Privacy Policy

PRISM — Relationship Intelligence
Operated by Prism Spectrum, Dhaka, Bangladesh
Last updated: June 15, 2026

1. Information We Collect

2. How We Use Your Data

To provide and personalise the service, generate AI analysis, process subscriptions and payments, maintain security, and send service notifications (marketing only if you opt in).

3. Third-Party Processors

We share data only with processors needed to run PRISM: cloud database & hosting (Supabase, Vercel), AI processing (Google Gemini / Imagen, server-side), payment processing (SSLCommerz, Paddle), analytics (Google Analytics, anonymous), and transactional email (Resend). We do not sell your data. AI requests are processed server-side — never sent directly from your browser to AI providers.

4. Data Retention & Deletion

Your data is retained while your account is active. You can delete your account and all associated data at any time via the Account Deletion page; requests are completed within 30 days.

5. Your Rights

You may access, correct, export, or delete your personal data, and withdraw consent at any time via settings or by contacting us.

6. Data Security

We use encryption in transit (HTTPS/TLS), Row-Level Security on all database tables, JWT authentication, and rate limiting.

7. Children's Privacy

PRISM is for users aged 13 and above. We do not knowingly collect data from children under 13.

8. International Transfers

Data may be processed in Singapore (Supabase), the United States (Vercel, Google Cloud), and Bangladesh (our operations), with appropriate safeguards.

9. Cookies

We use essential cookies for authentication and optional analytics cookies. Manage preferences in your browser settings.

10. Contact

Email: privacy@prismcharacter.com · Phone: +880 1819-251308
Prism Spectrum, Dhaka, Bangladesh