PRD 1. Introduction
1.1. This Privacy Policy explains how Free PRD Generator ("we," "us," "our," or "the Service") handles information in connection with your use of this website and the PRD Generator tool available on it (together, "the Site").
1.2. We wrote this policy to be genuinely readable, not just legally defensive. Where a section requires legal precision, we've tried to also explain it in plain language.
1.3. By using the Site, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Site.
2. Scope of This Policy
2.1. This policy covers the website itself, the PRD Generator tool (both Auto Mode and My Own Plan mode), and any pages, forms, or features hosted under this domain.
2.2. This policy does not cover third-party websites you may reach via links from this Site (see Section 29). Those sites have their own privacy practices, which we do not control.
2.3. This policy applies regardless of the device or browser you use to access the Site.
3. Who We Are
3.1. The Site is operated by Free PRD Generator.
3.2. For any privacy-related question not answered by this policy, you can reach us at nexusdev2009@gmail.com (see also Section 35).
4. Definitions
4.1. "Personal data" means information that identifies or could reasonably be used to identify you.
4.2. "Processing" means anything done with data — collecting, storing, using, or deleting it.
4.3. "On-device" or "client-side" means the operation happens entirely within your own browser, on your own device, without any data being transmitted to a server.
4.4. "Local storage" refers to browser-based storage mechanisms (such as localStorage, the Cache API, and IndexedDB) that keep data on your device rather than sending it elsewhere.
5. Our Privacy Philosophy
5.1. This tool was built around a simple principle: the ideas you type into it are yours, and they should stay on your device unless you choose to export or share them yourself.
5.2. We have deliberately built the PRD generation engine to run locally rather than through a hosted AI service, specifically so that we are not put in a position of receiving, storing, or processing your product ideas on our servers.
5.3. Where we do use limited third-party services (such as advertising and analytics, described in Sections 15–17), we've tried to choose the minimum necessary to keep the Site free and to understand basic usage patterns — not to build a profile of you.
6. Information We Do Not Collect
6.1. We do not collect, receive, or store the text you type into the PRD Generator (your product name, idea description, feature list, or any other generator input).
6.2. We do not collect or store the PRD documents generated by the tool.
6.3. We do not require or collect an account, username, or password — there is no login system on this Site.
6.4. We do not collect payment information — the Site and tool are free to use.
6.5. We do not knowingly collect any of the above from any user, including users who are minors (see also Section 22).
7. On-Device AI Processing — Auto Mode
7.1. When you use Auto Mode, the product name and idea description you enter are processed by an AI model that runs entirely within your browser, using your device's own processing capability (via WebGPU where available, or a CPU-based fallback where it is not).
7.2. This input is never transmitted to us, to any server we operate, or to any third-party AI provider (such as OpenAI, Google, or Anthropic). No API call carrying your input is made to an external AI service at any point in this process.
7.3. The output generated (mission, vision, feature list, color palette suggestions, and so on) is likewise produced and displayed entirely on your device.
8. On-Device AI Processing — My Own Plan Mode
8.1. The same on-device processing described in Section 7 applies to My Own Plan mode: the product details, features, screens, custom instructions, and color/theme preferences you enter are processed locally and are not transmitted to us or any third party.
8.2. Structuring your input into a formatted PRD happens using the same local model or local fallback logic described in Sections 7 and 10.
9. Local Storage of Drafts
9.1. To prevent you from losing work if you refresh or close the tab, the Site saves your in-progress draft (form input and/or generated PRD) using your browser's local storage mechanisms.
9.2. This data is stored only on your device. It is not synced to any account (there is none) and is not accessible to us.
9.3. You can clear this data at any time by clearing your browser's site data/storage for this domain, or by using any "clear draft" control offered within the tool itself.
9.4. This data may be lost if you clear your browser data, use a different browser or device, or use private/incognito browsing (which typically does not persist local storage after the session ends).
10. Model Download and Caching
10.1. The first time you use the AI-powered generation mode, your browser downloads a machine-learning model file needed to run the AI locally.
10.2. This file is cached in your browser's storage (via the Cache API/IndexedDB) so it does not need to be re-downloaded on future visits, unless your browser cache is cleared.
10.3. This download is a one-way transfer of the model to your device — it does not transmit any of your personal data back to us in the process.
10.4. If your device or browser does not support this local AI processing (for example, no WebGPU support), the Site automatically falls back to a lighter-weight, rule-based local processing mode, which operates under the same on-device, no-transmission principle.
11. Optional Structured Form Fields
11.1. Where the tool offers optional structured fields (for example, refining target users or selecting a template) in addition to free-text input, these are processed under the same on-device principles described above.
11.2. No structured field data is transmitted to us.
12. Information We Do Collect
12.1. Because there is no account system and generator input is not transmitted, the information we do collect is limited to standard, aggregated technical and usage data described in Sections 13–17.
12.2. This may include information such as approximate location (derived from IP address, at a country/region level via our hosting and analytics providers), browser type, device type, pages visited, and general usage patterns.
12.3. We do not combine this technical/usage data with the content of anything you type into the generator, because that content is never sent to us in the first place.
15. Google AdSense and Advertising Cookies
15.1. This Site displays advertisements served through Google AdSense.
15.2. Google and its partners may use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this and other websites.
15.3. You may opt out of personalized advertising by visiting Google's Ads Settings at https://adssettings.google.com, or by visiting https://www.aboutads.info/choices to opt out of participating vendors' use of cookies for personalized advertising.
15.4. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this Site and/or other sites on the internet, in accordance with Google's own privacy policy.
15.5. We do not have access to, and do not receive, the specific ad-targeting data Google collects — that relationship is governed by Google's own privacy policy and your settings with Google.
16. Google Analytics
16.1. We may use Google Analytics (or a comparable analytics service) to understand aggregate usage of the Site — for example, which pages are visited and roughly how many visitors the Site receives.
16.2. This data is aggregated and does not include the content of anything typed into the PRD generator.
16.3. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on or your browser's Do Not Track/privacy settings, where supported.
17. Third-Party Service Providers
17.1. Beyond advertising and analytics, we may use hosting infrastructure (such as Vercel) to serve the Site itself. These providers may process standard server-log data (such as IP address and request timestamps) as part of delivering the Site to your browser.
17.2. We select providers based on their own stated privacy and security practices, but we encourage you to review their policies directly for full detail.
18. Do Not Track Signals
18.1. Some browsers offer a "Do Not Track" (DNT) signal. There is currently no uniform industry standard for how websites must respond to DNT signals.
18.2. Where our analytics or advertising providers offer a way to honor DNT or equivalent opt-out signals, we support using those settings as described in Sections 15–16.
19. Data Retention
19.1. Because generator input and output are never transmitted to us, there is nothing on our side to "retain" in relation to your product ideas or generated PRDs.
19.2. Local draft data (Section 9) persists on your device until you clear it or your browser does, per your own browser's storage policies.
19.3. Aggregated analytics data is retained by our analytics provider according to that provider's own retention settings, which we configure to the shortest practical period consistent with understanding site usage.
20. Data Deletion by You
20.1. Since no account or server-side draft exists, you can fully delete any local data related to your use of the tool by clearing your browser's storage/site data for this domain, or using any in-tool "clear/reset" function provided.
20.2. This will also remove the cached AI model, which would need to be re-downloaded on your next visit if you use the AI-powered mode again.
21. Data Security Measures
21.1. The Site is served over HTTPS, encrypting data in transit between your browser and our hosting provider.
21.2. Because generator content stays on your device, the largest practical security benefit here is architectural: there is no central database of user product ideas that could be breached, because none is created.
21.3. No method of transmission or storage is 100% secure; we cannot guarantee absolute security of any data, including standard technical/log data described in Section 12.
