Enterprise Privacy, Security & Cookie Policy
Learn about PromptImageLab Zero Data Retention (ZDR) policy, AES-256 BYOK encryption, and GDPR/CCPA data protection compliance.
PromptImageLab is committed to absolute user privacy, zero prompt retention (ZDR), transparent data processing, and strict compliance with European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA).
1. Information We Collect
When using our BYOK (Bring Your Own Key) feature in Agent Studio or OpsPilot, your secret API keys (OpenAI, Gemini, Anthropic) are encrypted client-side using AES-GCM 256-bit cryptography before being cached locally in browser memory. Unencrypted keys are never transmitted to disk or written to server logs.
2. Account Deletion & Rights
Account deletion requests can be initiated within user profile settings or by emailing privacy@promptimagelab.com. Account data is permanently purged within 30 days.