Prism Cyber Core Privacy Policy
The Privacy Policy explains what Prism Cyber Core processes to provide the web service, what stays local during current file-content scanning, and how account, billing, support, security, and operational records are handled.
Scope of Services
When you register an account, we process the account and session information needed to authenticate you and provide the Service.
- The Prism Cyber Core website and dashboard at https://prismcybercore.com (the "Site").
- The current browser-based scanner, account features, support tools, and checkout flows linked to this Policy (the "Service").
- Desktop and native mobile packages are not currently released and are outside the scope of this Policy.
Summary of This Policy
- We process account and authentication details, subscription and payment status, support messages you choose to send, and aggregate operational metrics needed to provide and secure the web service.
- The current web scanner can analyze files you select in your browser. Do not submit health records, government IDs, payment-card details, or other sensitive information unless a feature explicitly requests it.
- We do not use files selected for the current web scanner or their scan results to train AI models.
- We use reasonable technical and organizational safeguards, including authenticated sessions and secure hosting. No internet-facing service is completely secure.
- Depending on your jurisdiction, you may request access, correction, deletion, portability, or limits on processing of personal data we maintain.
Personal Data We Collect & Local Isolation Boundaries
Account Infrastructure Information: When you create a workspace, we collect your corporate email address to set up, authenticate, and maintain your active session.
Your Selected Files: The current web scanner reads selected files locally in your browser. File contents are not uploaded by the scanner; account and operational metadata may still be processed for the Service.
Interaction & Utility Inputs: We process the inputs you voluntarily send through support or other Service features to return the requested response.
Support Communications & Feedback: This includes the message and contact details you choose to share when contacting support.
Core Usage Metrics: We process aggregate operational metrics to analyze system health and improve reliability. Security systems may process transient browser, network, and IP information for fraud prevention and service protection.
Merchant Verification & Payment Status: Lemon Squeezy processes checkout and provides us payment status, subscription tier, and account identifiers needed to activate access. We do not receive raw card numbers.
- We will NOT use your workspace data for AI model training.
- We will NOT access or collect data from your local files without your explicit, permission-granted operational sync triggers.
- To protect global workspace integrity, users are strictly forbidden from inputting or providing personal health records, government-issued identification numbers, raw personal consumer banking numbers, or personal data belonging to minors under the age of 16 to our infrastructure.
How We Use Your Data and Valid Legal Bases
- Contractual Performance: Necessary to deliver product functionalities, manage license keys, and validate active subscription sessions.
- Explicit User Consent: Where you have granted explicit authorization for specific diagnostic outputs.
- Legitimate Business Interests: Including maintaining operational platform security, detecting and isolating malicious system abuses, enforcing our Terms of Use, and defending our legal rights.
- Statutory Legal Obligations: Meeting governmental, tax compliance, and institutional data retention regulations under international law.
Cookies and Ambient Tracking Technologies
Cookies are small data nodes stored natively by your client browser. You can fully configure or entirely block cookies via your local application browser settings. If you disable persistent cookies entirely, certain persistent synchronization features of the PRISM dashboard may not function as intended.
We and our infrastructure partners use functional session identifiers to analyze system stability, verify system loading metrics, and retain dark-mode visual theme preferences. We do not engage in targeted ad retargeting or cross-site tracking cookies inside the software shell.
How We Share Your Personal Data
We do not sell your personal data. We disclose personal data to select service providers strictly to maintain operational platform integrity under rigorous data protection processing agreements.
- Hosting & Infrastructure Vendors: We utilize secure cloud infrastructure providers (such as Amazon Web Services or Replit infrastructure arrays) to host our core databases and platform backends.
- Customer Support & Ticketing Pipelines: We pass support requests to specialized help desk suites to manage tracking, ticket diagnostics, and developer responses.
- Analytical AI Processing Engines: For specific advanced text interpretation requests triggered by the user, processing inputs are routed securely via API arrays to external models (such as OpenAI enterprise pathways) operating under strict data retention restrictions that prohibit model training.
- Merchant of Record Pipelines: Payment processing and billing lifecycles are executed via Lemon Squeezy.
