2026
This Privacy Policy explains how Rabiq Digital LLC, a Georgia limited liability company operating PromptScore (“PromptScore,” “Rabiq Digital,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you access or use PromptScore, promptscore.co, our platform, reports, emails, and related services.
PromptScore is a B2B SaaS platform that measures and monitors brand visibility in AI-generated answers.
By using PromptScore, you acknowledge that you have read this Privacy Policy.
1. Who We Are
PromptScore is operated by:
Rabiq Digital LLC
Georgia, United States
Website: promptscore.co
Email: hello@promptscore.co
For purposes of data protection laws, Rabiq Digital LLC is generally the controller of personal information collected through PromptScore, except where we process information solely on behalf of a business customer under a separate data processing agreement.
2. Scope
This Privacy Policy applies to personal information we collect through:
- the PromptScore website;
- the PromptScore application;
- account registration and login;
- paid subscriptions and one-time reports;
- brand visibility scans;
- customer support;
- emails and notifications;
- reports and dashboards; and
- related business operations.
This Privacy Policy does not apply to third-party websites, services, AI providers, payment processors, or platforms that we do not control.
3. Information We Collect
A. Account and Identity Information
We may collect:
- email address;
- account login information;
- account creation date;
- plan and subscription status;
- account preferences;
- support communications; and
- authentication-related information.
Passwords are handled through Supabase Auth and are not stored by us in plaintext.
B. Brand, Prompt, and User-Provided Content
When you use PromptScore, you may provide:
- brand names;
- brand websites;
- competitor names;
- prompts or questions to test;
- monitored topics;
- business descriptions;
- user-customized scan settings; and
- related information you submit to the platform.
You may submit information about your own brand or about competitors or third-party brands. You are responsible for ensuring you have the right to submit and process that information through PromptScore.
C. Scan and Service-Generated Information
PromptScore generates and stores information related to scans, including:
- AI-generated answers retrieved from third-party AI engines;
- brand mentions;
- competitor mentions;
- visibility scores or grades;
- sentiment, position, and ranking-style analysis;
- per-engine results;
- trend history;
- recommendations and action plans;
- downloadable reports;
- scan timestamps;
- scan frequency;
- usage and feature activity;
- estimated scan costs; and
- operational and diagnostic data.
D. Payment and Billing Information
Payments are processed by Stripe. We do not store raw payment card numbers.
We may receive and store:
- Stripe customer identifiers;
- subscription status;
- plan type;
- billing interval;
- payment status;
- invoice information;
- transaction history;
- billing email; and
- limited payment metadata.
E. Email Engagement Information
We may send transactional emails, notification emails, weekly digests, product updates, and account-related messages.
Some emails may include tracking pixels or similar technology that records whether an email was opened and the time of opening. We currently use this to understand email engagement and improve notifications.
F. Cookies, Device, and Usage Information
We may collect information through cookies, logs, and similar technologies, including:
- session and authentication cookies;
- device type;
- browser type;
- operating system;
- IP address;
- approximate location inferred from IP address;
- pages viewed;
- referring pages;
- interaction events;
- error logs;
- security logs;
- usage activity; and
- timestamps.
Some cookies are necessary for the Service to function. Other cookies or analytics tools may require consent depending on your location.
4. How We Use Information
We use information to:
- provide, operate, and maintain PromptScore;
- create and manage user accounts;
- authenticate users;
- run brand visibility scans;
- send prompts and brand-related data to third-party AI providers as part of the Service;
- generate scores, reports, dashboards, trends, and recommendations;
- track usage limits and plan entitlements;
- process payments and manage subscriptions;
- send account, billing, scan, digest, and notification emails;
- provide support;
- debug, secure, monitor, and improve the Service;
- prevent fraud, abuse, unauthorized access, and misuse;
- enforce our Terms of Service;
- comply with legal obligations; and
- protect the rights, safety, and property of PromptScore, users, and third parties.
