Privacy Policy

1. Who we are

PrismPoster is operated by PrismLabs OÜ. This policy explains how we collect, use, disclose, retain, and protect personal data when you visit https://www.prismposter.com or use PrismPoster's SaaS application, generation tools, creation and editing workflows, and related services.

For account, billing, website, security, analytics, and product operations, we generally act as the data controller. For customer content that a business user uploads or processes on behalf of its own customers or audience, we may act as a processor under the applicable customer agreement or data processing addendum.

2. Personal data we process

• Account data: name, email address, profile image, usertag, password hash, OAuth provider identifiers, and verification state.
• Billing data: Stripe customer, subscription, invoice, credit, and transaction metadata. We do not store full payment-card numbers.
• Content and media data: prompts, drafts, uploaded files (kept for six hours; see section 7), generated text, images, videos, music, captions, metadata, exported media, and private review-link activity.
• Connected-account data: if you connect an external account (for example Twitch, or an X/Twitter account connected in the past), the account username, granted scopes, connection status, and encrypted access tokens needed for the connected feature.
• Usage, device, and security data: IP-derived request metadata, browser/device information, rate-limit events, audit logs, diagnostics, consent-choice records, and the bot-detection signals our sign-up protection collects when you sign up with an email address.
• Approximate location: the country your request comes from, derived by our content-delivery network from your IP address and recorded when you sign up. It is country-level only — we do not collect precise location, GPS coordinates, or device location data — and we use it to understand which markets our signups come from and to determine eligibility for free and promotional offers, as described in section 3.
• Support and feedback: messages, attachments, contact details, and administrative notes needed to respond to you.
• Verified likeness (optional): if you set one up, a live face check and portrait photos of you, which are biometric data, and your legal name. See section 3.2.
• Custom voice (optional): if you create one for music, the two recordings of your voice you submit. They are deleted six hours after you create the voice; see section 7.

To create an account you must give us a username, an email address and a password, or sign in with a supported provider; without these we cannot create an account. Payment details are needed only if you buy something. Everything else is optional or generated as you use the service. Some data comes from third parties rather than from you: the sign-in provider you choose (Google, Discord or Twitch) gives us your account identifier, name, email address and profile image; Stripe gives us the status of your payments and subscription; and any account you connect gives us the connected-account data described above.

2.1 No public community features

PrismPoster has no public profiles, public creation pages, feeds, comments, likes or follows, and it does not publish anything you create. Earlier versions offered these features; they have been removed and no PrismPoster page displays them any more. Records created through them earlier (published works, profile details, comments, likes, follows and reports) remain part of your account data until you or we delete them, and are covered by your rights of access, correction and erasure. Direct links to media files that were shared while those pages were live may still open, and copies that search engines or other third parties made are outside our control; you can ask us to help with a removal request.

3. Why we process data

We process personal data only when we have a lawful basis, including:

• Contract performance: creating accounts, authenticating users, generating content, storing projects, providing downloads, billing subscriptions, and operating private review links that you create.
• Consent: optional analytics/marketing cookies and other opt-in workflows where consent is requested.
• Legitimate interests: service security, abuse prevention, debugging, reliability, fraud prevention, and product improvement that does not override your rights. This also covers our first-party measurement of page views and product usage, which stores nothing on your device. While you are signed out, it identifies your visit only by a code our server derives from your IP address, browser type and the date. The code changes every day, and we do not store your IP address with it. While you are signed in, these events are recorded against your account. This measurement is skipped when your browser sends Global Privacy Control or Do Not Track, account holders can switch it off in Settings > Privacy, and you can object to it at any time by emailing dpo@prismposter.com.
• Legal obligations: tax, accounting, sanctions, security, consumer protection, copyright, and regulatory compliance.

Emails we send. We send the service emails you need (sign-in, verification, receipts, and account and security notices) to perform our contract with you. We also send emails about getting started with PrismPoster, tips, reminders about an unfinished checkout, and occasional offers, some of them personalised to your account by automated means, such as a one-time discount; we send these on the basis of our legitimate interest (GDPR Art. 6(1)(f)) until you switch them off in Settings or with the unsubscribe link in each one. Product-update newsletters and marketing campaigns are sent only if you opt in (GDPR Art. 6(1)(a)). Some of these non-essential emails contain links and a small image that tell us whether the email was opened or a link was clicked, which we use to measure how our emails perform.

3.1 Eligibility for free and promotional offers

Free plans, trial credits, and complimentary generations are discretionary offers rather than part of a paid contract, and they are not available in every country or region. To decide whether an account receives one, we use the country associated with your request — derived from your IP address by our content-delivery network, or, where that is unavailable, from the registration country of the network your request came through — together with the anti-abuse checks described in section 2. Our lawful basis is our legitimate interest in setting the terms on which we make a free promotion available, and in preventing the same person from claiming it repeatedly.

This decision affects only whether a free promotional credit is granted. It is not a decision producing legal or similarly significant effects, and Article 22 of the GDPR does not apply: your account is created and fully usable either way, every paid plan and credit pack remains available on identical terms, and nothing you purchase is affected. Where an offer is unavailable to you, we tell you so in the product. The contractual terms are set out in section 3.5 of our Terms of Service. If you believe an eligibility decision about your account is wrong, contact us using the details in section 12 and a person will review it.

