WHAT WE COLLECT

When you use Athena (our AI chat)

Everything you type goes to Anthropic's Claude API. That's how AI works. Your questions, our responses, the full conversation. Anthropic processes it according to their terms. We don't store chat logs on our servers. When you close the chat, it's gone from our side.

When you contact us

Email address, name, whatever context you provide. We store this in our email system (Google Workspace). We use it to respond to you. That's it.

When you enquire about products

Name, email, company, what you're trying to solve. Same as above. Stored in email. Used to assess fit and respond.

When you become a client

Payment details (processed by Stripe, we never see your full card number), usage data (what products you use, how often, API consumption), any work you create in the tools.

What we don't collect

We don't use analytics trackers. No Google Analytics. No Facebook Pixel. No tracking cookies. We don't sell data. We don't share it with advertisers. We're not in the data business.

HOW WE USE IT

We use your data to:

• Respond to your enquiries
• Provide the services you paid for
• Improve our products based on usage patterns
• Send service updates (downtime, new features, billing issues)
• Enforce our terms (usage requirements, capacity limits)

We don't use your data to:

• Train AI models (your work stays yours)
• Market to you endlessly (we'll email about service stuff, not sales)
• Build profiles for advertising
• Sell to third parties

WHO SEES IT

Your data lives in three places:

Our team

The people who need to see it to help you. Support requests, account issues, product feedback.

Service providers

• Anthropic (Claude API for Athena and product tools)
• Google (email hosting)
• Stripe (payment processing)
• Vercel (hosting infrastructure)

These companies have their own privacy policies. We chose them because they're serious about security. But read their terms if you want to know what they do.

Nobody else

We don't sell data. We don't trade it. We don't give it to marketing platforms. If law enforcement shows up with a valid warrant, we'll comply. Otherwise, your data stays with us.

HOW LONG WE KEEP IT

• Contact enquiries: Until we respond, then archived. Deleted after 2 years unless you become a client.
• Active client data: As long as you're a client, plus 7 years for accounting/legal requirements.
• Usage logs: 90 days for debugging, then deleted.
• Chat with Athena: Not stored on our servers. Anthropic's retention policies apply.

YOUR RIGHTS (GDPR)

If you're in the EU/UK, you have rights:

• **Access:** Ask what data we have on you. We'll send it within 30 days.
• **Correction:** Wrong email? Outdated info? Tell us. We'll fix it.
• **Deletion:** Want us to delete everything? We will, except what we legally must keep.
• **Portability:** Want your data in a usable format? We'll export it.
• **Object:** Don't want us processing your data for a specific purpose? Say so.
• **Complain:** Think we're breaking the rules? Contact your data protection authority.

To exercise these rights, email: privacy@prismaticalab.com

SECURITY

We use industry-standard security:

• HTTPS everywhere (encrypted connections)
• Secure hosting infrastructure (Vercel)
• API keys rotated regularly
• Access controls (only authorised team members see client data)
• Regular security audits

Perfect security doesn't exist. If something goes wrong, we'll tell you immediately.

CHANGES TO THIS POLICY

We might update this. When we do, we'll change the date at the top. Major changes? We'll email active clients.

QUESTIONS?

Email: privacy@prismaticalab.com

Prismatica Labs Limited
Company Number: 15595850
Registered Office: 48 Pembroke Road, London, England, W8 6NU