5. Legal Bases for Processing
If GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation and authentication | Contract necessity |
| Providing scans, reports, dashboards, and subscriptions | Contract necessity |
| Processing payments and managing billing | Contract necessity; legal obligation |
| Sending transactional emails | Contract necessity; legitimate interests |
| Sending marketing emails where applicable | Consent or legitimate interests, depending on jurisdiction |
| Email open tracking | Consent where required; legitimate interests where permitted |
| Security, fraud prevention, debugging, and abuse prevention | Legitimate interests |
| Product analytics and service improvement | Legitimate interests or consent where required |
| Legal compliance, tax, accounting, and regulatory obligations | Legal obligation |
| Handling support requests | Contract necessity; legitimate interests |
| Processing brand data and prompts through AI providers | Contract necessity; legitimate interests |
You may have the right to object to processing based on legitimate interests.
6. Important Disclosure: Third-Party AI Processing
PromptScore’s core function requires sending prompts, brand names, websites, competitor names, and related scan information to third-party AI providers.
These providers may include:
- OpenAI;
- Anthropic;
- Google Gemini;
- Perplexity; and
- other AI providers we may add in the future.
These providers process information according to their own terms, privacy policies, data-processing terms, and technical systems. We do not control their models, outputs, infrastructure, retention rules, or policy changes.
Do not submit information to PromptScore that you are not authorized to send to third-party AI providers.
7. How We Share Information
We do not sell personal information.
We may share information with the following categories of recipients:
A. Service Providers and Sub-Processors
We use third-party vendors to operate PromptScore. These may include:
| Provider | Purpose | Information Processed |
|---|---|---|
| Stripe | Payment processing | Billing information, email, payment metadata |
| Supabase | Authentication, database, storage | Account data, brand data, scan data, hashed credentials |
| Vercel | Hosting and infrastructure | Data in transit, logs, application traffic |
| Resend | Email delivery | Email addresses, email content, delivery data |
| OpenAI | AI engine processing | Prompts, brand names, competitor names, scan inputs |
| Anthropic | AI engine and analysis processing | Prompts, AI answers, brand names, scan inputs |
| Google Gemini | AI engine processing | Prompts, brand names, competitor names, scan inputs |
| Perplexity | AI engine processing | Prompts, brand names, competitor names, scan inputs |
We may update our vendors as the Service evolves.
B. Legal and Compliance
We may disclose information if required to do so by law, subpoena, court order, legal process, regulator request, or government request.
C. Protection of Rights and Safety
We may disclose information when we believe it is necessary to protect PromptScore, our users, third parties, our systems, rights, property, safety, or security.
D. Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction.
E. With Your Direction or Consent
We may share information when you instruct us to do so or consent to the sharing.
8. Cookies and Tracking
We use cookies and similar technologies to operate, secure, and improve PromptScore.
Types of cookies may include:
- Essential cookies — required for login, authentication, security, and platform functionality.
- Preference cookies — used to remember user settings.
- Analytics cookies — used to understand product usage and improve the Service, if enabled.
- Email tracking pixels — used to understand whether certain emails are opened.
Where required by law, we will request your consent before using non-essential cookies or tracking technologies.
You can control cookies through your browser settings. Blocking some cookies may affect the functionality of the Service.
9. Data Retention
We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate our business.
Retention periods may include:
- account information: retained while your account is active and for a reasonable period after closure;
- brand, prompt, scan, trend, and report data: retained while your account is active unless deleted earlier by you or required by law;
- billing and invoice records: retained as required for tax, accounting, legal, and fraud-prevention purposes;
- support communications: retained for customer support, legal, and operational purposes;
- email engagement data: retained for analytics and notification improvement for a reasonable period;
- security logs and technical logs: retained for security, debugging, and operational purposes; and
- backups: retained for a limited period according to backup cycles.
