Privacy Policy

1. Who we are

PrismPoster is operated by PrismLabs OÜ. This policy explains how we collect, use, disclose, retain, and protect personal data when you visit https://www.prismposter.com or use PrismPoster's SaaS application, generation tools, creation and editing workflows, community features, and related services.

For account, billing, website, security, analytics, and product operations, we generally act as the data controller. For customer content that a business user uploads or processes on behalf of its own customers or audience, we may act as a processor under the applicable customer agreement or data processing addendum.

2. Personal data we process

• Account data: name, email address, profile image, public usertag, password hash, OAuth provider identifiers, and verification state.
• Billing data: Stripe customer, subscription, invoice, credit, and transaction metadata. We do not store full payment-card numbers.
• Content and media data: prompts, drafts, uploaded files, generated text, images, videos, music, captions, metadata, exported media, and published community content.
• Connected-account data: if you connect an external account (for example Twitch, or an X/Twitter account connected in the past), the account username, granted scopes, connection status, and encrypted access tokens needed for the connected feature.
• Usage, device, and security data: IP-derived request metadata, browser/device information, rate-limit events, audit logs, diagnostics, consent-choice records, and the bot-detection signals our sign-up protection collects when you sign up with an email address.
• Approximate location: the country your request comes from, derived by our content-delivery network from your IP address and recorded when you sign up. It is country-level only — we do not collect precise location, GPS coordinates, or device location data — and we use it to understand which markets our signups come from and to determine eligibility for free and promotional offers, as described in section 3.
• Support and feedback: messages, attachments, contact details, and administrative notes needed to respond to you.
• Verified likeness (optional): if you set one up, a live face check and portrait photos of you, which are biometric data, and your legal name. See section 3.2.

To create an account you must give us a username, an email address and a password, or sign in with a supported provider; without these we cannot create an account. Payment details are needed only if you buy something. Everything else is optional or generated as you use the service. Some data comes from third parties rather than from you: the sign-in provider you choose (Google, Discord or Twitch) gives us your account identifier, name, email address and profile image; Stripe gives us the status of your payments and subscription; and any account you connect gives us the connected-account data described above.

2.1 Community features

Publishing is optional. When you publish a work, anyone can see it, together with your usertag and profile picture, its title and caption, and its like, comment and view counts. Published works are listed in our sitemap and can be indexed by search engines and other web crawlers. If you also make your profile public, your profile page becomes visible and indexable too. It shows your bio, location, website and social links if you add them, the month you joined, your published works, your follower and following counts, and the accounts you follow and that follow you. Comments you post show your usertag and profile picture. We keep comments, likes, follows and reports while your account exists or until you remove them. Reports you file are seen only by our moderation team. You can unpublish a work or make your profile private at any time. Copies that search engines or other third parties have already made are outside our control.

3. Why we process data

We process personal data only when we have a lawful basis, including:

• Contract performance: creating accounts, authenticating users, generating content, storing projects, providing downloads, billing subscriptions, and operating the community features you choose to use (publishing, profiles, comments, likes, follows and reports).
• Consent: optional analytics/marketing cookies and other opt-in workflows where consent is requested.
• Legitimate interests: service security, abuse prevention, debugging, reliability, fraud prevention, and product improvement that does not override your rights. This also covers our first-party measurement of page views and product usage, which stores nothing on your device. While you are signed out, it identifies your visit only by a code our server derives from your IP address, browser type and the date. The code changes every day, and we do not store your IP address with it. While you are signed in, these events are recorded against your account. This measurement is skipped when your browser sends Global Privacy Control or Do Not Track, account holders can switch it off in Settings > Privacy, and you can object to it at any time by emailing dpo@prismposter.com.
• Legal obligations: tax, accounting, sanctions, security, consumer protection, copyright, and regulatory compliance.

Emails we send. We send the service emails you need (sign-in, verification, receipts, and account and security notices) to perform our contract with you. We also send emails about getting started with PrismPoster, tips, reminders about an unfinished checkout, and occasional offers, some of them personalised to your account by automated means, such as a one-time discount; we send these on the basis of our legitimate interest (GDPR Art. 6(1)(f)) until you switch them off in Settings or with the unsubscribe link in each one. Product-update newsletters and marketing campaigns are sent only if you opt in (GDPR Art. 6(1)(a)). Some of these non-essential emails contain links and a small image that tell us whether the email was opened or a link was clicked, which we use to measure how our emails perform.

