Privacy Policy

1. Scope

Prism World is operated by Vaishnavi1 LLC. This Privacy Policy applies to our services and the people who access them. It does not control the independent privacy practices of Instagram, Facebook, Threads, X, LinkedIn, YouTube, TikTok, Pinterest, Bluesky, Google Business Profile, or other third-party services you connect.

2. Information we collect

Account and workspace information

We receive identifiers such as your name, email address, account ID, workspace membership, and role from the identity service used to sign you in.

Connected-platform information

When you connect a social account, we receive the authorization token, granted permissions, platform account or channel identifiers, display name, and eligible publishing destinations needed to provide the connection. Tokens are stored encrypted and are not displayed back to the browser.

Content and media

We process campaign ideas, captions, titles, schedules, approval notes, images, videos, accessibility text, and publishing settings that you add to Prism World.

Service information

We may process device and browser details, approximate network information, request logs, error records, publishing attempts, and security events needed to operate, protect, and improve the service.

3. How we use information

• Provide workspaces, drafts, previews, approvals, scheduling, publishing, and media storage.
• Connect the destinations you authorize and perform actions you request.
• Manage trials, subscriptions, payment status, invoices, cancellations, and refund requests.
• Secure accounts, prevent duplicate publishing, diagnose failures, and maintain audit records.
• Respond to support, privacy, and deletion requests.
• Comply with law and enforce our Terms of Service.

Prism World does not sell personal information or connected-platform credentials.

4. Social-platform and Google user data

Prism World requests only the permissions needed for the features you choose. Platform data is used to identify eligible destinations, publish or upload content at your direction, show connection health, and record the result. We do not use connected-platform data for unrelated advertising.

Prism World's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Service providers and sharing

We use Firebase Authentication for email and Google sign-in, Sites and Cloudflare infrastructure for hosting and data storage, and Stripe for subscription payments and the customer billing portal. We share the information needed to provide those services. Providers also describe their own processing and security practices in their privacy policies.

When AI captioning is enabled and you choose it, Prism World sends your campaign idea, selected destinations, and relevant saved brand guidance to OpenAI to return editable caption drafts. We do not send uploaded media, social-account credentials, billing details, or unrelated workspace content in that request. Prism World requests that the API response not be stored for later retrieval; OpenAI may still process or retain data as described in its API data-usage terms. You can use local-only caption starters instead.

For billing, we send Stripe your account name, email, and internal account reference. We receive customer, subscription, invoice, payment-status, and trial records so we can manage your plan. You enter full card details on Stripe's hosted pages; Prism World does not store your full card number or card security code. For more information, see Stripe's Privacy Policy.

When automatic workspace invitation email is enabled, our transactional email provider receives the invited email address, inviter name, workspace name, requested role, invitation expiration, and private invitation link only to deliver that message. We do not include uploaded media, social-account credentials, billing details, or unrelated workspace content. If automatic delivery is unavailable, Prism World keeps the invitation in the workspace and gives the inviter its private link and a pre-addressed email draft instead.

We also share information with a connected social platform when you authorize a connection or publishing action; with workspace members according to their role; with service providers helping us operate or secure the service; or when required by law. Support requests include the contact details, messages, and attachments you choose to email us. Do not include passwords or payment-card details.

6. Storage, security, and retention

We use access controls, encrypted transport, encrypted OAuth credentials, signed media links, and workspace separation. No system can guarantee absolute security. We retain information while your account or workspace is active and as reasonably needed for publishing history, security, dispute resolution, and legal obligations. We delete or de-identify information when it is no longer needed.

7. Your choices and rights

You can disconnect a social account to remove its stored authorization tokens, revoke access from the platform itself, and request access, correction, export, or deletion where applicable. See our Data Deletion instructions. Some records may be retained where legally required or necessary for security.

8. Children

Prism World is a business and creator productivity service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. International processing

Information may be processed in countries other than your own. Where required, Prism World uses appropriate safeguards for international transfers.

10. Changes and contact

We may update this policy as Prism World changes. The effective date above identifies the current version. For privacy questions or requests, contact Vaishnavi1 LLC at support@getprismworld.com or use the instructions on our Support page.