Privacy Policy

Last Updated: July 24, 2026

This Privacy Policy explains how Prompt2Script ("we", "us") collects, uses, and protects information when you use our website (prompt2script.com) and web application, together the "Service". Prompt2Script lets you describe a task in natural language, generates Python code with AI, and runs it in an isolated sandbox.

1. Information We Collect

• Account data: your email address and a securely hashed password (argon2id). We use email to sign you in, verify your account, and reset your password.
• Task content: the natural-language task descriptions you submit, the Python code generated or edited, and the outputs and logs produced by your runs.
• Secrets: API keys, tokens, and other credentials you choose to store. These are encrypted at rest and used only to run your scripts (see section 3).
• Contact form: name, email, and message when you contact us.
• Log & usage data: IP address, browser type, timestamps, and pages visited, collected automatically to operate and secure the Service.
• Cookies: essential session cookies (login state, CSRF/security tokens). Analytics cookies are used only to understand aggregate traffic.

2. How We Use Your Information

• To provide the Service: generate code, execute runs, deliver output files, and run scheduled jobs.
• To authenticate you, secure your account, and prevent abuse (rate limiting, lockout, audit logging).
• To enforce plan limits and process billing where applicable.
• To respond to support and contact requests.
• To maintain, debug, and improve the Service.

We do not sell your personal data.

3. How We Handle Your Secrets

Secrets you store are encrypted at rest using Fernet symmetric encryption. They are decrypted only to be injected as environment variables into the isolated sandbox at the moment your script runs, and their values are masked in logs. We do not display stored secret values back to you in plaintext and do not use them for any purpose other than running your own scripts.

4. Code Execution & Isolation

Generated code runs inside a locked-down Docker container with strict memory, CPU, and time limits. Runs are isolated from your local machine and from other users. Run logs and output files are retained according to our retention policy and periodically cleaned up.

5. AI Processing

To generate code, your task description and relevant context are sent to a third-party large language model provider (an OpenAI- or Anthropic-compatible API) acting as our processor. Only the information needed to generate the requested code is transmitted. We recommend not including sensitive personal data directly in task descriptions; use stored secrets for credentials instead.

6. Third-Party Services

We rely on a small number of processors to run the Service, which may include a hosting provider, an email delivery provider, the AI model provider described above, and privacy-respecting analytics. Each processes data only as needed to provide their function.

7. Data Retention & Deletion

We retain account data while your account is active. Run logs and generated files are retained on a rolling basis and removed after their retention window. You can delete your secrets and content from within the app. To delete your account and associated personal data, email us at privacy@prompt2script.com; we will process the request within 30 days, subject to any legal retention obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export the personal data we hold about you, and to object to certain processing. Contact privacy@prompt2script.com to exercise these rights.

9. Security

We use argon2id password hashing, encrypted secrets, HttpOnly/SameSite/Secure session cookies, CSRF protection, rate limiting, and sandbox isolation. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

10. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal data from them.

11. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date reflects the latest revision. Continued use of the Service after an update constitutes acceptance of the revised policy.

12. Contact Us

• Email: privacy@prompt2script.com
• Website: prompt2script.com/privacy-policy