3.2 Verified likeness (biometric data)

You can choose to set up a verified likeness so that you can generate videos that show your real appearance, on either of our video engines. Our premium engine renders people so convincingly that it only accepts a real person who has verified that they are that person, and the verified likeness is how you do so. You must be 18 or older to set one up. It is optional: nothing else in PrismPoster depends on it.

• What we process: a live face check you complete on your own device, the portrait photos you add, and your legal name, which our verification provider's rules require us to hold. We take the name from the cardholder name on your saved payment method where there is one, and otherwise from the name you enter; it stays with us and is not sent to the provider. The face check and the photos are biometric data, a special category of personal data.
• Why, and on what basis: to confirm that the photos show you, so that only your account can generate videos with your likeness. We process this data only with your explicit consent under Article 9(2)(a) of the GDPR, given in the product before the face check starts.
• Who processes it, and where: our verification provider stores the face check and your photos in Singapore, outside the European Economic Area. Singapore has no EU adequacy decision; the transfer is made under the EU Standard Contractual Clauses in our data processing agreement with the provider, and you also consent to it explicitly. The provider processes the data only on our instructions and does not use it to train AI models. We keep a copy of your photos in our own storage for as long as the likeness exists. When you generate a video of yourself, your likeness is used only for that render: on the premium engine from the copy the verification provider already holds, and on the standard engine through short-lived links to our copy, sent to that engine's provider, which may process the photos (never the face check) outside the European Economic Area, including in the United States, under the safeguards in its data processing terms. Both providers, and where they process data, are named on our Sub-Processors page.
• How long: six hours from when you set it up. Your likeness is then erased automatically, the face check and the photos at the provider and in our storage; you can delete it sooner in Settings > Privacy or by deleting your account, and set it up again whenever you want to appear in a video. We keep a record of your consent (its version, date and language) for 180 days after you delete your likeness, to demonstrate that it was given. Videos you have already made stay in your library until you delete them.
• Withdrawing: you can withdraw your consent at any time by deleting your likeness. Withdrawal does not affect the lawfulness of processing before it. The rights in section 6 apply as well.

3.3 Connected AI assistants

You can connect PrismPoster to an AI assistant, such as Claude, ChatGPT, Cursor or VS Code, so it can make things with your account. You connect it by signing in on prismposter.com, where you see what it will be allowed to do and set a daily credit limit and an amount above which it must ask you first.

• What we receive: the requests the assistant sends on your behalf (which feature it uses and what it asks for, such as a prompt, lyrics or links to your pictures, clips or audio) and the name of the assistant.
• Why, and on what basis: to make what you asked for, under the same rules, prices and safety checks as the website, to keep to the limits you set and to avoid charging twice. This is necessary to provide the service you asked for.
• What the assistant receives from us: only the answers to its requests: the results it made, their status, your credit balance and what it may still spend today, and the library items it asks for. It never receives your payment details, your password or your verified likeness.
• Your decisions stay yours: approvals and consent for real people are given by you, in PrismPoster's own card shown inside the assistant or on prismposter.com, never by the assistant. We record each consent with its wording, the time and the place you gave it.
• Retention: the record of each request is deleted after 30 days. Consent records are kept with your generation records, as described in section 7.
• Control: you can see and disconnect connected apps at any time in Settings, under Account & security; their access ends at once. The assistant's own provider handles your conversation under its own privacy policy.

4. Cookies, analytics, and privacy signals

Essential cookies and storage keep authentication, security, consent records, and core product workflows working. Optional analytics, functional, and marketing categories load only according to your cookie choices. See the Cookie Policy.

PrismPoster honors browser Do Not Track and Global Privacy Control by keeping optional analytics and marketing disabled. You can also manage choices at Privacy Choices or, when signed in, at Settings > Privacy.

If you give Marketing consent, we use Google Ads conversion measurement to learn which of our ads bring visitors. Our legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time in Cookie Settings. Google receives your IP address, browser information, the page you visited and any ad-click identifier, and uses this data as an independent controller under its own privacy policy (see how Google uses information from sites that use its services). Google may process it in the United States, where Google LLC is certified under the EU-U.S. Data Privacy Framework. We do not use it for remarketing or personalised ads. Without that consent, or when your browser sends Global Privacy Control or Do Not Track, the Google Ads tag does not load.

5. Sub-processors and third parties

We use vetted service providers for hosting, database storage, payments, transactional and support email, push notifications to our mobile apps, browser analytics after consent, advertising conversion measurement after Marketing consent, operational and security telemetry (error and performance monitoring on a legitimate-interest basis), bot protection at sign-up, AI/media generation, content moderation, identity verification for the verified likeness, media rendering, font delivery, and file storage. For checkout purchases, Stripe acts as merchant of record and processes the related billing data as an independent controller under its own privacy policy. Credits bought inside our iOS or Android app are sold through the Apple App Store or Google Play, which process that purchase as independent controllers under their own privacy policies. The current list is maintained on our Sub-Processors page.

