Privacy Policy

Last updated: June 2026

Information We Collect

InvisiblePrompt processes all prompt injection testing data locally in your browser. We do not collect or store the content of your prompts, payloads, or test results on our servers.

When you use cloud AI provider features (Pro/Team plans), your API requests are proxied through our Supabase Edge Function for authentication purposes only. The content of your requests is not stored or logged.

Account Information

If you create an account, we collect your email address and basic profile information necessary to provide the service. Payment information is processed by Stripe and is never stored on our servers.

Data Security

We use industry-standard encryption (TLS) for all data in transit. API keys are never stored in our systems and are routed directly to the respective AI providers.

Contact

If you have questions about this privacy policy, please contact us at privacy@invisibleprompt.dev.