Privacy Policy
At Prismudio, we are committed to protecting your privacy, securing your creative scripts and pre-production workflows, and handling all account and transaction data with the highest industry standards.
Our Privacy Guarantees
1. Introduction
This Privacy Policy describes how Prismudio (“we”, “us”, or “our”) collects, uses, stores, and protects personal information obtained through our website (https://prismudio.com) and our AI video pre-production planning workspace.
By accessing or using Prismudio, you acknowledge that you have read, understood, and agreed to the data practices outlined in this policy.
2. Information We Collect
We collect information in three primary categories to operate and improve the platform:
A. Account & Profile Information
When you sign up or authenticate with Prismudio (via email/password or Google OAuth), we collect your name, email address, profile avatar URL (if provided by OAuth), account role, and encrypted authentication tokens.
B. Payment & Subscription Information (PCI-DSS Certified Processing)
When you purchase or subscribe to a plan in USD ($), your transaction is processed directly through our authorized PCI-DSS Level 1 certified payment processor. Prismudio receives and stores only transaction metadata (such as customer reference ID, subscription identifier, payment transaction ID, plan tier, amount paid, and transaction timestamp). We never capture, store, or have access to raw credit/debit card numbers or CVV codes.
C. Workspace Projects & AI Content Data
To provide pre-production tooling, we store your created workspaces, project titles, idea spark notes, channel scout research queries, generated scripts, scene sections, pacing settings, narration beats, and draft versions.
D. AI Telemetry & Usage Logs (Tokenomics)
We log execution telemetry including input tokens, output tokens, reasoning tokens, cache reads, execution latency, model version, and cost calculation to power your Tokenomics usage dashboard.
3. How We Use Your Information
We use the collected information for specific, legitimate business purposes:
- To Provide & Operate the Services: Generating scripts, researching YouTube topics, calculating token allowances, and maintaining project versioning.
- To Process Payments & Invoicing: Managing recurring subscriptions, sending receipts, and confirming payment authentications.
- To Ensure Security & Prevent Abuse: Monitoring system health, mitigating automated bots, preventing API abuse, and enforcing account rate limits.
- To Communicate with You: Sending essential transactional emails (email verification, password resets, payment confirmations, and critical security notices).
- To Improve Platform Quality: Analyzing aggregated, anonymized telemetry to optimize model latency, prompt cache efficiency, and platform user experience.
4. Third-Party Service Providers & Sub-processors
We collaborate with trusted third-party service providers that adhere to rigorous data protection and security standards:
| Provider Role | Service Role | Data Handled | Security Standard |
|---|---|---|---|
| Authorized Payment Processor | Payment Gateway & Recurring Subscriptions | Payment processing, billing info, tokenized card IDs | PCI-DSS Level 1 Compliant |
| Google Cloud / Gemini API | AI Model Inference & Search Grounding | User prompts, topic queries, script generation parameters | SOC 2 / ISO 27001 Certified |
| Resend | Transactional Email Delivery | Recipient email, verification & reset links | TLS 1.3 / GDPR Compliant |
| Cloud Database (PostgreSQL) | Managed Secure Relational Storage | Encrypted account data, workspaces, project drafts | AES-256 Encryption at Rest |
5. Data Retention & Account Deletion
We retain your personal data and creative projects only for as long as your account remains active or as needed to provide you with the platform services.
Account Deletion: You may request the permanent deletion of your account, workspaces, and associated project data at any time by contacting our privacy team at [email protected]. Upon verification, all your project drafts, script versions, and personal identifiers will be permanently expunged from our active databases within 30 business days, except where retention is required by tax or legal obligations.
6. Your Privacy Rights (GDPR / CCPA / Global)
Depending on your location and applicable privacy laws, you possess the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Update or correct inaccurate account profile details.
- Right to Erasure (“Right to be Forgotten”): Request full deletion of your personal data.
- Right to Data Portability: Export your scripts, ideas, and shot lists in machine-readable formats.
- Right to Withdraw Consent: Cancel your subscription or revoke third-party OAuth access at any time.
8. Contact Our Data Protection Team
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:
Prismudio Privacy & Data Protection Officer
Email: [email protected]
Support: [email protected]
Website: https://prismudio.com