Privacy Policy

Your privacy matters to us as much as it does to you.

Authentication: We use Supabase Authentication for a secure and simple sign-in process. This means you can sign in using your email and password or Google OAuth. We never see or store your Google password and only use your basic account information (such as your email and name) to set up your account. All authentication is handled securely through Supabase's enterprise-grade infrastructure.

User Data & Content Creation: We collect and store your account information, website data, brand assets, and marketing content preferences only for the duration of your active subscription. This includes your connected social media profiles, content generation settings, marketing strategies, and campaign data. We only retain the latest version of your preferences and content as saved by you. If you cancel your plan, you can delete your data. Otherwise, we will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.

Payments: We partner with Stripe to securely process all payment transactions. Your payment details are handled entirely on Stripe's platform, ensuring that we never see, store, or have access to your sensitive payment information. We only receive a confirmation that includes your name and email address to verify your subscription status.

Data Security: All personal data, including your email, name, subscription status, website content, brand assets, and marketing preferences, is stored in our Supabase database. We follow industry-standard security practices to keep your information safe and Supabase is SOC 2 certified. All data is encrypted in transit and at rest.

Social Media Integration: When you connect social media accounts like Instagram, Twitter, LinkedIn, or Bluesky to PRISM Media, we only store the necessary authentication credentials to publish content on your behalf. We do not read your private messages, personal posts, or access any data beyond what's required for content publishing. Authentication tokens are encrypted and stored securely. You can disconnect any social media account at any time through your dashboard.

AI Content Generation: When you use our AI-powered content creation features, we process your brand information, website content, and preferences through secure AI services (OpenAI and Anthropic). This data is used solely to generate personalized marketing content for your business. We do not train AI models on your data, and your information is not shared with other users or used for any purpose beyond content generation for your account.

Website Analysis: PRISM Media analyzes your website to extract brand colors, typography, mission statements, and other brand elements to create cohesive marketing strategies. This analysis is performed securely and the data is stored only in your account. We do not access or store any sensitive business information beyond what's publicly available on your website.

About Our Service: PRISM Media is built to help you create attention-optimized marketing content that resonates with your audience. The information you provide is used solely to craft personalized marketing strategies and content that aligns with your brand and business goals. We do not share or sell your data or use it for any purpose other than what's stated above.

Technology Stack: PRISM Media is built using modern, secure technologies including Next.js, TypeScript, Supabase (PostgreSQL), and integrates with leading AI providers. All data transmission is encrypted using industry-standard protocols, and our infrastructure follows security best practices.

Your Rights: You have the right to access, update, or delete your personal information at any time. You can export your content, disconnect social media accounts, and permanently delete your account through your dashboard. If you have any questions about your data or this privacy policy, please contact us at privacy@prismmedia.pro