Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve our services to you:

• Personal Identification Information (PII): Name, email address, phone number, and location data when you register for an account.
• Professional & Career Data: Information you provide about your professional background, industry, company, job title, and career goals.
• User-Generated Content: Documents, files, strategies, and notes you upload or create within your workspace.
• AI Interactions: Chat histories, prompts, and queries you submit to our AI systems (including "Airis"), as well as the AI-generated responses.
• Social & Collaboration Data: Information about your connections within the platform, direct messages, and shared workspaces.
• Technical Data: IP addresses, browser types, operating systems, and platform usage metrics (e.g., login times, features used).
• Billing Information: Payment histories and subscription details (payment processing is handled securely by our third-party payment providers).

2. How We Use Your Data

We use your data strictly to operate, secure, and improve PRISM OS:

• Service Delivery: To manage your account, authenticate you, and provide workspace functionality.
• AI Processing: To generate strategic insights, provide tailored advice, and maintain context across your interactions with our AI systems. Your data helps personalize your experience.
• Communication: To send you service updates, daily digests, security alerts, and support messages.
• Security & Fraud Prevention: To monitor for suspicious activity and protect the integrity of our platform.
• Analytics: To understand how users interact with PRISM OS and improve our features.

3. Third-Party Processors

To deliver our service, we rely on trusted third-party infrastructure providers. We do not sell your data to these providers; they act as data processors on our behalf:

• Supabase: Database hosting, file storage, and user authentication.
• Anthropic: AI model provider. We send your prompts and relevant context to Anthropic's APIs to generate responses. Note: We have enterprise agreements ensuring your data is not used to train their foundational public models without explicit consent.
• Vercel: Web application hosting and serverless function execution.
• Resend: Delivery of transactional emails (e.g., data exports, password resets).

4. Data Retention

We retain your information for as long as your account is active or as reasonably necessary to provide our services. Some actions — such as editing or regenerating a conversation — delete the underlying data immediately and permanently.

When you delete content or your account, it is removed from your workspace and is no longer visible to you or other users, or used to inform AI responses. We may retain deleted records where reasonably necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, or establish, exercise, or defend legal claims, after which they are permanently removed from our systems. Account billing and payment records are retained as required by law.

5. Your Data Rights

Depending on your location (e.g., GDPR in Europe, CCPA in California), you have significant rights regarding your data:

• Right to Access / Data Portability: You can request a complete export of your data at any time via your Account Settings. This data will be provided in a structured, machine-readable format (.zip containing JSON files).
• Right to Erasure (Right to be Forgotten): You may delete your account and content through the platform's settings. We honor erasure requests except where continued retention is permitted by applicable law — such as for compliance with a legal obligation or the establishment, exercise, or defense of legal claims (Article 17(3) GDPR).
• Right to Rectification: You can update or correct your personal data at any time via your profile page.
• Right to Restrict Processing: You may opt-out of certain data processing activities, such as AI memory retention, via your account settings.

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our platform and hold certain information:

• Essential Cookies: Required for authentication and security. You cannot opt out of these.
• Functional Cookies: Remember your preferences (e.g., theme, sidebar state).
• Analytics Cookies: Help us understand how users interact with the platform.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept essential cookies, you may not be able to use some portions of our service.

7. Security Measures

We implement robust security measures, including encryption at rest and in transit, strict access controls, and regular security audits. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer at: