PrismBETA

Privacy Policy

Last updated: 18 August 2026

This explains what PRISM collects, why, and who it goes to. It is written to be read, not to be survived.

The short version

  • Every prompt you send and every model response you get back is stored in full.
  • Your prompts are sent to third-party model providers to be answered.
  • We do not sell your data.
  • Sign-in is a wallet address. We do not ask for your name.

1. What we collect

Prompts and responses. Everything you submit, and everything the models return, is stored in full and retained. This includes any personal information you happen to put in a prompt.

Wallet address. Your public wallet address, and its $PRISM balance, read from a public blockchain to determine your access tier. We do not have and do not want your private keys or seed phrase.

Email address, only if you gave one for early access.

Usage data. Timestamps, token counts, which models answered, latency, errors, and cost per request.

Technical data. IP address, browser and device type, and similar, collected in the normal course of serving a website and used for security and abuse prevention.

We do not use advertising trackers or third-party analytics that build profiles across other sites.

2. Why we store prompts and responses

Three reasons, stated plainly:

  1. To operate the service and show you your own history.
  2. To detect abuse and enforce limits.
  3. To improve PRISM. The stored prompts and responses are used to analyse how the models perform against each other and to improve how PRISM selects, weights and presents their output.

If you would rather your prompts were not retained for the third purpose, do not submit anything you would mind being stored.

3. Who your data goes to

Model providers. Your prompt is transmitted to the third-party inference platform we route through, and onward to the individual model providers, in order to be answered. Their handling of that data is governed by their own privacy policies and is outside our control.

Infrastructure providers. Hosting, database and delivery providers process data on our behalf under contract.

Blockchain. Wallet balances are read from public chain data. We publish nothing to the chain about you.

Legal. We may disclose data where legally required, or where necessary to investigate abuse or protect someone's safety.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

4. Do not put sensitive things in prompts

Because prompts are stored and transmitted to third parties, do not submit:

  • other people's personal data without a lawful basis
  • health, biometric, financial-account or government-ID information
  • credentials, API keys or private keys
  • anything covered by confidentiality obligations you owe someone else

5. Retention

Prompts, responses and usage logs are retained indefinitely unless you ask for deletion. Early-access emails are kept until you unsubscribe or ask for deletion. Security and abuse logs are kept for a limited period and then discarded.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your data, and to object to it. To exercise any of these, contact us at the address below.

Two honest limits:

  • We cannot recall data already sent to a model provider. Once a prompt has been transmitted to answer it, deletion on our side does not reach into their systems.
  • A wallet address is pseudonymous, not anonymous. Connecting a wallet never involves a signature. But if you make a request about data tied to a wallet, we may not be able to confirm the wallet is yours unless you sign a message from it. That is the only situation in which we would ever ask, and it is your choice whether to.

7. Security

We use standard measures to protect stored data, including encryption in transit. No system is perfectly secure, and we do not claim otherwise.

8. Children

PRISM is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the data.

9. International transfers

Our providers operate in multiple countries, so your data may be processed outside the country you are in, including in jurisdictions with different data protection laws.

10. Changes

We will post updates here with a new date at the top. Material changes will be called out rather than slipped in.