Privacy Policy
Effective October 28, 2026
This policy explains what personal information Prismind (“we”) collects when you visit our website, join the waitlist or use the Prismind workspace, how we use and share it, and the choices you have. Questions or requests go to info@prismind.ai.
What we collect
- Account details. When you sign in with Google, we receive your email address and a Google account identifier. Google handles your password.
- Waitlist answers. Your email address, the role and kinds of creative work you choose, your answers to the follow-up questions, and any brief or files you attach.
- Your projects. Messages you send, your voice while voice mode is on, files and images you upload or paste, the images and designs you create, and each project’s history.
- Purchases. The credit pack you buy, its price and a transaction identifier. Stripe collects your payment details; we never see your card number.
- Usage and device information. Our hosting provider records requests to the site, such as IP address and browser. Vercel Web Analytics counts page views and waitlist progress without cookies. While optional analytics are on, Google Analytics measures visits and actions, PostHog records interface actions and session replay, and OpenAI measures whether a visit from a ChatGPT ad leads to a sign-up or purchase.
How we use it
- To provide the workspace: signing you in, saving your projects, and generating responses, images and designs you ask for.
- To manage early access: running the waitlist, sending invitations and telling you when you can join.
- To process purchases and keep track of your credit balance.
- To keep the service secure, prevent abuse and fix problems.
- To understand how people find and use the site and where they encounter confusing steps, using cookieless analytics and, while optional analytics are on, Google Analytics and PostHog usage analytics and session replay.
- To measure whether our ChatGPT ads lead to sign-ups and purchases, while optional analytics are on.
- To send emails about your account, the waitlist or the service. We don’t send marketing email without asking.
We don’t sell your personal information or use it to target ads.
AI processing
Prismind is built on AI services. When you send a message, upload a file or ask for an image, that content goes to the AI providers listed below so they can produce a response, and research steps may send search queries based on your request to search providers. Each provider processes this content to deliver the result to us.
Cookies and browser storage
We use only what the site needs, plus optional analytics: Google Analytics, PostHog usage analytics and session replay, and OpenAI ad measurement. In the European Economic Area, the United Kingdom and Switzerland, or when your browser sends a Global Privacy Control signal, they run only after you accept them. Elsewhere they are on by default. You can change your choice at any time from Cookie settings in the website footer or the workspace account menu. Turning them off stops optional analytics and replay and clears their analytics identifiers. Beta-code activity has no named analytics identity, though information entered or displayed can appear in a replay.
| Name | Type | Purpose | When |
|---|---|---|---|
| prismind_session | Cookie | Keeps you signed in | Essential; expires after 5 days |
| prismind_beta_session | Cookie | Keeps earlier invitation sign-ins working | Essential; expires after 5 days |
| _ga, _ga_KXWR4E0Q08 | Cookies | Google Analytics visitor and session identifiers | While optional analytics are on; up to 2 years |
| __oppref, __obref | Cookies | OpenAI ad click and browser identifiers that show whether a visit from a ChatGPT ad led to a sign-up or purchase | While optional analytics are on; 30 days and 1 year |
| __oaiq_consent, oaiq_consent | Cookie and local storage | Remembers your choice for OpenAI ad measurement | While optional analytics are on; the cookie lasts 30 days |
| prismind-analytics-consent-v3 | Local storage | Remembers your analytics and replay choice | Essential |
| prismind-campaign-attribution | Session storage | Keeps campaign tags, the ChatGPT ad click identifier and referring website domain through navigation and reloads | While optional analytics are on; until the tab closes or you turn analytics off |
| PostHog ph_* identifiers and opt-out preference | Local and session storage | Connects analytics actions and session recordings; remembers when tracking is turned off | Identifiers only while optional analytics are on; removed when you turn them off |
| Theme, project list and interface preferences | Local storage | Remembers your light or dark theme, your projects on this device, panel choices and voice microphone | Essential for the app to work as you left it |
| Unsaved edits | Session storage | Keeps in-progress edits until you close the tab | Essential |
Who we share it with
We share personal information only with the service providers that run Prismind for us, and only what each one needs. We may also disclose information when the law requires it, to protect our rights or users’ safety, or as part of a merger or sale of the business.
| Provider | Purpose | Information |
|---|---|---|
| Vercel | Hosting and cookieless Web Analytics | Requests to the site, including IP address, browser and pages viewed; aggregated page views, attachment events, waitlist progress, first-project-message events, design action requests and download requests |
| Turso | Database | Account, waitlist, project, credit and purchase records |
| Google Cloud | File storage and visual-reference search | Files you upload, images and designs you create, waitlist attachments, and search text used to find visual references |
| Google Firebase | Google sign-in | Your Google account email address and account identifier |
| Google Analytics | Understanding how the site is used, while optional analytics are on | Pages viewed, interactions such as sign-ups and purchases, device and approximate location, and a cookie identifier |
| PostHog | Usage analytics and session replay, while optional analytics are on | Page paths, campaign tags, ChatGPT ad click identifier, referring website domain, device information, interface actions, scroll depth, page duration and recordings of visible content, including conversations, typed text, account details and displayed images. Payment and credit areas, passwords and invitation codes are hidden; console logs and network payloads are not recorded. Landing-page heatmaps collect click and pointer positions. Signed-in Google activity is linked by account ID. |
| OpenAI (ChatGPT ads) | Measuring which ChatGPT ads lead to sign-ups and purchases, while optional analytics are on | An ad click identifier, a browser identifier, the site address, and whether you joined the waitlist, created an account, started checkout or bought credits, with the purchase amount |
| Google Fonts | Fonts in the design editor | Your IP address and the fonts requested |
| OpenAI | AI responses, file and image understanding, and voice mode | Your messages, files and images, and your voice while voice mode is on |
| Fal | Image generation and editing | Image instructions and the reference images used for them |
| You.com | Web search and reading public web pages | Search queries based on your requests and web addresses you share |
| Resend | Email delivery | Your email address and the email's content |
| Stripe | Payments, as merchant of record | Your email address and payment details, which Stripe collects directly; we receive the purchase details |
| Mastra | Diagnostic traces, when enabled | Request and response data used to troubleshoot problems |
How long we keep it
We keep your account, projects and waitlist entry while you use Prismind or until you ask us to delete them. You can delete projects and chats in the workspace at any time. To delete your account or waitlist entry, email info@prismind.ai. We keep purchase and credit records for as long as tax, accounting and payment rules require.
Your rights and choices
You can ask us to access, correct, export or delete your personal information, or object to how we use it, by emailing info@prismind.ai. Depending on where you live, including the European Economic Area, the United Kingdom and some US states, you may have additional rights, such as restricting processing or complaining to your data protection authority. We won’t treat you differently for using these rights.
Where these laws apply, we rely on these legal bases: providing the service you asked for, your consent for Google Analytics, PostHog analytics and replay, and ad measurement, our legitimate interests in security and improving the product, and legal obligations such as tax records. You can withdraw consent at any time from Cookie settings.
International transfers
Our service providers may process information in the United States and other countries. When information leaves the European Economic Area or the United Kingdom, we rely on the safeguards those providers offer, such as standard contractual clauses.
Security
Information travels over encrypted connections, sign-in uses secure cookies, and access to stored data is limited to the systems and people who need it. No service is perfectly secure, so please tell us at info@prismind.ai if you notice a problem.
Children
Prismind is not meant for children under 16, and we don’t knowingly collect their personal information. If you believe a child has given us information, contact us and we’ll delete it.
Changes to this policy
When we change this policy, we’ll update the effective date above, and for significant changes we’ll let you know on the site or by email before they take effect.