3.1 Eligibility for free and promotional offers

Free plans, trial credits, and complimentary generations are discretionary offers rather than part of a paid contract, and they are not available in every country or region. To decide whether an account receives one, we use the country associated with your request — derived from your IP address by our content-delivery network, or, where that is unavailable, from the registration country of the network your request came through — together with the anti-abuse checks described in section 2. Our lawful basis is our legitimate interest in setting the terms on which we make a free promotion available, and in preventing the same person from claiming it repeatedly.

This decision affects only whether a free promotional credit is granted. It is not a decision producing legal or similarly significant effects, and Article 22 of the GDPR does not apply: your account is created and fully usable either way, every paid plan and credit pack remains available on identical terms, and nothing you purchase is affected. Where an offer is unavailable to you, we tell you so in the product. The contractual terms are set out in section 3.5 of our Terms of Service. If you believe an eligibility decision about your account is wrong, contact us using the details in section 12 and a person will review it.

3.2 Verified likeness (biometric data)

You can choose to set up a verified likeness so that you can generate videos that show your real appearance, on either of our video engines. Our premium engine renders people so convincingly that it only accepts a real person who has verified that they are that person, and the verified likeness is how you do so. You must be 18 or older to set one up. It is optional: nothing else in PrismPoster depends on it.

• What we process: a live face check you complete on your own device, the portrait photos you add, and your legal name, which our verification provider's rules require us to hold. We take the name from the cardholder name on your saved payment method where there is one, and otherwise from the name you enter; it stays with us and is not sent to the provider. The face check and the photos are biometric data, a special category of personal data.
• Why, and on what basis: to confirm that the photos show you, so that only your account can generate videos with your likeness. We process this data only with your explicit consent under Article 9(2)(a) of the GDPR, given in the product before the face check starts.
• Who processes it, and where: our verification provider stores the face check and your photos in Singapore, outside the European Economic Area. Singapore has no EU adequacy decision; the transfer is made under the EU Standard Contractual Clauses in our data processing agreement with the provider, and you also consent to it explicitly. The provider processes the data only on our instructions and does not use it to train AI models. We keep a copy of your photos in our own storage. When you generate a video of yourself, your likeness is used only for that render: on the premium engine from the copy the verification provider already holds, and on the standard engine through short-lived links to our copy, sent to that engine's provider, which may process the photos (never the face check) outside the European Economic Area, including in the United States, under the safeguards in its data processing terms. Both providers, and where they process data, are named on our Sub-Processors page.
• How long: for as long as your likeness is active. When you delete it, in Settings > Privacy or by deleting your account, the face check and the photos are erased at the provider and in our storage. We keep a record of your consent (its version, date and language) for 180 days after you delete your likeness, to demonstrate that it was given. Videos you have already made stay in your library until you delete them.
• Withdrawing: you can withdraw your consent at any time by deleting your likeness. Withdrawal does not affect the lawfulness of processing before it. The rights in section 6 apply as well.

4. Cookies, analytics, and privacy signals

Essential cookies and storage keep authentication, security, consent records, and core product workflows working. Optional analytics, functional, and marketing categories load only according to your cookie choices. See the Cookie Policy.

PrismPoster honors browser Do Not Track and Global Privacy Control by keeping optional analytics and marketing disabled. You can also manage choices at Privacy Choices or, when signed in, at Settings > Privacy.

If you give Marketing consent, we use Google Ads conversion measurement to learn which of our ads bring visitors. Our legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time in Cookie Settings. Google receives your IP address, browser information, the page you visited and any ad-click identifier, and uses this data as an independent controller under its own privacy policy (see how Google uses information from sites that use its services). Google may process it in the United States, where Google LLC is certified under the EU-U.S. Data Privacy Framework. We do not use it for remarketing or personalised ads. Without that consent, or when your browser sends Global Privacy Control or Do Not Track, the Google Ads tag does not load.

5. Sub-processors and third parties

We use vetted service providers for hosting, database storage, payments, transactional and support email, browser analytics after consent, advertising conversion measurement after Marketing consent, operational and security telemetry (error and performance monitoring on a legitimate-interest basis), bot protection at sign-up, AI/media generation, content moderation, identity verification for the verified likeness, media rendering, font delivery, and file storage. For checkout purchases, Stripe acts as merchant of record and processes the related billing data as an independent controller under its own privacy policy. The current list is maintained on our Sub-Processors page.

