Privacy Policy

2.1 Account and Identity Data

• Full name
• Email address
• Company name and business information
• Phone number (if provided)
• Profile picture (if uploaded)
• Account preferences and settings

2.2 Authentication and Security Data

• Username and encrypted passwords
• API keys and access tokens
• Login timestamps and session data

2.3 Technical and Usage Data

• IP addresses and geolocation data
• Device information (browser type, operating system, device ID)
• Platform usage statistics and analytics
• API calls, requests, and response times
• Error logs and debugging information
• Feature usage patterns and user interactions

2.4 Commercial and Billing Data

• Subscription plans and billing history
• Invoicing details and tax information
• Purchase history and transaction records

2.5 Communication Data

• Support tickets and correspondence
• Email communications and responses
• Chat logs and support interactions
• Feedback, surveys, and testimonials
• Marketing communication preferences

3.1 Service Provision and Platform Operations

• Create and manage user accounts
• Authenticate users and maintain security
• Provide access to the Prism AI platform
• Process and deliver AI/ML services
• Maintain platform infrastructure and databases
• Monitor system performance and availability
• Backup and disaster recovery operations

3.2 Customer Support and Communication

• Respond to support requests and technical issues
• Provide customer service and assistance
• Send service-related notifications and updates
• Communicate about account changes or security issues
• Conduct user training and onboarding

3.3 Billing and Financial Management

• Manage subscription plans and billing cycles
• Generate invoices and billing statements
• Maintain financial records for accounting purposes
• Comply with tax and regulatory requirements

3.4 Platform Improvement and Analytics

• Analyze usage patterns and user behavior
• Improve platform features and functionality
• Conduct performance optimization
• Develop new services and capabilities
• Generate anonymized statistics and reports

3.5 Security and Fraud Prevention

• Detect and prevent unauthorized access
• Monitor for suspicious activities
• Investigate security incidents
• Implement access controls and authentication
• Maintain audit logs and compliance records

3.6 Legal Compliance and Regulatory Requirements

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Maintain records for regulatory audits
• Report incidents as required by law
• Protect our legal rights and interests

3.7 Marketing and Business Development (with consent)

• Send promotional materials and newsletters
• Conduct market research and surveys
• Organize events and webinars
• Develop case studies and testimonials

4.1 Contractual Necessity (Article 6(1)(b))

Processing is necessary for the performance of our contract with you, including:

• Account creation and management
• Platform access and service delivery
• Billing and invoicing
• Customer support and technical assistance
• Service-related communications

4.2 Legitimate Interests (Article 6(1)(f))

Processing is necessary for our legitimate business interests, which include:

• Platform security and fraud prevention
• Service improvement and optimization
• Business analytics and reporting
• Network and information security
• Internal administration and record-keeping
• Protecting our legal rights and interests

We have conducted a legitimate interest assessment (LIA) to ensure our interests do not override your fundamental rights and freedoms.

4.3 Legal Obligation (Article 6(1)(c))

Processing is necessary to comply with legal obligations, including:

• Tax and accounting requirements
• Regulatory compliance (financial services, data protection)
• Court orders and legal proceedings
• Anti-money laundering (AML) and know-your-customer (KYC) requirements
• Data breach notification obligations

4.4 Consent (Article 6(1)(a))

Where we have obtained your explicit consent for:

• Marketing communications and newsletters
• Non-essential cookies and analytics
• Testimonials and case studies
• Market research and surveys

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5.1 Essential Cookies (No consent required)

• Session cookies for authentication and security
• Login state management
• Security tokens and CSRF protection

5.2 Analytics Cookies (Consent required)

• Website usage analytics and user behavior tracking
• Performance monitoring and optimization
• Product insights and feature usage analysis

6.1 Service Providers and Processors

• Cloud hosting and infrastructure providers
• Analytics and monitoring tools
• Email and communication services
• Customer support platforms

6.2 Legal and Regulatory Requirements

• Law enforcement agencies when required by law
• Regulatory bodies for compliance purposes
• Tax authorities for reporting obligations
• Data protection authorities in case of investigations

6.3 Data Processing Agreements

All third-party processors are bound by GDPR-compliant data processing agreements with strict security and confidentiality requirements.

9.1 Right of Access (Article 15)

Request confirmation of whether we process your data and obtain a copy of your personal data.

9.2 Right to Rectification (Article 16)

Correct inaccurate or incomplete personal data without undue delay.

9.3 Right to Erasure / "Right to be Forgotten" (Article 17)

Request deletion of your personal data when it is no longer necessary or if you withdraw consent.

9.4 Right to Restriction of Processing (Article 18)

Request limitation of processing in certain circumstances (e.g., while verifying accuracy).

9.5 Right to Data Portability (Article 20)

Receive your data in a structured, commonly used format and transmit it to another controller.

9.6 Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

9.8 Right to Lodge a Complaint (Article 77)

Lodge a complaint with your local data protection authority if you believe your rights have been violated.