Reprompt

Reprompt's Terms of Service and Privacy Policy outline the foundational principles governing user interactions with the platform, from account management and payment processing to data protection and intellectual property rights. This comprehensive framework establishes clear expectations for both users and the company, balancing operational flexibility with legal and regulatory compliance. Through detailed guidelines on account creation, data handling, and third-party service usage, the policy ensures a secure and reliable platform while protecting user rights and company interests.

Service Agreements and Liability

Reprompt's service agreement includes limitations on liability that are designed to protect both users and the company. The company limits its liability to the amount paid for products and services, explicitly noting that this limitation applies "with no consequential or punitive damages." However, the text adds that "some states may not allow this limitation," suggesting regional variations in legal standards.

Account management and usage terms are governed by strict guidelines designed to maintain both security and functionality. Users are prohibited from accessing services through unauthorized means and must be at least 18 years old to use the service. Minors are entirely prohibited from accessing or using the service. The company requires users to maintain account confidentiality and mandates that users promptly report any security breaches.

The platform's terms permit the company to withdraw or amend service and platform content without prior notice. Changes to the terms take effect immediately upon posting, and users are required to review the terms periodically to remain informed of any updates. The company's failure to enforce these terms in one instance does not constitute a waiver of enforcement rights in future instances.

Payment and subscription management follow specific guidelines. Subscriptions automatically renew unless canceled by the user or the company. Users must provide detailed billing information, including full name, address, and payment method, for subscription processing. The company uses third-party payment processors that adhere to PCI-DSS standards managed by the PCI Security Standards Council to handle transactions securely.

Account Management and Usage Terms

The service operates under a strict set of usage guidelines designed to prevent unauthorized activity and protect both users and the company's operations. Visitors must be at least 18 years old to use the service, and minors are entirely prohibited from accessing or using Reprompt's services. Any attempts to create an account or use the platform under an assumed identity are explicitly forbidden.

The company relies on third-party payment processors, with Stripe serving as its primary processor. These processors adhere to the Payment Card Industry Data Security Standard (PCI-DSS), managed by the PCI Security Standards Council, to ensure secure handling of payment information. All payment processing occurs through these trusted third-party services, maintaining a clear separation between the company and direct financial transactions.

Account creation requires users to provide their full name and verify their age, along with an accurate username that does not include another person's or entity's name. Username policy strictly prohibits offensive, vulgar, or obscene content. Maintenance of account confidentiality is mandatory, with users required to notify the company immediately of any password breaches or security incidents. Regular review of account information helps ensure that all details remain current and accurate.

Service operations rely on Google Analytics for tracking and monitoring purposes, but users have the option to opt out of receiving newsletters, marketing materials, and other communications through the unsubscribe link or by contacting customer support directly. The company processes payment information using secure third-party systems that maintain PCI-DSS compliance, protecting both user data and transaction security.

Data Protection and Privacy Practices

Data handling practices follow strict guidelines designed to protect user information while maintaining service functionality. GitDuck, Inc. collects data through session, preference, security, and advertising cookies, with specific purposes for each type of tracking technology. These cookies enable essential service operations, remember user preferences, ensure security, and deliver targeted advertisements, respectively.

The company implements robust security protocols for data protection, storing information only as necessary for business purposes, legal obligations, dispute resolution, and contract enforcement. Usage data is retained for internal analysis, with shorter retention periods for security and functionality improvements. When storing information, GitDuck complies with all applicable privacy regulations and ensures secure data handling practices.

Data protection extends beyond cookie implementation, with comprehensive guidelines for account management and usage. Full name verification and accurate information submission are mandatory during account creation, and usernames must avoid containing another person or entity's names while prohibiting offensive, vulgar, or obscene content. Account holders are responsible for maintaining confidentiality and promptly notifying the company of any security breaches or password breaches.

User data is transferred to servers located in the United States, where GitDuck maintains strict compliance with local data protection laws. By agreeing to the Privacy Policy, users consent to data transfer across international borders. The company employs third-party payment processors that adhere to PCI-DSS standards managed by the PCI Security Standards Council to ensure secure transaction processing.

Third-Party Services and Intellectual Property

GitDuck, Inc. maintains a clear separation between its core services and third-party systems, as detailed in their terms of service. The company uses Sentry, an open-source error tracking solution provided by Functional Software Inc., for monitoring platform stability. However, the company explicitly states it has no control over or responsibility for these third-party services, advising users to review their own terms of service and privacy policies.

Feedback submission policies reflect strict intellectual property protections. Users explicitly acknowledge they cannot retain or assert intellectual property rights to their feedback. The company retains development rights similar to user submissions and is under no confidentiality obligations regarding these contributions. In cases where legal requirements prevent complete rights retention, users grant GitDuck and its affiliates exclusive, transferable, and perpetual rights to any submitted feedback.

The company employs multiple layers of legal protections to limit potential liability. Payment processing occurs through secure third-party systems, with Stripe serving as the primary processor. These systems adhere to the Payment Card Industry Data Security Standard (PCI-DSS), managed by the PCI Security Standards Council, to ensure secure handling of financial transactions. The terms include comprehensive disclaimers of liability, stating that GitDuck will not be responsible for any indirect, punitive, or consequential damages, including legal disputes and associated costs.

Third-party service providers have limited access to user data, as described in the company's privacy policy. These providers are restricted to performing specific tasks related to service operation and are bound to maintain the confidentiality and security of any information they process. While the company maintains robust security protocols for data protection, including compliance with local data protection laws, it acknowledges that no data transmission can be completely guaranteed to be 100% secure.

Children's Privacy and Data Security

Data Collection and Protection for Under 18s

Age Restrictions and Data Collection Policy

Reprompt's platform specifically prohibits access and use by minors under 18 years old. The company maintains a clear policy against knowingly collecting personally identifiable information from users in this age group. Should the company become aware of information provided by children under 18, it promises to remove that data from its servers if parental consent cannot be verified.

Rights and Controls for Minors

The company complies with legal requirements regarding children's data, including provisions under the California Consumer Privacy Act (CalOPPA) that apply to US commercial websites collecting information from California residents. While the platform restricts access to users under 18, the company provides standard privacy controls that allow users to manage their data preferences and request the deletion of personal information.

Data Handling and Retention

Data retention practices for all users, including minors, adhere to strict guidelines. The company retains information only as necessary for business operations, legal compliance, dispute resolution, and contract enforcement. Usage data is kept for internal analysis and security purposes, with shorter retention periods used for maintaining system security and functionality.

Privacy Policy Updates and User Communication

The company maintains clear communication channels for users seeking information about their data or making requests under privacy regulations. Users can contact the company's privacy team by email at help@reprompt.dev or through the company's website support page. All changes to the Privacy Policy are communicated via email notification and prominently displayed on the service page, ensuring users are aware of any policy updates.