Privacy Policy

1. Introduction

Prism Data Studio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered data analysis platform.

By using Prism, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Name (optional)
• Organization name (optional)

2.2 Data You Upload

You may upload datasets for analysis. We process this data solely to provide our services to you. Your uploaded data:

• Is stored securely in encrypted cloud storage (AWS S3)
• Is only accessible by you and authorized team members
• Is not used to train AI models
• Is not shared with third parties
• Can be deleted at any time upon your request

2.3 Usage Information

We automatically collect:

• Browser type and version
• Device information
• IP address (anonymized)
• Pages visited and features used
• Query patterns (anonymized for service improvement)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your data analysis requests
• Send you technical notices and support messages
• Respond to your comments and questions
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• SOC 2 compliant infrastructure (AWS)
• Regular security audits and penetration testing
• Role-based access controls
• Multi-factor authentication support

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time by contacting us at privacy@prismdata.studio.

After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention) for up to 90 days.

6. Third-Party Services

We use the following third-party services:

• Sage by Flowstack - Backend AI agent infrastructure and data processing
• AWS - Cloud infrastructure and data storage
• Stripe - Payment processing
• Anthropic - AI language model provider (queries only, not your data)
• Google Analytics - Anonymous usage analytics
• Vercel - Application hosting

These providers have their own privacy policies and are contractually bound to protect your data.

7. Google Workspace API Data

Prism's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Google account (including Google Analytics, Google Ads, Google Drive, or YouTube), we access only the data necessary to provide our analytics and reporting services. Specifically:

• Google data is used solely to provide our services to you and display insights in your private workspace
• We do not use Google Workspace API data to develop, improve, or train generalized AI and/or ML models
• Google user data is not sold or transferred to third parties except as necessary to provide our services
• Google user data is not used for serving advertisements
• You can disconnect your Google account at any time through Settings → Integrations

Access tokens are encrypted and stored securely. We only request the minimum scopes necessary for the features you use.

8. Your Rights

Depending on your location, you may have the following rights:

• Access - Request a copy of your data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your data
• Portability - Request your data in a portable format
• Opt-out - Opt-out of marketing communications

To exercise these rights, contact us at privacy@prismdata.studio.

9. Cookies

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use our service
• Improve our service based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect some features.

10. Children's Privacy

Prism is not intended for users under 16 years of age. We do not knowingly collect information from children under 16. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: