RateMyPrompts privacy policy
Version: 2.6 · Effective: 22 October 2026
1. Who we are
This notice explains how theround ltd uses personal data collected through RateMyPrompts (ratemyprompts.com), a free tool that grades the prompt sets businesses use to track their brand in AI assistants. We also run Zebora (zebora.io), an AI visibility consultancy. Section 3 explains when Zebora may contact you.
theround ltd is the controller for the personal data described here. We are a private limited company registered in England and Wales, company number 15402779, registered office 131 Finsbury Pavement, London EC2A 1NT, United Kingdom. VAT number 459080279.
Contact for anything in this notice: privacy@ratemyprompts.com, or by post to the registered office. Our directors are responsible for data protection. We are not required to appoint a Data Protection Officer.
This notice should be read with our terms of use. Where the terms describe what we do with your prompts, this notice explains the personal data side of it.
2. The data we hold, why, on what basis and for how long
We keep your prompts indefinitely and your email address until you ask us to delete it. The table gives the detail.
| What we do | Data | Lawful basis | How long |
|---|---|---|---|
| Grade your set and send you your scorecard | Your email address, your prompts and any other information in your set, such as tags, categories, markets or other fields, plus the scorecard we produce | Contract: providing the service under our terms of use, which you accept when you submit a set | Prompts and scorecards: indefinitely. Email address: until you ask us to delete it |
| Analyst review during the beta | Your set and scorecard | Legitimate interests: checking the quality of grades while the tool is in beta | As above |
| Analysis, insight and product development | Your set and scorecard, including any personal details inside your prompts | Legitimate interests: analysing prompt sets, publishing anonymous statistics and benchmarks, developing and improving our products, including training our own AI models. Assessed in a written balancing test available on request | Indefinitely. If you ask us to delete your details, we remove them from your prompts and keep the rest in a form that cannot be traced back to you |
| Follow-up from RateMyPrompts and Zebora | Email address, any name you give, your score, which visibility tracking tool you use and which Zebora offers you click, plus details about you and your business from public sources (section 3) | Legitimate interests: following up with business contacts who have used the tool. Section 3 explains more | Until you object or ask us to delete it |
| Newsletter, when you submit a set | Email address, any name you give, your score band, coverage band, tool used and markets | Legitimate interests: telling business contacts who use the tool about AI visibility, related services, webinars and events. Section 3 explains more | Until you unsubscribe or ask us to delete it. If you unsubscribe and later submit another set, we add you again |
| Newsletter, from the separate sign-up form | Email address, any name you give and a record of your consent: the words you agreed to, their version, the page, your network address and the time | Consent, confirmed by email before we send anything | Until you unsubscribe. Sign-ups never confirmed are deleted after 30 days |
| Naming businesses and brands that use RateMyPrompts | Business or brand name and logo. For a sole trader this can be personal data | Legitimate interests: showing which businesses and brands use RateMyPrompts | Until you ask us to stop. We stop within 30 days |
| Prevent abuse | Your network address, in rate-limit counters | Legitimate interests: security | 2 days |
We never publish your prompt text. Statistics and benchmarks we publish do not identify you or your brand. Anyone with a scorecard link you share sees only the headline score.
Anonymised and aggregated data. Data that cannot identify you, such as prompts with personal details removed or statistics across many sets, is not personal data. We may use it for any purpose and keep it indefinitely without further notice to you. If we ever combine it with data that could identify you, we treat the result as personal data under this notice.
How your set is graded. We grade your set against our rubric, using third-party large language models listed in section 4. While RateMyPrompts is in beta, Zebora analysts also review every set. A grade assesses a list of questions. It is not a decision about you and has no legal or similarly significant effect on you. If you think a grade is wrong, email privacy@ratemyprompts.com and a person will review it.
Personal data inside your prompts. Please do not include anyone's contact details. Do not include information that is confidential to someone else unless you are allowed to share it with us. You confirm when submitting that you have the right to share your set with us.
New purposes. We only use personal data for the purposes in this notice, or for a new purpose that is compatible with them. If we want to use it for an unrelated purpose, we will tell you first and explain the lawful basis.
3. Newsletter and contact from Zebora
Newsletter. When you submit a set we add your email address to our newsletter. It covers prompts, GEO and related services from RateMyPrompts and Zebora, including webinars and events. RateMyPrompts is for business use, so we send it on the basis of legitimate interests: the law on electronic marketing treats business email addresses differently from personal ones. Every issue identifies us, includes our postal address and has a working unsubscribe link.
If you unsubscribe, we stop sending it. If you later submit another set, we add you to the newsletter again. You can unsubscribe again at any time.
Contact from Zebora. RateMyPrompts and Zebora are brands of the same company, so passing your details from one to the other is not sharing with a third party. We may pass your scorecard and email address to the Zebora team, who may contact you directly about your results or Zebora's services, by email or on LinkedIn. Every email from Zebora tells you how to ask us to stop.
Data we get from elsewhere. To follow up, we may add information about you and your business from public sources such as LinkedIn, your company's website and Companies House. This can include your name, job title, company, company size and sector. Our customer relationship system may add some of this automatically. We use it on the basis of legitimate interests and keep it with your follow-up record.
How to object. Use the unsubscribe link in any newsletter, or email privacy@ratemyprompts.com to stop marketing from RateMyPrompts and Zebora. We stop without asking why. It makes no difference to your scorecards. Submitting another set adds you to the newsletter again, as above.
