Privacy policy
Last updated 7 November 2026
Prisma is run by Spectras Enterprises Pty Ltd, of Melbourne, Australia (“we”). This policy explains what personal information we handle and why. We follow the Australian Privacy Principles in the Privacy Act 1988.
What we collect
- Your account: your email address, your company name and your role on the account.
- Billing: your plan, its status and Stripe's reference numbers for you. Stripe holds your card details. We never see or store them.
- Your brands: the names, websites, competitors, audiences and categories you enter, the questions we ask, and the answers, sources and scores that come back. AI answers are written by third parties and can name people.
- Site scans: public pages from the websites you ask us to scan.
- AI provider keys: if you add your own, they are encrypted when stored and never shown back to you in full.
- Technical records: our hosting providers log details such as IP addresses, browser types and pages requested, to keep the service running and secure.
How we use it
We use it to run Prisma, sign you in, bill you, support you, keep the service secure and tell you about changes to it. We don't sell personal information, and we don't use your data to train AI models.
Who handles it
These providers process data for us, so some of it is sent outside Australia:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Railway | Runs the Prisma application | United States |
| Vercel | Serves this website | Singapore, with a global network |
| Stripe | Takes payments and holds card details | Australia and the United States |
| Resend | Sends sign-in codes and service email | United States |
| OpenAI, Anthropic, Google and Perplexity | Answer the questions Prisma measures | United States |
| DataForSEO | Returns Google AI Overview results | United States and other countries |
| Firecrawl | Fetches pages a site blocks from ordinary requests | United States |
AI providers receive the questions and the brand details in them, not your account details. If you use your own key, your agreement with that provider also applies to those calls. We may also disclose information where the law requires it.
Cookies
We use cookies to keep you signed in and to remember display preferences, such as light or dark. We don't use analytics or advertising cookies.
How long we keep it
We keep your data while your account is open. That includes every raw AI answer, because re-measurement depends on the original evidence staying unchanged. If you close your account and ask us to delete your data, we will do so within 30 days. Backup copies remain until they expire, and we keep billing records for as long as the law requires.
Keeping it secure
Access to your data is limited, and provider keys are encrypted. No system is perfectly secure. If a breach is likely to cause serious harm, we will notify you and the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
Access, correction and deletion
You can ask to see, correct or delete the personal information we hold about you by emailing vamsi@spectras.com.au. We aim to reply within 30 days.
Complaints
Email us first and we will try to resolve it. If you aren't satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes
If we change this policy, we will update the date above and tell account owners about any significant change.