Your Privacy Matters

Privacy Policy

Last Updated: May 12, 2025

1. Introduction

Welcome to TopFreePrompts.com ("we," "our," or "us"), operated by LucyBrain AI Research ("LucyBrain"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This Privacy Policy applies to information we collect through:

• Our website at TopFreePrompts.com

• Email communications between you and us

• Our AI prompt library services

• Any other means through which you may interact with our services

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

2.1 Personal Data

We may collect the following types of personal data:

Account Information:

• Email address (required for account creation and service access)

• Name (if provided during registration)

• Payment information (processed securely through third-party payment processors)

Communication Data:

• Email address for newsletters, updates, and customer support

• Communication preferences and subscription settings

• Customer service correspondence

Usage Data:

• Information about how you use our website and services

• Browsing patterns, pages visited, time spent on pages

• Search queries and prompt usage analytics

• Device information and IP address

2.2 Business Contact Information

For our B2B marketing efforts, we may obtain business contact information from:

• Professional networking platforms and business databases

• Publicly available business directories

• Industry-specific contact databases (such as Apollo.io)

• Business cards and professional events

This information typically includes business email addresses, company names, job titles, and industry information used solely for legitimate business marketing purposes.

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and to hold certain information.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly

• Analytical/Performance Cookies: Help us understand user behavior (Google Analytics)

• Functionality Cookies: Enable enhanced functionality and personalization

• Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness

Third-party services:

• Google Analytics: To understand website usage patterns

• Hotjar: For behavior analytics and user experience insights

• Email service providers: For communication and marketing campaigns

You can control cookies through your browser settings. However, disabling cookies may limit some website functionality.

3. How We Use Your Information

We use collected information for the following purposes:

Service Provision:

• Provide and maintain our AI prompt library services

• Process payments and manage subscriptions

• Provide customer support and respond to inquiries

Communication:

• Send service-related notifications and updates

• Deliver newsletters and marketing communications (with consent)

• Respond to customer inquiries and support requests

Business Operations:

• Improve our website and services

• Develop new features and functionality

• Conduct business marketing to potential customers

• Monitor service usage and performance

• Detect, prevent, and address technical issues

Legal and Security:

• Comply with legal obligations

• Protect against fraud and security threats

• Enforce our terms of service

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal basis for processing personal data includes:

• Contract Performance: Processing necessary to provide our services

• Legitimate Interest: Business operations, marketing, and service improvement

• Consent: Newsletter subscriptions and marketing communications

• Legal Obligation: Compliance with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

Service Providers:

• Payment processors (Stripe, PayPal)

• Email service providers (for communications)

• Analytics providers (Google Analytics, Hotjar)

• Cloud hosting providers

• Customer support platforms

Business Partners:

• With your consent, for joint marketing efforts or service integration

Legal Requirements:

• When required by law or legal process

• To protect our rights, property, or safety

• In response to valid requests by public authorities

Business Transfers:

• In connection with mergers, acquisitions, or asset sales

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest

• Regular security assessments and updates

• Access controls and authentication measures

• Employee training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal data for as long as necessary to:

• Provide our services and fulfill contractual obligations

• Comply with legal requirements

• Resolve disputes and enforce agreements

Specific retention periods:

• Account data: Until account deletion plus 30 days

• Payment data: As required by financial regulations

• Marketing data: Until unsubscribed plus reasonable business period

• Support communications: 3 years from last interaction

8. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including Switzerland and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by relevant authorities

• Standard contractual clauses

• Certified privacy frameworks

9. Your Data Protection Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data

• Rectification: Correct inaccurate or incomplete information

• Erasure: Request deletion of your personal data

• Restrict Processing: Limit how we process your data

• Object to Processing: Object to certain processing activities

• Data Portability: Request transfer of your data

• Withdraw Consent: For consent-based processing

For marketing communications:

• Unsubscribe: Use unsubscribe links in emails or contact us directly

To exercise these rights, contact us at hello@lucybrain.com.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of the sale of personal information

• Right to non-discrimination for exercising privacy rights

We do not sell personal information to third parties.

12. Data Breach Procedures

In the event of a data breach affecting your personal data, we will:

• Notify relevant supervisory authorities within 72 hours when required

• Notify affected users without undue delay when required

• Provide information about the nature and scope of the breach

• Document the breach and remedial actions taken

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website

• Update the "Last Updated" date

• Notify users of material changes via email or website notice

• Obtain consent for material changes where required

14. Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, contact us:

Email: hello@lucybrain.com
Postal Address:
LucyBrain AI Research
Rue du Petit-Rocher 6
1003 Lausanne, Switzerland
Data Protection Officer: Available upon request

For EU residents, you also have the right to lodge a complaint with your local data protection authority.