Privacy Policy

Last updated: 2026-02-02

This Privacy Policy explains how Prizm AI (“we”, “us”, or “our”) handles personal information when you use the Prizm Prompt website, browser extension, account services, Prompt cloud library, AI features, Member features, and support channels (collectively, the “Service”).

How to contact us

Privacy questions and applicable data-rights requests: support@prizmai.app
General product support: support@prizmai.app

Information we handle

Information you provide

Depending on the feature you use, information can include:

account and profile information supplied through the sign-in service;
communications sent to support or community channels;
purchase, subscription, entitlement, and transaction references needed to operate Member features;
Prompt content, variables, task instructions, conversation messages, and other content you submit to account-based AI features;
saved Prompts, categories, tags, order, and related organization data when you use the authenticated cloud Prompt library;
information you choose to include in feedback or other communications.

Do not submit passwords, authentication tokens, complete CDKs, payment-card details, government identifiers, medical records, or other sensitive personal information in Prompt content or support requests.

Visitor-local Prompt data

When you use Prizm Prompt without signing in, visitor Prompts remain in the current browser profile. They are not an authenticated cloud Prompt library. Browser storage and deletion are controlled through the current browser profile and extension controls.

Interactive website demo

The landing-page demo uses predefined local examples. Demo Prompt choices are not sent to an AI model, authentication, billing, or the Prizm Prompt product backend.

Automatically generated technical information

The Service and its providers can process technical information needed to operate, secure, diagnose, and improve the Service, such as browser/extension version, device or operating-system type, language, network/IP information, request timing, error information, and bounded feature-event metadata. Prizm Prompt analytics events are designed not to include Prompt content, keystrokes, passwords, authentication tokens, or browser-sensitive data.

How Prompt and conversation content is processed

Account-based optimization, Prompt Design, Easy Chat, testing, and related AI features send the content required for the requested operation through the Prizm Prompt backend. The backend owns model routing and can use third-party AI processing services to produce the requested output.

Submit only content you are authorized to process. AI inputs and outputs can contain personal or confidential information depending on what you provide. Visitor-local storage does not apply to content you intentionally submit to an account-based AI request.

Signed-in Prompt libraries use authenticated cloud storage. The Service processes account identity and the Prompt/library data needed to load, create, update, organize, and delete the authenticated user’s own library. Visitor-local data does not automatically become cloud account data merely because a user signs in; use the available import or migration flow when moving local Prompts.

Payments and Member data

Payment Checkout is provided through the configured payment service. Payment-card details are collected and processed by the payment provider under its own privacy terms. Prizm Prompt can process transaction references, product choice, payment/subscription status, entitlement, request balance, billing errors, and related account state needed to provide Member features and support.

Opening Checkout or returning to Member does not itself prove payment or entitlement; the Service relies on authoritative confirmed state.

How we use information

We can use information to:

provide, authenticate, maintain, and support the Service;
process requested AI operations and return results;
store and synchronize authenticated Prompt libraries;
administer Member purchases, subscriptions, entitlements, request balances, and CDK redemption;
secure the Service, prevent abuse, investigate errors, and enforce applicable terms;
communicate service, security, support, and account information;
understand bounded product usage and improve reliability;
comply with law, lawful process, and protection of rights and safety.

We do not use visitor-local Prompt storage as an authenticated cloud library.

Information can be shared only as needed with:

infrastructure, authentication, AI-processing, email/support, analytics, and security providers that help operate the Service;
the configured payment provider for Checkout, payment, subscription, refund, and fraud-prevention operations;
professional advisers and authorities when required to comply with law or protect rights and safety;
an acquirer or successor in a lawful corporate transaction, subject to applicable protections;
another party when you direct or consent to the disclosure.

Third-party websites and community services linked by Prizm Prompt operate under their own privacy policies.

Retention

We retain personal information for as long as reasonably needed to provide the Service, maintain security and account records, meet legal/accounting obligations, resolve disputes, and enforce agreements. Retention depends on the data type, account state, purpose, risk, and applicable law.

Visitor-local Prompts follow browser-profile storage. Authenticated Prompt/library, account, transaction, and support data follow the applicable product and service retention controls. We do not claim a specific retention period where the current Prizm Prompt product contract does not define one.

Your choices and rights

Depending on location and applicable law, you may be able to:

access, correct, or delete applicable account information;
delete supported Prompt/library content through product controls;
sign out or uninstall the extension;
clear visitor-local data through browser or extension controls;
object to or restrict certain processing;
request a portable copy where required;
withdraw consent where processing relies on consent;
complain to the relevant data-protection authority.

We may need to verify identity before fulfilling a request. Some information can be retained when required for legal, security, fraud-prevention, transaction, or dispute purposes.

Cookies and website technologies

The website or its service providers may use cookies or similar technologies that are necessary for operation, language preference, security, and authorized analytics. Browser controls can limit cookies, but disabling necessary storage can affect functionality. The browser extension’s local storage is separate from ordinary website cookies.

Security

We use reasonable technical and organizational safeguards intended to protect information. No online transmission or storage method is completely secure. Protect your account and device, keep credentials private, and report suspected unauthorized access.

International transfers

We are based in Singapore and can use providers operating in other countries. Where required, international transfers use applicable legal mechanisms and safeguards.

Children

The Service is not intended for anyone under 18. If you believe information from a child has been handled contrary to applicable law, contact us.

Changes to this policy

We may update this policy to reflect product, provider, legal, or operational changes. The current version will be published through the Service, and material changes will be communicated when required by law.

Regional rights

Users in the EEA, United Kingdom, California, South Korea, Japan, Singapore, and other regions may have additional rights under local law. Mandatory local rights are not limited by this policy. Contact support@prizmai.app to submit a request or ask which regional process applies.