5.1 No model training on your content

We do not use your prompts, uploads, reference media, or generated outputs to train, fine-tune, or improve any machine-learning model, and there is no setting that turns this on. Your content is sent to a generation provider only to produce the output you asked for, and the result is stored only for you. The providers that generate images and video for us are contractually prohibited from training their models on our customers' data. Our music generation provider is licensed only to operate its service for us and deletes generated files 14 days after generation. All of them are listed on our Sub-Processors page. Business customers will find the same commitment, with the full processor terms, in our Data Processing Agreement.

We do not sell personal information for money. If optional analytics, advertising, or cross-context disclosures are considered a sale or sharing under applicable US privacy law, you can opt out through Privacy Choices, Global Privacy Control, or Settings > Privacy.

6. Your privacy rights

Depending on your location, you may have rights to:

• Access personal data and receive information about how it is used.
• Receive portable data in a structured, machine-readable format.
• Correct inaccurate or incomplete personal data.
• Delete personal data, subject to legal, security, fraud-prevention, and billing exceptions.
• Restrict or object to certain processing.
• Object at any time, free of charge, to direct marketing, including the personalised offers described in section 3, by using the unsubscribe link in any such email or Settings > Preferences.
• Withdraw consent for optional processing.
• Object to solely automated decisions with legal or similarly significant effects.
• Opt out of sale/sharing and limit sensitive personal information under CCPA/CPRA.
• Exercise rights without unlawful discrimination.
• Lodge a complaint with a data protection supervisory authority (EEA/UK residents).

Signed-in users can exercise these rights in Settings > Privacy. You can also email dpo@prismposter.com. We respond without undue delay and within one month of receiving your request. For complex or numerous requests we may extend this by up to two further months; if we do, we will tell you within the first month and explain why. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — www.aki.ee. If you are in the UK, you can also complain to the Information Commissioner’s Office (ico.org.uk).

7. Retention and deletion

• Active accounts: account, project, generated media, and workspace data are retained while needed to provide the service, and what you generate stays in your Library until you delete it.
• Your uploads: files you upload to make something (pictures, clips and audio used as a frame or reference, a clip you remake, the photos for a verified likeness and the recordings for a custom voice) are deleted automatically six hours after you upload them, together with our records that point at them. Our cleanup runs every 15 minutes, so a file is gone within six hours and fifteen minutes, and nothing can be rendered from it after six hours. Uploads are never copied to our backups. The one exception is media you add to a video-editor project, which stays with the project until you delete it. A file is kept longer only while a moderation review of it is open or after it was confirmed to break our rules, as evidence of that review.
• Deleted content and accounts: when you delete content or your account, it is removed from our live systems as part of the deletion workflow. We keep backup copies of media in a separate, access-restricted location only to recover from data loss; they are never used for anything else and are not restored after you delete the data. A backup copy of deleted media is erased automatically once the original has been gone for 30 days, and database backups are kept for 30 days, so deleted data normally leaves our backups within about a month. You can ask us to erase the backup copies of your content sooner at privacy@prismposter.com. Verification photos for a likeness, and the uploads described above, are never included in backup copies.
• Abuse-prevention markers: so that free starter credits, the free music allowance and the free preview clip cannot be claimed repeatedly, we keep keyed hashes of the sign-up email address, the IP address and network a request came from, and the browser and device identifiers described in our Cookie Policy. We cannot read the original values back from these hashes; we can only check whether the same value appears again. Because we hold the key, they are still personal data. They are kept after an account is deleted, because a record erased with the account could not stop the same person from claiming again. Each stops being used 24 months after it was last seen, and they are used for no other purpose.
• Legal records: billing, tax, fraud-prevention, security, audit, consent, and dispute records may be retained as required or permitted by law, typically up to 7 years for financial records. The record of your confirmation that you hold the rights and consent for the real people in a render keeps its time, wording version, the links to the pictures and a fingerprint of those links, never the pictures themselves.
• Aggregated data: anonymized or aggregated metrics that no longer identify an individual may be retained for product, security, and business analysis.

8. International transfers

PrismPoster and its providers may process data in the European Economic Area, United Kingdom, United States, and other countries where our providers operate. Where required, we use safeguards such as data processing agreements, Standard Contractual Clauses, transfer impact assessments, and provider security commitments. You can ask for a copy of the safeguards that apply to a transfer by writing to dpo@prismposter.com.

9. Security

We use technical and organizational measures including TLS, encrypted provider storage, password hashing, scoped OAuth access, rate limiting, origin checks, audit logging, and access controls. No system is perfectly secure, but we work to prevent, detect, and respond to unauthorized access. See our Security page for more detail.

10. Children

PrismPoster is not directed to children. You may not use the service if you are under 13, or under 16 where EEA/UK law requires a higher age for consent to online services. If we learn that we collected personal data from a child without appropriate consent, we will delete it. You must be 18 or older to set up a verified likeness.

11. Changes

We may update this policy as PrismPoster, our providers, or applicable law changes. Material changes will be posted on this page and, where appropriate, communicated in the product or by email.