Privacy Policy
EasyMBox (“we”, “us”, or “our”) protects users’ personal information when providing GPT Prompt Tester and related services. This Privacy Policy explains what information is processed and how it is handled in connection with the Windows Store app, the official website (gptpromptester.com), Pro subscription verification, and OpenAI API usage.
Effective Date: 2026. 03. 04 · First Issued: 2025. 12. 02
- We do not collect direct identifiers such as your name, phone number, address, or national ID number.
- OpenAI API requests are sent directly from your PC to OpenAI, and our servers do not receive or store your prompt content.
- We verify Pro subscription status. Payment information (e.g., card details) is processed by Microsoft and is not collected or stored by us.
1. Service Overview & Principles
GPT Prompt Tester is a Windows desktop application that provides productivity features such as prompt testing, content drafting, and image generation using the OpenAI API. We process information only to the minimum extent necessary to operate the service securely and do not use it for unrelated purposes.
- Operator: EasyMBox
- Operator Name: Boxkeeper
- Contact Email: boxkeeper@easymbox.com
We process only the minimum technical information required for service operation and security. We do not store users’ content (including prompts, templates, or Playground content) on our servers, nor do we use it for analytics or profiling.
2. Information Processed
The following information may be processed during service use. Each item is limited by purpose and retention period.
2-1. Information processed for app operation, security, and verification (processed by us)
- Device identification value: An identifier used for device limits and security/verification (e.g., device ID or an equivalent value)
- Environment information: OS type and version, app version
- Access logs: IP address, request timestamp, request/response result codes (for security and incident response)
- Subscription/license verification records: verification timestamp, verification result, product identifiers, etc. (minimum necessary scope)
- (Exception: if key-based licensing is offered): license key and activation records
We do not collect information that directly identifies you, such as your legal name, contact number, address, or government-issued identification number.
2-2. Information transmitted when using the OpenAI API (sent directly from your PC to OpenAI)
When you run AI features, requests are transmitted from your PC to the OpenAI API. Your input text (such as prompts or content) is sent to OpenAI to generate AI responses.
- Data transmitted: the text you input (prompt/content)
- Purpose: generating and testing AI responses
- Our server involvement: none (direct transmission from your PC to OpenAI)
We do not store your prompt content on our servers or use it for analytics. OpenAI’s handling of data (retention, logging, training, etc.) is governed by OpenAI’s policies.
2-3. When using the website (gptpromptester.com)
- Web analytics: We may use Google Analytics (GA4) for website usage statistics.
- Google Analytics uses cookies and anonymized visit information to generate statistics such as page views and usage patterns. This information is used only for statistical analysis and service improvement.
-
For details on Google’s data processing, please refer to the following policy.
https://policies.google.com/privacy - Cookies: The website may use the minimum cookies necessary for site operation and analytics. We do not use cookies for advertising targeting or marketing purposes.
- Server logs: Access logs (including IP addresses) may be generated for security and incident response.
3. Purposes of Use
We use processed information only for the purposes listed below.
-
Pro subscription and license status management
- Verifying Microsoft Store subscription status and enabling Pro features
- (Exception) Verifying license key validity if a key-based license is offered
- Managing device limits and verification
-
Service quality and stability
- Analyzing and reproducing errors/incidents
- Detecting abnormal requests and responding to security threats
-
User support
- Handling subscription/license/technical inquiries
- Confirming error conditions and providing guidance
4. Retention & Deletion
We delete information without undue delay once the purpose is achieved. However, we may retain information as required by applicable laws.
Access logs (including IP)
- Retention: 30 days
- Purpose: security, incident response, abuse prevention
- Deletion: automatically deleted after the retention period
Subscription/license verification records and device information
- Retention: until service termination or deactivation (minimum necessary scope)
- Deletion: deleted without undue delay after the purpose is achieved
- Exception: may be retained to the minimum extent necessary for fraud/abuse investigations, dispute resolution, or legal compliance
Electronic records are deleted in a non-recoverable manner, and physical outputs are shredded or incinerated.
5. Sharing with Third Parties
We do not share your information with third parties except in the following cases.
- When you have provided prior consent
- When required by law or requested by competent authorities through lawful procedures
OpenAI API requests are transmitted directly from your PC to OpenAI. We do not provide your prompt content to third parties through our servers.
6. External Services & Cross-Border Transfers
We may use the external services below to provide the service. Each provider processes information under its own policies.
6-1. OpenAI API (external AI service)
Overview
- Initiated by: user (called directly from the user’s PC)
- Data transmitted: user-input text (prompt/content)
- Purpose: generating AI responses
- Our server involvement: none
- Cross-border transfer: OpenAI servers may be located outside your country (e.g., the United States)
We do not store your prompt content on our servers, and we do not retain or analyze it after the request is completed.
For details on OpenAI’s data processing, please refer to the policy below.
https://openai.com/policies/privacy-policy
6-2. Microsoft Store (subscription payments and subscription status verification)
Overview
- Purpose: processing Pro subscription payments and verifying subscription status
- Communicating party: the app and/or our server communicates with Microsoft Store systems to verify subscription status
- Data processed: product identifiers, data required for subscription verification, app/device environment information (minimum necessary scope)
- Payment data: payment method details (e.g., card numbers) are processed by Microsoft and are not collected by us
For details on Microsoft’s data processing, please refer to the policy below.
https://privacy.microsoft.com/
7. Your Rights & How to Exercise Them
You may exercise the following rights to the extent permitted by applicable privacy laws.
- Request access to information we process
- Request correction
- Request deletion (e.g., device verification records within our control)
- Request restriction of processing
Email: boxkeeper@easymbox.com
We cannot access or delete information that we do not store (e.g., prompt content transmitted directly from your PC to OpenAI). Rights related to such data must be exercised through OpenAI’s policies and procedures.
8. Security Measures
We apply the measures below to protect processed information.
- Encrypted transmission: HTTPS/TLS communication
- Least-privilege access: minimizing accounts and permissions with access to verification/log data
- Minimum processing: processing only what is necessary for the stated purposes
- Retention control: automatic deletion or orderly disposal after retention periods
- Security checks: monitoring abnormal traffic and error patterns when necessary
9. Privacy Contact
- Privacy Officer: Boxkeeper
- Email: boxkeeper@easymbox.com
Privacy-related inquiries and requests can be submitted via the contact above.
10. Changes & Notice
This Privacy Policy may be updated due to service changes or applicable law updates. If there are material changes, we will provide notice through reasonable means before the effective date.
- Announcements on the official website
- Update notes or in-app notice (where available)
First Issued: December 2, 2025