When personal information is no longer needed, we will delete, anonymize, or securely retain it only as legally permitted.
10. International Data Transfers
Rabiq Digital LLC is located in the United States. If you access PromptScore from outside the United States, your information may be transferred to, stored in, or processed in the United States and other countries.
Some countries may have data protection laws different from those in your jurisdiction.
Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses, data-processing agreements, adequacy mechanisms, or other lawful transfer mechanisms.
11. Security
We use reasonable technical, administrative, and organizational measures designed to protect personal information.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
You are responsible for maintaining the security of your account credentials and devices.
12. Your Privacy Rights
Depending on your location, you may have rights regarding your personal information, including the right to:
- access personal information;
- correct inaccurate information;
- delete information;
- request a copy of information;
- object to certain processing;
- restrict certain processing;
- withdraw consent;
- opt out of marketing communications;
- opt out of certain sales or sharing of personal information where applicable;
- limit certain uses of sensitive personal information where applicable; and
- lodge a complaint with a data protection authority.
To exercise rights, contact us at hello@promptscore.co.
We may need to verify your identity before fulfilling requests. Some requests may be limited by legal obligations, security requirements, fraud prevention, or the need to provide the Service.
13. GDPR and UK GDPR Rights
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar rights, you may have rights under applicable data protection law, including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
You also have the right to complain to your local data protection authority.
Because Rabiq Digital LLC is based in the United States and may offer services to users in the EEA or UK, we may be required to appoint an EU or UK representative. If appointed, representative contact details will be added to this Privacy Policy.
14. California Privacy Notice
This section applies to California residents to the extent the California Consumer Privacy Act, as amended, applies to us.
Categories of Personal Information We May Collect
We may collect:
- identifiers, such as email address and account identifiers;
- commercial information, such as subscription plan and purchase history;
- internet or network activity, such as usage logs and interactions with the Service;
- professional or business-related information, such as brand or company information submitted by users;
- inferences or analytics derived from usage and scan activity; and
- sensitive personal information only if you choose to provide it, which you should not do unless necessary.
Sources of Personal Information
We collect information from:
- you;
- your use of the Service;
- payment processors;
- service providers;
- AI providers; and
- technical systems such as logs and cookies.
Purposes
We use personal information for the purposes described in this Privacy Policy, including providing the Service, processing payments, communicating with users, security, analytics, support, and legal compliance.
Sale or Sharing
We do not sell personal information for money.
We do not knowingly sell or share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any required opt-out mechanisms.
California Rights
California residents may have the right to:
- know what personal information we collect, use, disclose, sell, or share;
- access personal information;
- delete personal information;
- correct inaccurate personal information;
- opt out of sale or sharing where applicable;
- limit the use of sensitive personal information where applicable; and
- not be discriminated against for exercising privacy rights.
To exercise California privacy rights, contact hello@promptscore.co.
15. Marketing Communications
You may unsubscribe from marketing emails by using the unsubscribe link in the email or contacting us.
Even if you opt out of marketing emails, we may still send transactional or service-related emails, including billing notices, security notices, account updates, scan notifications, and legal notices.
16. Children’s Privacy
PromptScore is not intended for children under 18. We do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information to us, contact us at hello@promptscore.co, and we will take appropriate steps to delete it.
17. Do Not Track and Global Privacy Control
Some browsers send “Do Not Track” signals. We do not currently respond to all such signals.
Where required by applicable law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, if our processing activities trigger such requirements.
18. Third-Party Links and Services
PromptScore may link to or integrate with third-party websites, platforms, providers, or services. We are not responsible for the privacy practices, content, policies, or security of third parties.
You should review third-party privacy policies before using third-party services.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, in-app notice, website notice, or other reasonable means.
Your continued use of PromptScore after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.
20. Contact Us
For privacy questions or requests, contact:
Rabiq Digital LLC
Operator of PromptScore
Email: hello@promptscore.co
Website: promptscore.co