Privacy Policy & Sovereign Architecture
Last updated: October 17, 2026 • Compliant with EU GDPR (Regulation 2016/679) & CCPA/CPRA.
0 Server Logs
Your uploaded repository files and prompts are processed strictly in ephemeral RAM and never saved to any hard drive or cloud database.
0 Model Training
Your proprietary business logic, prompts, and codebases are never sent to third-party LLMs or used to train any neural network.
Sovereign Client Vault
Your past conversion history and invoice receipts exist exclusively in your browser's local storage sandbox on your personal device.
1. Data Processing Controller & Processor
Under the EU General Data Protection Regulation (GDPR Article 28):
- You (The User / Enterprise Customer) are the Data Controller of your intellectual property and repository content.
- PromptShift.dev acts purely as an ephemeral, automated data processor performing deterministic AST transpilation.
2. How Data Is Handled During Transpilation
Client-Side Pruning in Browser
Heavy dependencies (.git, node_modules) are stripped inside your browser RAM prior to transmission.
In-RAM Transformation
The serverless container parses the AST in volatile memory, sanitizes accidental API keys, and formats target schema.
Immediate Memory Shred
The resulting ZIP stream is returned to your browser. The volatile buffer is immediately marked for garbage collection.
3. Cookies & Local Tracking
PromptShift operates with Zero Tracking Cookies.
We do not use advertising tracking pixels, Facebook Pixel, Google AdSense, or cross-site tracking cookies. The only storage utilized is HTML5 LocalStorage on your own browser, used strictly to save your localized currency preference, your past conversion history, and your downloaded VAT invoices. You can purge this data at any moment in 1 click from your Customer Portal.
4. Payment & Billing Information (Polar.sh)
When you purchase a Single Pass, Pro Developer subscription, or Team license, your payment information (credit card number, expiration date, CVV, or billing address) is handled exclusively by our Merchant of Record,Polar.sh, in compliance with PCI-DSS Level 1 standards. PromptShift servers never see, collect, or store your payment card numbers.
5. Your Rights Under GDPR (Articles 15-22)
You hold the right to access, rectify, or request erasure of any personal metadata associated with your account. Because all project files are shredded from RAM immediately upon conversion, we possess 0 bytes of your source code to delete. For billing receipt erasure, contact our data protection officer:
Data Protection Officer: [email protected]
Compliance Desk: [email protected]