ProfessorGPTProfessorGPT

Privacy Policy and Data Protection Notice

Last updated: June 30, 2026

Controller
ProfessorGPT
Trade name
ProfessorGPT

1. Personal data we collect

Depending on how you use the Service, we may collect the following categories of data.

Account data

  • name, username, or display name,
  • email address,
  • account ID,
  • authentication data,
  • language, country, timezone, and preference settings.

Subscription and payment data

  • plan type,
  • subscription status,
  • order/payment IDs,
  • invoice details,
  • payment history,
  • customer and order references provided by Lemon Squeezy.

ProfessorGPT does not directly store full payment card numbers. Payments are processed by Lemon Squeezy or authorized payment processors.

User content

  • prompts used to create skills,
  • Skill Builder Pro selections,
  • category, role, workflow, and technical stack choices,
  • generated or edited SKILL.md outputs,
  • private skill library records,
  • drafts, versions, and notes.

Technical and usage data

  • IP address,
  • device/browser data,
  • session and security logs,
  • page visits,
  • feature usage,
  • AI generation usage records,
  • error and performance logs.

Support and communication data

  • support requests,
  • feedback,
  • email communications,
  • request content and handling history.

2. Purposes of processing

We process personal data to:

  • create and manage your account,
  • provide the Service and generate SKILL.md outputs,
  • convert Skill Builder Pro selections into generation briefs,
  • store private skill drafts and libraries,
  • manage subscriptions, billing, credits, and plan limits,
  • generate outputs through AI model providers or AI gateway infrastructure,
  • prevent abuse, spam, fake accounts, unsafe content, and security risks,
  • respond to support requests,
  • debug, improve, and secure the product,
  • comply with legal obligations,
  • enforce our rights and handle disputes,
  • send product updates or marketing communications where permitted.

3. Legal bases

Where applicable, we rely on the following legal bases:

  • performance of a contract,
  • compliance with legal obligations,
  • legitimate interests,
  • establishment, exercise, or defense of legal claims,
  • consent where required.

For users subject to the GDPR/UK GDPR, legal bases may include contract performance, legitimate interests, legal obligation, and consent where required.


4. AI providers and user content

To generate AI outputs, we may send your prompts, wizard selections, and relevant context to AI model providers or AI gateway providers. This is done solely to provide the requested digital skill generation service.

Do not include sensitive personal data, special category data, health data, financial records, contracts, customer data, trade secrets, API keys, tokens, passwords, cookies, SSH keys, private keys, or confidential business information in prompts.

The Free plan is not designed for sensitive data processing. AI outputs are generated automatically — review and validate them before use.


5. Sharing and subprocessors

We may share personal data with the following categories of recipients:

  • hosting and infrastructure providers,
  • database and authentication providers such as Supabase,
  • payment and billing providers such as Lemon Squeezy,
  • AI gateway or AI model providers,
  • email, analytics, support, and error monitoring tools,
  • integration providers such as GitHub,
  • authorities where legally required,
  • professional advisors, lawyers, or auditors.

These providers receive only the data necessary to provide their services.


6. International transfers

ProfessorGPT uses global cloud infrastructure. Your data may be processed in countries other than your country of residence. Where required, we rely on appropriate safeguards such as contractual measures, standard contractual clauses, or other lawful transfer mechanisms.


7. Retention

We retain data only for as long as necessary for the relevant purpose:

  • account data: retained while your account is active,
  • billing and invoice records: retained for legal retention periods,
  • skill drafts and private library data: retained until deleted by you or account closure,
  • security and usage logs: retained for a reasonable period for security, debugging, and audit,
  • support records: retained as needed for support and dispute handling.

When data is no longer needed, it is deleted, anonymized, or archived where legally required.


8. Your rights

Depending on applicable law, you may have rights to:

  • access your personal data,
  • request correction,
  • request deletion,
  • restrict processing,
  • object to processing,
  • request portability,
  • withdraw consent where processing is based on consent,
  • lodge a complaint with a data protection authority.

To exercise rights, contact support@professorgpt.ai. We may need to verify your identity before processing the request.


9. Children

ProfessorGPT is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us.


10. Security

We use technical and organizational measures designed to protect personal data. However, no online service or cloud system can be guaranteed to be completely secure.

Users are responsible for account security, using strong passwords, not entering secrets in prompts, and reviewing generated skill content before use.


11. Changes

We may update this Privacy Policy from time to time. The current version will be posted on the website. Where required, we will provide additional notice.


12. Contact

ProfessorGPT
Ziyagökalp Mah. 3170.sokak Kocasinan/Kayseri
Privacy: support@professorgpt.ai
Support: support@professorgpt.ai