Privacy policy

PromptForge

Last updated 2026-10-10. This page covers https://promptforge.devspeak.dev. It is one of four developer utilities run by the same independent developer (SpecStudio, Prompt Guardian, Dev Text Forge and PromptForge).

What we collect

  • Account: your email address and a hashed password, or, if you sign in with Google, the email, name and profile picture Google shares. Nothing else from your Google account is requested.
  • Your saved work: prompt specification documents and their version history, custom templates, saved tool presets and settings, prompt test suites with their cases and run results, and your profile and workspace preferences. You create it; you can edit, export or delete it.
  • Per-request usage analytics: each time the app runs a server action for you, we record your user id, the action's name, whether it succeeded, how long it took and when. We do not record the content you submitted in these events. We use them to understand which tools are used, find errors and prevent abuse.
  • Page analytics: a self-hosted instance of Umami counts page views, referrers, browser, device type and country. Umami does not use cookies and does not identify you.
  • Payments: if you subscribe to Utilities Pro, Dodo Payments processes the payment as merchant of record. We receive your email, plan, subscription status and renewal dates, never your card details.

Text you send to AI features

When you use an AI feature, the text you submit is sent to an AI model provider to produce the result: Anthropic (default model), OpenRouter (Mistral models, processed in the EU and used automatically as fallback; Xiaomi and Zhipu models, processed in China, only when you pick one), DeepSeek (China, only when you pick it) and Cerebras (when enabled). Depending on the feature, either the model you choose or the first available provider processes it. These providers process the text under their API terms; we do not ask them to train on it, and we send no account details with it. Do not submit secrets or personal data you do not want processed this way.

Who else processes data

  • DevSpeak Labs Cloud hosts the database, sign-in service and analytics hub.
  • Our web hosting provider serves the web application.
  • Resend delivers account emails (confirmation, password reset, security notices).
  • Google provides "Sign in with Google", if you choose it.
  • Dodo Payments handles subscriptions and invoices.
  • Klavis: list the tools of the MCP server you pick in the MCP Tools Explorer; it receives the server name only (src/lib/klavis.server.ts via src/lib/mcp.functions.ts).

We do not sell your data and we do not use it for advertising.

Retention and deletion

Your account and saved work are kept until you delete them or ask us to delete your account. Usage events are kept for product analytics and may be retained in aggregate after an account is deleted. Payment records are kept as long as tax law requires.

Your rights

You can access, correct, export or delete your data, and object to its processing. Email juanamillo@proton.me and we will respond within 30 days.

Changes

We will update the date above when this policy changes, and email account holders about material changes.