Transparent data flows and privacy-first architecture
PromptBid processes conversation metadata to optimize ad targeting and performance. We are privacy-first and do NOT collect personally identifiable information (PII) from users.
All data processing is designed to provide insights while maintaining user privacy through aggregation and anonymization.
We maintain strict prohibitions on collecting sensitive personal information. Your privacy is paramount, and we never store or process data that could identify individuals.
These restrictions are enforced through our data governance policies and technical controls.
Data Security: All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We perform regular security audits and penetration tests. Data retention policies are configured to minimize the time PII is stored. Automated data deletion occurs after 90 days unless explicit retention is required by law.
Choose where your data is stored and processed
Data stored in AWS us-east-1 with redundancy across multiple availability zones
GDPR-compliant storage in AWS eu-central-1 with complete data sovereignty
Regional data processing in AWS ap-southeast-1 for reduced latency
PromptBid offers a comprehensive Data Processing Agreement (DPA) for organizations handling sensitive data. Our DPA complies with GDPR Article 28 and includes standard contractual clauses for international transfers.
Verified compliance through third-party audits and certifications
14-month assessment of controls over security, availability, integrity, and confidentiality
Comprehensive information security management system certification
Annual independent assessment of GDPR compliance and data protection controls
Our compliance and data governance team is available to answer questions about our standards, certifications, and data handling practices