Legal

Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains what personal data we collect when you visit Prompt Flipping™, why we collect it, who we share it with, and your rights under GDPR and other applicable privacy laws.

The short version: We collect the minimum data needed to deliver the product you bought (email, name, payment info), we don't sell your data, and you can ask us to delete everything any time by emailing mark@promptflipping.co.

1. Who we are

Prompt Flipping™ is operated by Theo Gilardo, sole proprietor based in Amsterdam, Netherlands. Our contact email is mark@promptflipping.co.

2. What we collect

2.1 Information you give us directly

Identity: first name, last name (if provided)
Contact: email address
Billing: payment card details (handled exclusively by Stripe — we never see or store your card number)
Account: login credentials managed by Clerk (Google ID or magic-link email)
Communications: support emails you send us

2.2 Information collected automatically

IP address, browser type, device type (basic technical logs for security and performance)
Pages visited and timestamps
Cookies and session tokens needed to keep you logged in

3. How we use your data

Deliver what you paid for — process orders, grant access to the members area, send course content
Customer service — respond to support requests and refund inquiries
Transactional emails — purchase receipts, login links, password resets
Security — fraud detection, abuse prevention
Legal compliance — bookkeeping, tax filings, responding to lawful requests

We do not use your data for behavioural advertising or sell it to data brokers.

4. Third parties we share data with

To run our business we share specific data with specific service providers:

Stripe (payment processing): Receives your name, email, and payment info to process charges. Stripe's privacy policy: stripe.com/privacy
Clerk (authentication): Receives your email and Google ID to manage logins. Clerk's privacy policy: clerk.com/privacy
Resend (transactional emails): Receives your email address to deliver welcome and receipt messages. Resend's privacy policy: resend.com/legal/privacy-policy
Vercel (web hosting): Hosts the site and serves pages. Receives standard request logs (IP, page accessed).
Cloudflare (CDN + DNS): Routes traffic to our site. Receives standard request logs.
Google (analytics + login): If you use "Continue with Google" to log in, your Google email is shared with Clerk for account creation.

5. International data transfers

Some of our service providers (Stripe, Clerk, Vercel) process data in the United States. They use Standard Contractual Clauses (SCCs) or equivalent safeguards to comply with GDPR transfer rules.

6. How long we keep your data

Account & purchase data: for as long as your account is active, plus 7 years after the last activity for tax/bookkeeping purposes (required by Dutch law).
Support emails: 2 years after the last reply.
Web logs: 30 days.

7. Your rights (GDPR)

If you're in the EU/EEA, UK, or another region with similar laws, you have the right to:

Access — request a copy of the personal data we hold on you
Rectification — ask us to fix incorrect data
Erasure — ask us to delete your data ("right to be forgotten")
Portability — receive your data in a machine-readable format
Object — opt out of any processing based on our legitimate interest
Withdraw consent — for any processing based on consent
Lodge a complaint — with your local data protection authority (in the Netherlands: Autoriteit Persoonsgegevens)

To exercise any right, email mark@promptflipping.co. We respond within 30 days.

8. Cookies

We use only essential cookies needed to keep you logged in and to remember your cart selections. We don't use third-party tracking or advertising cookies. By using our site you consent to these essential cookies; you can disable cookies in your browser, but the members area won't work without them.

9. Children

Our products are for adults running businesses. We do not knowingly collect data from anyone under 16. If you're a parent and believe your child has provided data, email us and we'll delete it.

10. Changes to this policy

If we materially change this policy, we'll notify customers by email at least 14 days before the change takes effect. Minor wording changes will be reflected on this page with an updated date.

11. Contact

Questions about this policy or any privacy concern: mark@promptflipping.co