Privacy Policy

1.1 Information you provide to us

• Contact details (name, email address, telephone number, company, and any information you include in free-text fields) submitted via our contact or newsletter forms.
• Account or billing information if you become a paying client.
• Integration and API Data — OAuth access tokens, platform identifiers, and scheduled content (text, images, videos, and URLs) that you authorize or provide to execute automated publishing through our software applications.
• Google Ads and internal reporting tools. For authorized client engagements, we use Google OAuth and the Google Ads API to access Google account identity (such as name and email) and Google Ads data you authorize, including lead-form submissions and campaign performance metrics (spend, impressions, clicks, and related campaign identifiers). We use this information only to operate private reporting and attribution systems for that client. We store it in a private database. We do not sell it and do not use it to serve ads to the public.

1.2 Information we collect automatically

• Usage data — IP address, browser type, device identifiers, pages visited, referring pages, and timestamps captured through server logs and analytics tools (e.g., Google Analytics, Meta Pixel, TikTok Events).
• Cookie data — small text files that store website preferences or identifiers. See “Cookies & Similar Technologies” below.

• Respond to enquiries or service requests.
• Provide and improve our services, content, and user experience.
• Send marketing or educational communications you have opted to receive (you can unsubscribe at any time).
• Monitor and analyse Site performance and marketing campaign effectiveness.
• Detect, prevent, and address fraud, security, or technical issues.
• Comply with legal obligations and enforce our Terms of Service.
• Provide authorized clients with internal advertising and sales reporting.

Under the GDPR, our processing is supported by one or more of the following bases: consent, contract performance, legitimate interests (e.g., improving our Site), legal obligation, or the protection of vital interests.

• Service providers who perform services on our behalf (hosting, analytics, payment processing, email delivery, customer-relationship management). These partners are contractually restricted from using your data for any purpose other than providing services to PromptWave.
• Third-Party Social Networks — We transmit your authorized data and content to third-party platforms (such as LinkedIn) via their official APIs solely to execute the automated publishing and management actions you direct. Google Ads reporting data collected for those internal tools is not used as content for automated publishing to social networks.
• Business transfers in connection with a merger, acquisition, or asset sale.
• Legal requirements when we believe disclosure is necessary to comply with applicable law, regulation, or legal process, or to protect the rights, property, or safety of PromptWave, our users, or others.

We use:

• Essential cookies – required for Site functionality.
• Analytics cookies – help us understand how visitors interact with the Site.
• Marketing cookies – placed by advertising partners (e.g., Meta, TikTok) to build a profile of your interests.

You can manage or delete cookies in your browser settings or by rejecting non-essential cookies in our banner (where shown).

We keep personal information only as long as necessary for the purposes set out in this Policy or as required by law, then delete or anonymize it.

We employ administrative, technical, and physical safeguards (including HTTPS/TLS encryption, access controls, and regular monitoring) to protect your information. No transmission over the Internet is 100% secure, so we cannot guarantee absolute security.

We are based in the United States. If you access the Site from outside the U.S., you consent to the transfer and processing of your information in the U.S. and other countries that may have data-protection laws different from your jurisdiction.

9.1 EEA/UK Residents

You may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to certain processing or withdraw consent.

9.2 California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to know, delete, and opt-out of “sale” or “sharing” of personal information, and the right not to be discriminated against for exercising these rights. To exercise any of these rights, please contact us as described below.

The Site may link to third-party websites or embed third-party content (e.g., YouTube videos, social-media widgets). We do not control those sites. Their privacy practices are governed by their own policies.

The Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us immediately so we can delete it.

We may update this Privacy Policy periodically. The “Effective Date” above indicates when it was last revised. Material changes will be posted on this page or communicated by other appropriate means.