- Law Enforcement & Judicial Demands: We will disclose personal data if legally compelled by a binding court order, valid statutory regulation, or a good faith belief that disclosure is strictly required to address systemic security threats, platform fraud, or immediate physical safety risks.
Data Security, Encryption, and Retention Process
We implement robust technical isolation layers, network perimeters, and client-side access tokens designed to defend your workspace data against unauthorized disclosure, loss, or manipulation. Your account workspace is secured via unique encrypted session keys and user-managed passwords. It is your absolute responsibility to restrict access to your hardware devices and sign off after active development sessions.
We retain your personal account metrics only as long as your workspace profile remains active. If you choose to deactivate your account or request data purging, your information is deleted or permanently anonymized from our live production tables, except where lingering data is required for financial auditing, active legal dispute resolution, or statutory compliance obligations.
International Cross-Border Transfers
As a global digital service, Prism Cyber Core stores data primarily across highly secure server infrastructure situated within the United States and the European Economic Area (EEA). If you access our platform internationally, your transaction records and account data may be securely routed to these regions. To guarantee an unyielding layer of data defense during cross-border transfers, we execute Standard Contractual Clauses (SCCs) and data transfer agreements that align rigorously with international regulatory frameworks including the EU GDPR and UK Data Protection Act 2018.
Children's Privacy Constraints
Our security services and platform utilities are built strictly for independent software professionals, developers, and corporate enterprises. We do not knowingly solicit, market to, or collect data from minors under the age of 16. If we discover that an account has been registered by an individual under 16, the account will be immediately deactivated and all matching records permanently purged from our storage arrays.
Your Global Privacy Rights
Subject to regional jurisdictions (such as the European Union GDPR, UK Data Protection Act, and global regulations), you may possess the following statutory rights over your personal data.
- Right of Access & Portability: Request a machine-readable copy of all personal account logs currently retained on our servers.
- Right of Rectification: Request immediate correction of faulty or outdated registration records.
- Right of Erasure (The Right to be Forgotten): Completely wipe your workspace registration records and deactivate your platform license keys.
- Right to Restrict Processing & Object: Object to processing activities built upon legitimate interest baselines or halt transactional data parsing.
- Right to Lodge a Complaint: Submit a formal grievance to your localized data protection supervisory authority.
- To execute any of the above data protections, contact our compliance team directly via email or through the Support Portal at prismcybercore.com.
Additional U.S. State Disclosures (CCPA/CPRA)
Under specific state privacy frameworks (including California, Virginia, Colorado, Connecticut, and Utah), residents are entitled to supplementary disclosures regarding data tracking over the preceding 12-month period.
- We collect and disclose Account Identifiers and Usage Data to infrastructure hosting providers for verified business operations.
- We do not sell your personal data for monetary gain or share your usage data for cross-context behavioral advertising.
- You have the right to request access to or deletion of your collected metrics without facing discriminatory pricing or service throttling. You can opt out of any automated tracking settings via your profile interface or by contacting support.
External Service Providers
Lemon Squeezy provides checkout and payment processing under its own privacy policy. Desktop and native mobile packages are not currently released, so no app-store processing is part of the current Service.
Current Web Service Scope
The current Service is browser-based. Native desktop and mobile packages are not currently released and are outside the scope of this Policy.
- Browser scanner: Selected file contents are analyzed locally in your browser and are not uploaded by the scanner.
- Account service: Account, billing, support, security, and aggregate operational metadata may be processed to provide and protect the Service.
Updates to This Privacy Policy
Prism Cyber Core reserves the right to modify this Privacy Policy as our software landscape, features, and international regulatory environments evolve. We recommend regularly auditing this layout. In the event of material structural shifts to our processing patterns, we will notify your workspace in advance via prominent platform pop-ups, dashboard notices, or direct email notifications.
Contact Corporate Compliance
If you have any questions, comments, or formal inquiries regarding this Privacy Policy, wish to exercise your data subject rights, or require support regarding your workspace privacy settings, please reach out to our dedicated compliance specialists.
Prism Cyber Core Privacy & Compliance Team — Support Portal: prismcybercore.com/support