Privacy Policy

Controller

PRSM

E-mail address: support@prsm.so

Overview of Processing Operations

The following table summarises the types of data processed, the purposes for which they are processed and the concerned data subjects.

Categories of Processed Data

• Account data (email, name, password hash)
• Payment data (processed via Stripe)
• Usage data (features used, generation history)
• Content data (uploaded images, generated content)
• Technical data (IP address, device info, browser type)
• Communication data (support inquiries)

Purposes of Processing

• Provision of the AI content generation service
• User account management and authentication
• Payment processing and subscription management
• Customer support and communication
• Service improvement and analytics
• Security and fraud prevention
• Legal compliance

Legal Bases for Processing

We process personal data on the following legal bases:

• Consent: Where you have given consent to the processing of your personal data for specific purposes.
• Contract Performance: Processing necessary to fulfill our contractual obligations to you, including providing the Service.
• Legal Obligation: Processing necessary for compliance with legal obligations.
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services and ensuring security.

Data We Collect

Information You Provide

• Account Information: Email address, name, and password when you register.
• Payment Information: Processed securely through Stripe. We do not store full credit card numbers.
• Uploaded Content: Images you upload for AI processing.
• Prompts and Inputs: Text prompts and settings you use to generate content.

Information Collected Automatically

• Usage Data: How you interact with our Service, features used, generation history.
• Device Information: Browser type, operating system, device identifiers.
• Log Data: IP address, access times, pages viewed, referring URL.

How We Use Your Data

• To provide, maintain, and improve our AI content generation services
• To process transactions and manage your subscription
• To send you service-related communications
• To respond to your inquiries and provide customer support
• To analyze usage patterns and improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

Third-Party Services

We use the following third-party services to provide our Service:

Supabase

We use Supabase for authentication, database, and storage services. Your account data and generated content are stored securely on Supabase infrastructure.

Stripe

We use Stripe for payment processing. When you make a payment, your payment information is sent directly to Stripe and is subject to Stripe's Privacy Policy.

AI Processing Services

We use third-party AI infrastructure to run machine learning models for image and video generation. Images you upload and prompts you provide may be processed by these services to generate content.

Vercel

Our application is hosted on Vercel. Vercel may collect certain technical data as part of providing hosting services.

Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for 30 days after deletion.
• Generated Content: Stored as long as your account is active. You may delete your content at any time.
• Usage Data: Retained for analytics purposes, typically anonymized after 12 months.
• Payment Records: Retained as required by tax and accounting laws.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request information about the data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to certain types of processing.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at support@prsm.so.

Cookies and Tracking

We use essential cookies to provide our Service, including:

• Authentication Cookies: To keep you logged in.
• Session Cookies: To maintain your session state.
• Preference Cookies: To remember your settings.

We do not use advertising cookies or share your data with advertising networks.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "effective date." Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@prsm.so