Privacy Policy

This policy is a draft and has not yet been reviewed by a lawyer. Bracketed items are placeholders we will fill in before relying on it.

Who we are

Prysm is operated by [LEGAL ENTITY], based in [COUNTRY / STATE] (“Prysm”, “we”, “us”). You can reach us about privacy at [CONTACT EMAIL].

What this covers

This policy covers this marketing website (go.prysmhq.co) and the Prysm app (app.prysmhq.co). If your organization has a separate agreement with us, such as a data processing agreement, that agreement also applies and wins where the two differ.

For content your organization puts into Prysm, your organization is usually the controller and we act on its instructions as a processor.

This website

• No analytics, ad trackers or tracking cookies. We don’t run analytics or advertising scripts on this site.
• One preference, stored in your browser. If you switch between dark and light themes, your choice is saved in your browser’s local storage. It never leaves your device.
• Server logs. Like any website, our hosting keeps basic request logs (such as IP address, browser type, pages requested and time) to keep the site running and secure.
• Fonts and libraries. Our fonts and scripts are stored on our own server. If our copy is temporarily unavailable, your browser may load the same files from the jsDelivr content network, which receives your IP address to deliver them.
• Forms. If you use our contact or newsletter form, the form provider processes what you submit on our behalf, and its privacy policy also applies.

The Prysm app

When you use Prysm, we process:

• Account information such as your name, email address, sign-in details and organization membership.
• Workspace content your organization creates or connects: spreadsheets, files, scripts, docs, dashboards, contracts, and data pulled from connected sources.
• Connection credentials, which are encrypted at rest and never shown again after you save them.
• Usage and security data such as sign-in events, audit log entries and AI usage counts, used to run, secure and meter the service.

AI features

When you ask Juno to do something, the parts of your workspace needed to answer are processed by the AI models that power Juno, or by a model your organization connects on plans that allow it. Destructive actions always wait for a person’s approval. [AI PROVIDER AND DATA-HANDLING DETAILS]

How we use information

• To provide, maintain and secure Prysm.
• To support you when you ask for help.
• To meter plan limits, such as seats and AI allowances.
• To send service messages, like verification and security emails.
• To meet legal obligations.

We do not sell personal information, and we do not use workspace content for advertising.

Who we share it with

We share information only with service providers who help us run Prysm (such as hosting and email delivery), under contracts that limit how they can use it; when the law requires it; or as part of a merger or acquisition, with notice to you. [LIST OF SUBPROCESSORS]

How long we keep it

We keep account information and workspace content while your organization uses Prysm. Logs and histories are kept for the retention periods of your plan, such as audit log and version history retention. When an organization closes its account, we delete or anonymize its data within [RETENTION PERIOD], unless the law requires us to keep it.

Security

Everything in Prysm is scoped to your organization. Credentials are encrypted at rest, scripts run in a sandbox with explicit capability grants, and an audit log records activity. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as required by law.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict some processing. To use these rights, contact [CONTACT EMAIL]. If your organization manages your account, we may refer your request to it.

International transfers

We may process information in countries other than yours. When we do, we use appropriate safeguards required by law. [TRANSFER MECHANISM]

Children

Prysm is a business product and is not directed to children under 16. We don’t knowingly collect their information.

Changes

We’ll update this page when our practices change and revise the date at the top. For material changes, we’ll give customers notice in advance.

Contact

Questions about privacy? Email [CONTACT EMAIL].