5.1 No model training on your content

We do not use your prompts, uploads, reference media, or generated outputs to train, fine-tune, or improve any machine-learning model, and there is no setting that turns this on. Your content is sent to a generation provider only to produce the output you asked for, and the result is stored only for you. The providers that generate images and video for us are contractually prohibited from training their models on our customers' data. Our music generation provider is licensed only to operate its service for us and deletes generated files 14 days after generation. All of them are listed on our Sub-Processors page. Business customers will find the same commitment, with the full processor terms, in our Data Processing Agreement.

We do not sell personal information for money. If optional analytics, advertising, or cross-context disclosures are considered a sale or sharing under applicable US privacy law, you can opt out through Privacy Choices, Global Privacy Control, or Settings > Privacy.

6. Your privacy rights

Depending on your location, you may have rights to:

• Access personal data and receive information about how it is used.
• Receive portable data in a structured, machine-readable format.
• Correct inaccurate or incomplete personal data.
• Delete personal data, subject to legal, security, fraud-prevention, and billing exceptions.
• Restrict or object to certain processing.
• Object at any time, free of charge, to direct marketing, including the personalised offers described in section 3, by using the unsubscribe link in any such email or Settings > Preferences.
• Withdraw consent for optional processing.
• Object to solely automated decisions with legal or similarly significant effects.
• Opt out of sale/sharing and limit sensitive personal information under CCPA/CPRA.
• Exercise rights without unlawful discrimination.
• Lodge a complaint with a data protection supervisory authority (EEA/UK residents).

Signed-in users can exercise these rights in Settings > Privacy. You can also email dpo@prismposter.com. We respond without undue delay and within one month of receiving your request. For complex or numerous requests we may extend this by up to two further months; if we do, we will tell you within the first month and explain why. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — www.aki.ee. If you are in the UK, you can also complain to the Information Commissioner’s Office (ico.org.uk).

7. Retention and deletion

• Active accounts: account, project, media, and workspace data are retained while needed to provide the service.
• Deleted content and accounts: when you delete content or your account, it is removed from our live systems as part of the deletion workflow. We keep backup copies of media in a separate, access-restricted location only to recover from data loss; they are never used for anything else and are not restored after you delete the data. A backup copy of deleted media is erased automatically once the original has been gone for 30 days, and database backups are kept for 30 days, so deleted data normally leaves our backups within about a month. You can ask us to erase the backup copies of your content sooner at privacy@prismposter.com. Verification photos for a likeness are never included in backup copies.
• Abuse-prevention markers: so that free starter credits, the free music allowance and the free preview clip cannot be claimed repeatedly, we keep keyed hashes of the sign-up email address, the IP address and network a request came from, and the browser and device identifiers described in our Cookie Policy. We cannot read the original values back from these hashes; we can only check whether the same value appears again. Because we hold the key, they are still personal data. They are kept after an account is deleted, because a record erased with the account could not stop the same person from claiming again. Each stops being used 24 months after it was last seen, and they are used for no other purpose.
• Legal records: billing, tax, fraud-prevention, security, audit, consent, and dispute records may be retained as required or permitted by law, typically up to 7 years for financial records.
• Aggregated data: anonymized or aggregated metrics that no longer identify an individual may be retained for product, security, and business analysis.

8. International transfers

PrismPoster and its providers may process data in the European Economic Area, United Kingdom, United States, and other countries where our providers operate. Where required, we use safeguards such as data processing agreements, Standard Contractual Clauses, transfer impact assessments, and provider security commitments. You can ask for a copy of the safeguards that apply to a transfer by writing to dpo@prismposter.com.

9. Security

We use technical and organizational measures including TLS, encrypted provider storage, password hashing, scoped OAuth access, rate limiting, origin checks, audit logging, and access controls. No system is perfectly secure, but we work to prevent, detect, and respond to unauthorized access. See our Security page for more detail.

10. Children

PrismPoster is not directed to children. You may not use the service if you are under 13, or under 16 where EEA/UK law requires a higher age for consent to online services. If we learn that we collected personal data from a child without appropriate consent, we will delete it. You must be 18 or older to set up a verified likeness.

11. Changes

We may update this policy as PrismPoster, our providers, or applicable law changes. Material changes will be posted on this page and, where appropriate, communicated in the product or by email.