Privacy Policy

1. Who we are

The PRISM product is operated by Prism Orbis (prismorbis.com).

For privacy questions, or to exercise your rights, contact [email protected].

2. Scope

This policy explains what personal data we collect when you use PRISM (the website, app, and related services), how we use it, who we share it with, and the rights you have under UK data protection law.

3. Information we collect

We may collect:

Account data — email address, username, password (stored hashed), and profile details you provide
Subscription and billing data — plan, status, trial dates, and billing metadata. Payments are processed by Stripe. We do not store full card numbers on our servers
Usage data — pages and features you use, watchlists, preferences, notification settings, and similar product activity
Communications — messages you send to support, and emails or notifications we send you
Technical data — IP address, browser type, device information, approximate location derived from IP, and log data needed to operate and secure the service
Cookies and similar technologies — see section 6

We may also process market-related activity linked to your account (for example symbols you watch) as part of providing the product.

4. How we use your information

We use personal data to:

Create and manage your account
Provide and improve the PRISM service
Process subscriptions and payments
Send transactional messages and the notifications you enable
Monitor security, prevent abuse, and diagnose errors
Comply with legal obligations
Analyse product usage in aggregate to improve the platform

We do not sell your personal data.

5. Lawful bases (UK GDPR)

Depending on the activity, we rely on one or more of:

Contract — to provide the service you signed up for
Legitimate interests — to secure, operate, and improve the product in ways that do not override your rights
Consent — where required for non-essential cookies or optional marketing communications
Legal obligation — where we must keep or disclose information by law

6. Cookies and similar technologies

We use:

Essential cookies — required for authentication, security, and core site functions
Analytics — to understand how PRISM is used and improve the product

When you first visit, you may see a cookie notice. Essential cookies are needed for the service to work. Analytics help us improve PRISM; details of current tools may change as we evolve the stack.

7. Sharing and processors

We share personal data only with service providers who process it on our behalf, or where required by law. Categories include:

Payments — Stripe
Email delivery — Brevo (transactional email)
Error monitoring — Sentry
Hosting, CDN, and analytics — infrastructure and analytics providers that host or measure the service

These providers process data under their own terms and privacy policies. We do not sell personal data to third parties for their own marketing.

8. International transfers

Some processors may process data outside the United Kingdom or European Economic Area. Where that happens, we use appropriate safeguards recognised under UK data protection law (for example standard contractual clauses or an equivalent mechanism offered by the provider).

9. Retention

We retain personal data for as long as your account is active and as needed to provide the service.

Account and profile data — while the account remains open, then for a limited period needed to close it and handle residual requests
Billing and subscription records — as required for accounting, tax, dispute handling, and legal obligations
Operational logs — for shorter periods needed for security and troubleshooting
Support correspondence — for as long as reasonably needed to resolve issues and improve support

When you request deletion, we delete or anonymise personal data unless we must retain it for legal, security, or accounting reasons.

10. Security

We use appropriate technical and organisational measures to protect personal data, including access controls and encrypted transport. No method of transmission or storage is completely secure. If we become aware of a personal data breach that requires notification, we will act as required by law.

11. Your rights (UK GDPR)

Under UK data protection law, you may have the right to access your personal data, rectify inaccurate data, erase data in certain circumstances, restrict or object to certain processing, request data portability, and withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

12. Export and deletion requests

To request an export or deletion of your personal data, email [email protected] from the address on your account. We may need to verify your identity. We aim to respond within 30 days, or as otherwise required by law.

13. Children

PRISM is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us and we will take appropriate steps.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. For material changes, we may also notify you in the product or by email.

15. Contact

Prism Orbis — PRISM
Email: [email protected]
Website: prismorbis.com

16. Related documents