Your data rights and how to make a data request (DSAR)
You have the right to see, correct, export, and delete the personal data PrismPoster holds about you. If you're signed in, the fastest route is self-serve: go to Settings → Privacy, where you can export your data, view what we have stored, submit a recorded privacy request, and delete your account — no email needed. A formal data subject access request (DSAR) by email is the fallback if you can't sign in. The details of what we hold and why are spelled out in our privacy policy. PrismPoster is operated by PrismLabs OÜ in Tallinn, Estonia, so these rights are governed by the GDPR.
What rights do I have over my data?
Under the GDPR you can ask us to:
- Access — get a copy of the personal data we hold about you.
- Correct — fix data that's wrong or out of date.
- Delete — have your personal data erased.
- Export — receive your data in a portable form.
- Restrict or object — limit how we use certain data, or withdraw consent you previously gave (for example, your cookie choices).
The full list, with the legal basis for each, is in /privacy.
How do I make a DSAR?
Start in Settings → Privacy while signed in — you can export your data, see what we hold, submit a recorded request, and delete your account there without emailing anyone. If you can't sign in, send your request through /contact or email privacy@prismposter.com. Tell us which right you want to exercise — access, correction, deletion, or export — and use the email address tied to your account so we can verify it's really you. Verifying your identity protects you: it stops someone else from requesting your data. We respond to data requests without undue delay and within one month of receiving them; if a request is especially complex we may extend that by up to two further months and will tell you if so.
What happens to my generations and saved media?
Your generations are stored in your Library and stay private to you unless you take a deliberate public action. A deletion request covers your personal data as described in the privacy policy. If you're winding down rather than deleting, note that cancelling a plan keeps your generated content and saved assets in the account as read-only and still exportable from the Library — see Change or cancel your plan.
Where does my data live and who processes it?
Some of your data is handled by third parties acting on our behalf, such as the payment processor and infrastructure providers. We list them, and where data is stored, on our sub-processors and data location page.
Frequently Asked Questions
How do I request a copy of all my data?
Signed in, export it yourself from Settings → Privacy — no request needed. Otherwise email privacy@prismposter.com or use /contact, state that you want a copy of your personal data, and send it from the email on your account so we can verify your identity.
Can I have my account and data deleted?
Yes. Signed in, you can delete your account directly in Settings → Privacy. If you can't sign in, send a deletion request through /contact or privacy@prismposter.com. We'll erase your personal data as described in the privacy policy.
How long does a data request take?
We reply without undue delay and within one month of receiving your request. For complex or numerous requests we may extend that by up to two further months, and we'll let you know within the first month if we need to.
Who is responsible for my data?
PrismPoster is operated by PrismLabs OÜ, based at Sepapaja tn 6, Tallinn 15551, Estonia. The full data controller details are in our privacy policy.