Privacy Policy
Last updated: July 2026
1. Who we are
BuildMyPrompt is operated by Luminary AI, based in Australia.2. What we collect
- Email address, collected voluntarily when you submit it after your free prompts.
- When you request email sign-in, we send you a unique magic link. This link can only be used once. After you sign in, it will not work again. This link is unique to you. Do not share it with anyone — anyone with the link could sign in to your account.
- Limited device and session data collected automatically to prevent misuse of the service. This data is not linked to your identity.
- Prompts you submit to generate output.
- Beta feedback you submit voluntarily (e.g. what worked well, what didn’t), linked to your account email when you are signed in.
- When you connect an MCP client, we receive your account identity (email) via OAuth to link usage to your account.
3. How we use it
- Email: to notify you about early access and product updates only.
- Device/session data: to enforce usage limits and protect the service.
- Goals: screened for safety and usage compliance, then used to generate your requested output via an AI model.
- Beta feedback: to improve the product; we may publish excerpts on our website or in other marketing materials, typically without identifying you by name unless we obtain separate consent.
4. Third parties who receive your data
- We use OpenRouter to route prompts to AI models. We use Anthropic Claude Sonnet (Latest) via OpenRouter for preview, prompt generation, titles, and automated content moderation checks. We configure OpenRouter to avoid providers that train on prompts and to prefer zero data retention endpoints where supported.
- Those AI providers operate outside Australia. Your prompts may be transmitted to and processed by servers in the United States or other countries. Their policies may differ from Australian privacy law. See OpenRouter’s privacy policy and the relevant model provider policies.
- A third-party email delivery service sends communications on our behalf. That provider operates outside Australia.
- Payment processing is handled by a third-party merchant of record operating outside Australia. We do not store payment card details.
- Our hosting and infrastructure providers operate outside Australia and process requests as part of normal service delivery.
- We use WorkOS as our OAuth identity provider for MCP connector authentication. WorkOS operates outside Australia.
- Third-party MCP clients (e.g. Claude) are separate services. Prompts you generate via MCP are still processed by us and OpenRouter under this policy; how those clients handle data on your device is governed by that provider’s policy.
- If you use the BuildMyPrompt Skill, your AI environment (such as Claude) sends your goal text and related generation options to our hosted API, authenticated with your license key. We process that request exactly as we process a web or MCP request under this policy — the same account, allowance, and safeguards apply. The license key identifies your account; it is stored only in hashed form, never in plain text, and is never written to our logs. How the AI environment that carries the request handles data on your device is governed by that provider’s policy.
- Some pages on this site load fonts and stylesheets from third-party content delivery networks (Google Fonts, Tailwind CDN); those requests are handled by the CDN operator, not by AI or payment providers. We are migrating these assets to self-hosting.
5. What we do not do
- We do not sell, share, or rent your personal information.
- We do not use your prompts to train our own AI models.
- We do not claim ownership of goals or prompts you submit. You grant us a limited licence to host, process, and display that content only to operate the service (including sending goals to AI providers via OpenRouter).