Privacy Policy

1. Introduction

At Prism, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using Prism, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect several types of information from and about users of our services:

2.1 Personal Information

Information you provide directly to us when signing up for early access or using our services:

• Contact Information: Name, email address, phone number
• Business Information: Company name, business type, Amazon seller account details
• Account Credentials: Username, password (encrypted), authentication tokens
• Payment Information: Billing address, payment method details (processed by third-party payment processors)

2.2 Amazon Advertising Data

When you connect your Amazon Advertising account, we access and process:

• Campaign performance data and metrics
• Ad spend, impressions, clicks, and conversion data
• Keyword performance and search term reports
• Product catalog information
• Historical advertising data for analysis

2.3 Automatically Collected Information

We automatically collect certain information when you visit or use our services:

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: Browser type, operating system, device type, IP address
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies
• Log Files: Server logs, error logs, security logs

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: Operate Prism, process your campaigns, provide AI-powered recommendations
• Improve Features: Analyze usage patterns, develop new features, enhance user experience
• Customer Support: Respond to inquiries, troubleshoot issues, provide technical assistance
• Communications: Send product updates, feature announcements, marketing communications (opt-out available)
• Security: Detect fraud, prevent abuse, enforce terms of service
• Legal Compliance: Comply with legal obligations, respond to legal requests
• Analytics: Understand how users interact with our platform, measure effectiveness

4. Amazon API Integration & Data Security

Prism connects to your Amazon Advertising account through Amazon's official API using OAuth authentication:

• Secure Authentication: We use OAuth 2.0, meaning we never see or store your Amazon password
• Token-Based Access: All API calls use encrypted access tokens that you can revoke at any time
• Limited Permissions: We only request the minimum permissions needed to provide our services
• Data Encryption: All data transmitted between Prism and Amazon is encrypted using TLS/SSL
• Data Storage: Your Amazon data is stored on secure AWS servers with encryption at rest

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, property, safety, or that of our users
• With Your Consent: When you explicitly authorize us to share information

5.1 Third-Party Services We Use

• Amazon Web Services (AWS): Cloud hosting and infrastructure
• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google Analytics 4: Website analytics and usage tracking
• Amazon Bedrock: AI language model for generating recommendations

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit functionality.

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Active Accounts: Data is retained while your account is active
• Closed Accounts: Most data is deleted within 30 days of account closure
• Legal Obligations: Some data may be retained longer for legal, tax, or regulatory compliance
• Backups: Data in backups is deleted according to our backup rotation schedule (typically 90 days)

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at support@calibratedintelligence.com. We will respond to your request within 30 days.

9. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over the internet is encrypted using TLS/SSL
• Access Controls: Strict access controls limit who can view your data
• Regular Audits: Security practices are regularly reviewed and updated
• Secure Infrastructure: Hosted on AWS with enterprise-grade security

10. Children's Privacy

Prism is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Prism is based in the United States. If you are accessing our services from outside the US, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to registered users
• Displaying a prominent notice on our website or within the application

Your continued use of Prism after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: