Privacy Policy

Last updated: May 25, 2026

1. Who We Are

Dreamer Labs (d/b/a "Prompt Place," "we," "our," or "us") makes Prompt Place, the ChatGPT ads platform that helps modern growth teams create, launch, and optimize paid ads inside ChatGPT. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any Prompt Place website, product, or service that links to it (collectively, the "Services").

2. Scope

This Policy applies to information we collect:

• When you visit promptplace.org or any sub-domain (the "Site");
• When you use the Prompt Place web application;
• When you connect advertising accounts or other integrations through the app;
• In email and other electronic communications between you and Prompt Place; and
• Offline, if you attend a Prompt Place event or contact our team.

3. Information We Collect

3.1 Information You Provide Directly

| Category | Examples | | -------------------------- | ------------------------------------------------------------------------------------------------------------------------ | | Account & Contact Data | Name, email address, password (hashed), preferred authentication method | | Business & Ad Data | Company information, target audience details, ad copy, campaign goals, and creative assets you provide to run ads | | Billing Information | Payment method details processed through our payment provider; we do not store full card numbers | | Integration Credentials | Authorization tokens used to connect advertising accounts and analytics platforms | | Support & Feedback | Questions, bug reports, survey responses, feature requests |

3.2 Information We Collect Automatically

• Usage & Log Data — IP address, app version, feature interactions, campaign activity, error logs.
• Device Data — Operating system version, device identifiers, hardware model.
• Cookies & Similar Technologies — On the Site only. See Section 10.

3.3 Information From Third Parties

We may receive personal information from:

• OpenAI / ChatGPT — for managing and delivering ads within ChatGPT; we access only what is necessary to create and optimize campaigns;
• Anthropic (Claude) — we use Claude to generate ad copy and optimize campaigns; your business context is processed through Anthropic's API under their data processing terms;
• Authentication Providers — for single-sign-on where applicable;
• Analytics Partners — limited to pseudonymous identifiers.

4. How We Use Your Information

We use your information to:

1. Provide & Maintain the Services — run the platform, create and launch your ChatGPT ad campaigns, and optimize performance;
2. Optimize Your Campaigns — use your campaign data, performance signals, and feedback to continuously improve results;
3. Secure the Platform — prevent fraud, abuse, and unauthorized access;
4. Improve & Develop Features — analyze aggregate usage patterns with de-identified data;
5. Communicate With You — send transactional emails, campaign reports, product updates, and (with your consent) marketing messages;
6. Comply With Legal Obligations — respond to lawful requests and enforce our Terms of Service.

4.1 Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under one or more of the following legal bases:

• Contractual Necessity (Art. 6(1)(b) GDPR)
• Legitimate Interests (Art. 6(1)(f)) — e.g., network security, product analytics
• Consent (Art. 6(1)(a)) — for optional marketing emails and non-essential cookies
• Legal Obligation (Art. 6(1)(c))

5. Sharing & Disclosure

We do not sell or rent your personal information. We share it only as described:

• Service Providers & Sub-processors — cloud hosting, database providers, analytics, and email delivery — all bound by confidentiality and data-processing agreements;
• OpenAI / ChatGPT — ad content and targeting parameters are transmitted to deliver your campaigns; this is processed under OpenAI's advertising terms;
• Anthropic — your business context and ad briefs are sent to Anthropic's API for copy generation and optimization; Anthropic processes this data under their usage policies;
• Business Transfers — in connection with a merger, acquisition, or sale of assets, after which you will receive notice;
• Legal & Compliance — to comply with subpoenas or protect rights, property, and safety.

6. Security

Key safeguards include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256);
• Principle of least privilege and role-based access controls;
• Audit logs and continuous vulnerability scanning.

Despite our efforts, no internet transmission or storage system is 100% secure. We encourage you to keep your credentials confidential.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. You can request deletion of your account and associated data — including your campaign history and all stored ad assets — at any time by contacting us. Backup archives are purged on a 35-day rolling basis.

8. Your Rights & Choices

Depending on your location, you may have the right to:

• Access, correct, or delete personal information;
• Object to or restrict processing;
• Port data to another service;
• Opt-out of marketing communications;
• Lodge a complaint with a data-protection authority.

To exercise any of these rights, contact us at alexander@dreamerlabs.xyz. We will verify your identity and respond within the timeframe required by law.

8.1 California Privacy Rights (CCPA/CPRA)

California residents may request information about categories of personal information we collect, disclose, or "share" for cross-context behavioral advertising and may opt-out of such sharing at any time.

9. International Data Transfers

We host our infrastructure in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses and other safeguards for data transferred from the EEA, UK, and Switzerland.

10. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies on the Site to:

• Authenticate users and maintain sessions;
• Remember preferences;
• Measure Site performance and usage;
• Support marketing campaigns (with consent).

You can manage cookie preferences through our banner or your browser settings. Disabling cookies may affect Site functionality.

11. Children's Privacy

The Services are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from minors. If you believe a child has provided us information, please contact us and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Policy periodically. We will post the revised version and update the "Last updated" date. Material changes will be notified via email or prominent notice on the Site at least 30 days before they take effect.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Dreamer Labs (Prompt Place) 548 Market Street, PMB 12345 San Francisco, CA 94104 United States

Email: alexander@dreamerlabs.xyz