Privacy Policy

Who we are

Prism Division is a content service operated from Florida, United States. For questions about this policy, or to make any request described below, write to support@prismdivision.com.

What we store, and why

• Account email addresses. You sign in with Google, and we store the email address and display name of that account so we know who you are and which workspace you belong to. This is how the service authenticates you; there is no password.
• OAuth access tokens for Meta (Facebook and Instagram), TikTok and Google. When you connect a social account or a Drive folder, the network gives us a token that lets us act on your behalf within the permissions you granted. These tokens are encrypted at rest in our database. We store them so that we can publish approved content and read the folders you connected, and for no other purpose.
• Photos and videos you upload. Material sent through your upload link, connected Drive folder, or the app is stored in Cloudflare R2 object storage, together with the pieces produced from it. We store it because it is the raw material of the content we make for you.
• Your Telegram chat id, if you choose to receive approval notifications on Telegram. It is stored only to deliver those notifications to the right chat.
• Your brand brief and the content we produce — the descriptions, colors, voice notes and rules you give us, plus the captions, drafts and published pieces. Stored so the service can keep producing content consistent with your brand.
• Operational records — which pieces were generated, approved, published or failed, and when. Stored so you can see an honest history of what went out, and so we can diagnose failures.

We do not sell personal data, we do not run advertising on this service, and we do not use your material to train models of our own.

Legal basis

We process this data to perform the service you asked us for, and, where you granted a network permission, on the basis of the consent you gave in that network's own authorization screen. You can withdraw that consent at any time by disconnecting the account in your settings or in the network's own app settings.

How long we keep it

• OAuth tokens: until you disconnect the account, or the network expires them. Disconnecting deletes our copy.
• Uploaded photos and videos, and the pieces made from them: for as long as your account is active, so your library stays usable. Individual items can be deleted from the app at any time.
• Account email and brand brief: for as long as your account is active.
• Telegram chat id: until you turn off Telegram notifications.
• Operational records: up to 24 months, then removed.

When an account is closed we delete its data within 30 days, except anything we are required to keep for legal or accounting reasons.

Deletion on request

Write to support@prismdivision.com from the email address on the account and ask us to delete it. We will confirm and complete the deletion within 30 days. You can also ask for a copy of what we hold, or for a correction, at the same address. You do not need to give a reason.

Who else processes this data

We use a small number of providers to run the service. Each of them only receives what it needs to do its part:

• Anthropic — writes and reviews the text of your content. It receives your brand brief and the context of a piece. Under Anthropic's terms this material is not used to train their models.
• Higgsfield — produces animated clips from your photos, when your plan includes it. It receives the specific photo being animated.
• Cloudflare — stores your photos, videos and produced pieces (R2), and serves the site.
• Railway — hosts the application and its database.
• Meta (Facebook, Instagram), TikTok and Google — receive the content you approved for publication, and provide the sign-in and Drive access you connected.

Some of these providers operate outside your country. We only work with providers that commit to protecting the data they process for us.

Security

Access tokens are encrypted at rest. Access to production systems is limited to the people who operate the service. Every workspace's data is isolated from every other workspace's. No system is perfect; if we ever learn of a breach affecting your data, we will tell you.

Children

The service is for businesses. It is not intended for anyone under 18, and we do not knowingly store data about children.

Changes to this policy

If we change something that matters, we will update the effective date at the top of this page and tell account holders by email before the change takes effect.

Contact

support@prismdivision.com