Privacy Policy | La Prompterie

La Prompterie — prompterie.com — Last updated: April 2026

La Prompterie places fundamental importance on the protection of its Users' personal data. This Privacy Policy explains how Users' data is collected, processed, stored and protected.

Article 1 — Data controller

The controller of personal data processing is La Prompterie, contact: contact(arobase)prompterie.com.

Article 2 — Data collected

2.1 Identification data provided on registration

When creating an account, the User is invited to provide the following data:

Last name
First name
Email address
Password (stored in encrypted form, never in cleartext)
Phone number (optional)
Date of birth (optional)

2.2 Profile data

The User may complete their profile with the following information:

Display name (public pseudonym)
Profile picture (avatar)
Biography
Full postal address (street, postal code, city, country)
Country of residence
Preferred language (French or English)
Time zone
Personal website or URL (portfolio, social network, professional site)
Company or business name (if applicable)
Tax or VAT identification number (if applicable)

2.3 Data specific to Sellers

Sellers are required to provide additional data for identity verification and payout processing:

Full name as it appears on the identity document
Date of birth
Full postal address
Copy of an official ID document (passport, ID card)
Bank details (IBAN, account holder name)
Company registration number (if applicable)
Beneficial owner information (for legal entities)

This data is collected and processed exclusively by the payment provider as part of its regulatory KYC obligations. La Prompterie does not access or store identity documents or banking details.

2.4 Transaction data

Complete history of purchases and sales
Transaction amounts, commissions and fees
Payment provider transaction identifiers
Date and time of each transaction
Identifier of the Prompt purchased or sold
Payout history (amount, date, status)

No card data is collected or stored by La Prompterie. All payments are processed by the secure payment provider.

2.5 Navigation and technical data

IP address
Browser type, version and language
Operating system and device type (computer, mobile, tablet)
Screen resolution
Pages viewed, viewing duration and navigation paths
Referrer URL
Date, time and frequency of visits
Clicks, interactions and searches performed on the Platform

2.6 Connection and security data

Date and time of each login and logout
IP address at connection
Device and browser used
Active session history
Failed login attempts history
Password change history

2.7 Platform interaction data

Favourites and collections created
Reviews and comments posted
Reports submitted
Notification preferences (email and in-app)
Cookie preferences
Correspondence with customer support

Article 3 — Purposes of processing

Personal data is collected and processed for the following purposes:

Account management: creation, authentication, experience personalisation, preferences management.
Transaction execution: Prompt purchases and sales, commission calculation, payout to Sellers.
Communication: transactional notifications (purchase, sale, payout), support responses.
Platform improvement: anonymised statistical analysis of usage, trend identification, feature improvement.
Security: fraud prevention and detection, protection against unauthorised access, anti-abuse.
Personalisation: relevant Prompt recommendations, display tailored to User profile and preferences.
Legal obligations: compliance with accounting and tax obligations, responses to competent authority requests.
Advertising: display of relevant ads (subject to User consent).
Anti-counterfeiting: traceability of content in case of unauthorised Prompt redistribution.

Article 4 — Legal bases

Each processing is based on a specific legal ground:

Contract performance (Art. 6.1.b GDPR / Art. 13 Swiss FADP): account management, transaction processing, access to purchased Prompts, payouts.
Legitimate interest (Art. 6.1.f GDPR / Art. 31 FADP): service improvement, Platform security, fraud prevention, experience personalisation.
Legal obligation (Art. 6.1.c GDPR): retention of transaction data for accounting and tax purposes, responses to judicial orders.
Consent (Art. 6.1.a GDPR / Art. 6 FADP): advertising cookies, analytics cookies, marketing communications.

Article 5 — Retention period

Account data (identification, profile, preferences): for the account's lifetime, then thirty (30) days after deletion to allow possible reactivation.
Transaction data (purchases, sales, payouts, invoices): ten (10) years from the transaction, per Swiss accounting obligation (Art. 958f Code of Obligations).
Connection logs and security data: twelve (12) months.
Navigation data: twelve (12) months.
Customer support correspondence: three (3) years from the last exchange.
Cookies: maximum thirteen (13) months.

At the end of these periods, data is deleted or irreversibly anonymised.

Article 6 — Recipients of the data

Personal data may be shared with the following categories of recipients, strictly as needed for the purposes described above:

Payment provider: for transaction processing, Seller identity verification and payouts.
Hosting provider: for secure data storage.
Email delivery provider: for transactional notifications.
Ad network: if the User has consented to advertising cookies.
Audience analytics provider: if the User has consented to analytics cookies.
Competent authorities: upon judicial or administrative order, subject to applicable law.

Personal data is never sold, rented or transferred to third parties for commercial purposes.

Article 7 — Transfers outside Switzerland and the EU

Where providers are located outside Switzerland or the European Union, appropriate safeguards are put in place in accordance with the European Commission's Standard Contractual Clauses and Swiss Federal Act on Data Protection (FADP) requirements.

The User may request a copy of the safeguards in place by writing to contact(arobase)prompterie.com.

Article 8 — Data security

La Prompterie implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data, including:

Password hashing using recognised algorithms.
Encryption of sensitive data at rest.
Encryption of communications in transit (HTTPS).
Strict role- and privilege-based access control.
Monitoring and logging of administrative access.
Rate limiting of login attempts (brute-force protection).
Email verification on registration.
Ability for the User to view and revoke active sessions.

Article 9 — User rights

Under the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), each User has the following rights:

Right of access: obtain confirmation of processing and a full copy of the data.
Right of rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of personal data, subject to legal retention obligations.
Right to restriction of processing: request restriction under certain circumstances.
Right to portability: receive data in a structured, commonly used, machine-readable format.
Right to object: object to processing on legitimate grounds.
Right to withdraw consent: at any time for consent-based processing, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, the User may write to: contact(arobase)prompterie.com. The User must prove their identity. A response will be provided within thirty (30) days.

Article 10 — Complaint

In case of difficulty regarding the processing of personal data, the User may file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or with the data protection authority of their country of residence.

Article 11 — Minors

The Platform is not intended for persons under the age of sixteen (16). La Prompterie does not knowingly collect personal data relating to minors. Should La Prompterie become aware that a minor has created an account, that account will be deleted as soon as possible.

Article 12 — Changes to this Policy

This Privacy Policy may be amended at any time. Any substantial change will be communicated to Users by email or by notification on the Platform. The last update date is shown at the top of the document.

Article 13 — Contact

For any question regarding the protection of your personal data: contact(arobase)prompterie.com