22. Children's Privacy
22.1. The Site is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children.
22.2. Because the tool does not require registration and does not transmit generator content, the practical exposure of any user's data — including a minor's — is limited to the technical/analytics/advertising data described in Sections 12–17, which is not targeted at or knowingly collected from children.
22.3. If you believe a child has provided personal data to us in a manner not addressed here, please contact us using Section 35 so we can address it.
23. International Users and Data Transfers
23.1. The Site may be accessed from anywhere in the world. Standard technical/analytics data described in Section 12 may be processed by service providers located in different countries than your own.
23.2. Because your generator input is processed on your own device rather than transmitted internationally to us, the primary cross-border data question most privacy policies address does not arise for that category of data.
24. Your Rights Under GDPR (EU/EEA Users)
24.1. If you are located in the EU/EEA, you have rights including: the right to access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to object to processing.
24.2. Because we do not hold generator content or account data about you, many of these rights are most relevant to the limited technical/analytics/advertising data described above; you can exercise related choices via the opt-out mechanisms in Sections 15–16, or contact us per Section 35 for anything else.
24.3. You also have the right to lodge a complaint with your local data protection authority.
25. Your Rights Under CCPA/CPRA (California Users)
25.1. California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale/sharing of personal information, and the right to non-discrimination for exercising these rights.
25.2. We do not sell personal information, as defined under the CCPA/CPRA.
25.3. Requests can be submitted per Section 35.
26. Your Rights Under Other Applicable Laws
26.1. Depending on your location, other privacy laws (for example, in Canada, the UK, or elsewhere) may grant you similar rights.
26.2. We aim to honor the spirit of applicable privacy rights regardless of jurisdiction, within the practical limits of the minimal data we hold.
27. How to Exercise Your Rights
27.1. For rights relating to advertising cookies, use the opt-out links in Section 15.
27.2. For rights relating to analytics, use the opt-out method in Section 16.
27.3. For anything else, contact us at nexusdev2009@gmail.com; we will respond within the timeframe required by applicable law.
28. Automated Decision-Making
28.1. The PRD Generator uses automated processing (the on-device AI model, or the rule-based fallback) to generate document content from your input.
28.2. This automated processing produces a draft document for your own use and review — it does not make any decision about you, your rights, or your access to any service, and has no legal or similarly significant effect on you.
29. Links to Third-Party Websites
29.1. The Site may contain links to other websites (for example, in blog articles or resource references).
29.2. We are not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy policy of any site you visit via a link from here.
30. Changes to This Privacy Policy
30.1. We may update this policy from time to time to reflect changes in the Site, the law, or our practices.
30.2. The "Last Updated" date at the top of this page will always reflect the most recent genuine revision.
30.3. Material changes will be reflected on this page; continued use of the Site after an update constitutes acceptance of the revised policy.
31. Consent
31.1. By using the Site, you consent to the processing described in this policy, including the use of cookies as described in Sections 13–16, subject to any opt-out choices you make.
32. Legal Basis for Processing (GDPR Article 6)
32.1. Where GDPR applies, our legal bases for processing include: legitimate interest (for basic site functionality and security), consent (for optional analytics/advertising cookies, where required by your jurisdiction), and legal obligation (where applicable).
33. Data Breach Notification
33.1. In the unlikely event of a data breach affecting personal data we hold (limited to the technical/analytics categories described above, given our architecture), we will notify affected users and/or authorities as required by applicable law.
34. Accessibility of This Policy
34.1. If you have difficulty accessing or understanding any part of this policy due to a disability, please contact us at nexusdev2009@gmail.com and we will provide it in an accessible format.
35. Contact Us About Privacy
35.1. For any question, concern, or request relating to this Privacy Policy, contact:
35.2. Free PRD Generator, operating this Site under the domain freeproductrequireddocumentgenerator.com.