4. Who we share data with
We never sell your prompts or your email address. We never share them with marketing, data or lead generation businesses. We use the providers below to run the service. Each processes data only on our instructions under a written contract.
| Type of provider | What for | What they receive |
|---|---|---|
| Hosting and cloud storage | Running the site and storing data, including our databases and the tools that access them | The data described in section 2 |
| Large language model providers | Grading your set and the analysis described in section 2 | Your prompts and the other information in your set, never your email address. We only use providers that do not train their models on it |
| Email delivery | Sending scorecards and confirmations | Your email address and the content of the email |
| Newsletter platform | Sending the newsletter | Your email address, any name you give and the newsletter data in section 2 |
| Customer relationship system | Follow-up records used by the RateMyPrompts and Zebora teams | The follow-up data in section 2, including details from public sources |
| Analytics | Understanding how the site is used | Usage data, never your prompts or email address. Cookies are set only if you accept analytics cookies |
| Error monitoring | Fixing problems when the site breaks | Technical details of the error, with request contents, cookies, IP addresses and user details removed |
| Advertising measurement | Measuring whether our posts or adverts lead to submissions. It also lets us show adverts to people who have visited | Runs only if you accept marketing cookies. Never your prompts or email address. The advertising platform is a separate controller for the data it collects on its own site |
We may change providers at any time. Any replacement does the same job under the same protections. Our current list of providers, with where each is based and the safeguard used, is available from privacy@ratemyprompts.com. Our cookie policy names the analytics and advertising tools that set cookies.
Where a provider is outside the UK, we use a recognised safeguard: UK adequacy regulations, the UK International Data Transfer Agreement, EU Standard Contractual Clauses with the UK Addendum, or the UK Extension to the EU-US Data Privacy Framework.
Analytics tools set cookies only if you accept analytics cookies. Before you choose, or if you reject them, some may still send basic measurements, such as that a page was viewed, without setting cookies or storing any identifier in your browser, so you cannot be recognised on a later visit. Advertising measurement runs only if you accept marketing cookies. Apart from that, we do not use advertising services.
We may also share data with:
- our staff and contractors, who are bound by confidentiality
- professional advisers
- anyone who acquires all or part of our business, or a group company that takes over RateMyPrompts, who will be bound by these same commitments
- authorities, where the law, a court or a regulator requires it
5. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, move it to another provider, or stop using it where we rely on legitimate interests. You can withdraw consent at any time, which does not affect anything we did before. You can object to direct marketing at any time and we will stop, as section 3 explains.
To use any of these rights, email privacy@ratemyprompts.com from the address you used to submit your set. We may ask for more information to confirm who you are before we act. There is usually no fee. We may charge a reasonable fee, or refuse, if a request is clearly unfounded or excessive. We reply within one month. If a request is complex, or you make several, we may need up to two more months; if so, we will tell you within the first month. Deletion requests are always handled within 30 days.
Deleting your details. We delete your email address and any other personal details within 30 days and confirm when it is done. This includes removing them from our customer relationship system and newsletter platform. We also remove any personal details we find in your prompts. We keep the prompts themselves and the scorecards in a form that cannot be traced back to you, as our terms of use explain. Once they cannot be linked to you, we can no longer find them to send you a copy or delete them. Occasionally the law requires us to keep some data. If so, we will tell you when you ask.
Naming your business. To ask us not to name your business or a brand as a RateMyPrompts user, email privacy@ratemyprompts.com. We stop within 30 days.
6. Complaints
Please tell us first at privacy@ratemyprompts.com. We will investigate and reply. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
Data is encrypted in transit and at rest. Access to stored prompt sets is limited to our systems and to staff and contractors who need it. Scorecard links are unguessable. A scorecard link you share shows only the headline score. We have a procedure for handling suspected data breaches. We will tell you and the Information Commissioner's Office about a breach where the law requires it.
8. Children
RateMyPrompts is for business use by people aged 18 and over. We do not knowingly collect personal data from children. Prompts may mention children as a topic, for example for brands aimed at families, but should not contain details about any individual child.
9. Using RateMyPrompts outside the UK
RateMyPrompts is available to businesses worldwide. Wherever you use it from, we handle your data as this notice describes. Nothing in this notice takes away rights you have under the law of your country.
European Union and European Economic Area. Where the EU General Data Protection Regulation applies, you have the same rights as in section 5. While RateMyPrompts is in beta, our processing of EU users' data is occasional, so we have not yet appointed a representative in the EU. We will appoint one before we actively market RateMyPrompts there and add their details here. Until then, contact us at privacy@ratemyprompts.com. You can also complain to the data protection authority in your country.
United States. The California Consumer Privacy Act and similar state laws apply to businesses above thresholds we do not meet. We describe our practices here anyway. We collect the categories listed in section 2. We do not sell personal information. The only advertising tool we use loads only if you accept marketing cookies. You can change that at any time from the cookie settings link in the footer. If you live in a US state with its own privacy law, you can use the rights in section 5 by emailing privacy@ratemyprompts.com.
Where your data goes. Your data is stored and processed in the UK, the EU and the US, using the safeguards described in section 4.
10. Cookies
See our cookie policy. Nothing except strictly necessary cookies is set before you choose.
11. Changes
We may update this notice at any time. We will post any change here with a new version number and date. If a change materially affects you, we will email the address you used before it takes effect.