Privacy
In effect from 29 August 2026.
This says what we collect, who else sees it, how long we keep it, and how to make us stop. It is written to be read once, in full, without a lawyer.
1.Who is responsible for your data
Client Attraction Pros decides how and why your data is used in PRD Generator. In the language of the European and UK data protection rules, that makes us the controller.
Reach us about anything on this page at atiba@clientattractionpros.com. A real person reads it.
2.What we collect
Three things, and nothing else.
- Your account. Your name, your email address and your password. The password is stored scrambled in a way that cannot be reversed, so nobody here can read it — not even us.
- What you create. The answers you type into an interview, any file you attach, the org charts you build, the documents the product writes for you, and the conversation history that produced them.
- What your browser sends. Your IP address and basic request information, kept briefly in the operational logs every website keeps in order to stay up and to catch abuse.
We do not buy data about you, we do not build an advertising profile, and we do not run any advertising or analytics tracker on this site.
3.Why we are allowed to use it
Data protection law asks us to name a reason for each use. Ours are plain.
- To give you the product you signed up for — your account, your documents, your billing. The reason is that we have a contract with you, and we cannot deliver it otherwise.
- To keep the service working and safe — logs, abuse prevention, fixing what breaks. The reason is our legitimate interest in running a service that stays up, and it does not override your rights.
- To send you product news you asked for — only if you ticked that box. The reason is your consent, and you can take it back at any time without giving one.
- To keep billing records — because tax and accounting law requires it.
Service messages are not marketing. If you have an account, we will still email you about a password reset, a receipt, or something changing in the product, because you cannot run an account without them.
4.What happens to what you write
The product works by sending what you write to an AI provider and giving you back what it returns. That is the whole mechanism, so it is worth being exact about it.
- When you answer an interview question, ask something in the chat, or run an org chart analysis, that text — and any file you attached — is sent to one of the AI providers listed below.
- We send it through their business interfaces. Those providers do not use what we send them to train their models.
- We keep our own record of each request and response for 90 days, so we can find out what went wrong when a document comes back broken. A scheduled job deletes those records on that schedule whether anyone remembers or not.
Do not paste anything into this product that you are not allowed to send to a third party. Patient records, anything covered by a confidentiality agreement you have not cleared, or personal data about someone else who has not agreed to it — leave those out. There is no arrangement in place here for handling health records.
5.Who else sees it
We use other companies to run the product. Each one is bound by a contract to use your data only to do the job we hired them for. This is the whole list.
| Company | What it does | What reaches it |
|---|---|---|
| Supabase | Runs the database and the sign-in system. | Your name, email address, password (stored hashed, never in readable form), and everything you create in the product. |
| Vercel | Hosts and serves the application. | The requests your browser makes, including your IP address, in short-lived operational logs. |
| Anthropic | One of the AI providers that generates your documents. | The answers you type into an interview, and any file you attach to it. |
| OpenAI | One of the AI providers that generates your documents. | The answers you type into an interview, and any file you attach to it. |
| Google (Gemini) | The fallback AI provider, used when another one fails. | The answers you type into an interview, and any file you attach to it. |
| Stripe | Takes the payment. | Your email address and your card details. Your card details go to Stripe directly and never reach us. |
| Mailgun | Sends the emails the product sends you. | Your email address and the contents of that email. |
We do not sell your data, and we do not share it with anyone for their own purposes. If the business is ever sold, whoever buys it inherits these same commitments, and you will be told before anything changes.
If a court or a law enforcement body compels us to hand something over, we will comply — and we will tell you, unless we are legally forbidden from telling you.
6.Where your data goes
The companies above operate in the United States and other countries, so your data leaves the country you are in. Where the law requires a safeguard for that — as it does for data moving out of the European Economic Area, the United Kingdom, or Switzerland — we rely on the European Commission’s standard contractual clauses, which our providers have signed.
7.How long we keep it
| What | How long |
|---|---|
| Your account and everything you create in it | Until you delete it, or until you ask us to close your account. |
| The record of a request sent to an AI provider, including the text of that request and its response | 90 days, then deleted automatically by a scheduled job. |
| Billing records | As long as tax and accounting law requires us to keep them, which is longer than your account lasts. |
| Your consent record | For as long as we rely on it, plus the period in which it could be questioned. |
8.Cookies
We set one kind of cookie, and only one: the one that keeps you signed in. Without it you would be signed out on every click. There is no advertising cookie here, no analytics cookie, and no tracker belonging to anybody else.
That is why this site does not put a wall in front of you demanding permission to set cookies. Permission is required for the optional ones, and we do not have any. If that ever changes, you will be asked properly, before anything is set, and saying no will be as easy as saying yes.
9.Your rights, and how to use them
Wherever you live, we will honour all of these. If you are in the European Economic Area, the United Kingdom or Switzerland, they are also your legal rights.
- See it. Ask for a copy of everything we hold about you.
- Fix it. Correct anything wrong. Your name and email are editable in your settings without asking anyone.
- Delete it. Ask us to close your account and erase it. We will do it, keeping only the billing records the law makes us keep.
- Take it with you. Ask for your documents in a machine-readable file. You can also export anything you have made from inside the product at any time.
- Object, or ask us to pause. Tell us to stop a particular use, or to hold your data without using it while something is being sorted out.
- Change your mind. Withdraw a consent you gave. The product news setting is a switch in your settings; turning it off is instant and needs no explanation. Withdrawing it does not undo anything that was already sent.
Email atiba@clientattractionpros.com and we will answer within 30 days. We will not charge you for it, and we will not make the service worse for you because you asked.
If you think we have handled this badly, you can complain to the data protection authority where you live. We would rather you told us first, but you do not have to.
10.Children
This is a product for people running businesses. It is not for anyone under 16, and we do not knowingly collect anything about them. If you believe we have, tell us and we will delete it.
11.If we change this
The version in effect is dated at the top of this page. If we change something that matters to you, we will email you before it takes effect, and we will ask again for anything that needs your consent rather than assuming the old answer still stands.
Read the terms of service · In effect from 29 August 2026.