Privacy
Policy

Introduction

At PrismOnboard, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our client onboarding platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Personal Information

We collect information that you provide directly to us when you:

• Create an account (name, email address, company name)
• Set up your agency profile (business information, branding assets)
• Create client records (client names, contact information, project details)
• Upload documents and files to the platform
• Communicate with us through support channels
• Subscribe to our newsletter or marketing communications

Automatically Collected Information

When you access our platform, we automatically collect certain information, including:

• Log data (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on platform)
• Device information (device type, unique device identifiers)
• Cookies and similar tracking technologies

Client Data

As a platform that enables you to manage client onboarding, we process data that you input about your clients. You are the data controller for this information, and we act as a data processor. You are responsible for ensuring you have appropriate consent and legal basis to process your clients' data.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Send you marketing communications (with your consent)
• Comply with legal obligations and enforce our terms

How We Share Your Information

We may share your information in the following circumstances:

Service Providers

We work with third-party service providers who perform services on our behalf, such as hosting, data analytics, payment processing, email delivery, and customer support. These providers have access to your information only to perform these tasks and are obligated to protect your information.

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies).

With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection and security practices
• Monitoring systems to detect and prevent unauthorized access

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal purposes.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You can access and download your information from your account settings at any time.

Correction

You can update or correct your information through your account settings or by contacting us.

Deletion

You can request deletion of your account and associated data by contacting us at privacy@prismboard.com.

Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or adjusting your account preferences.

Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our platform.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@prismboard.com.

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to delete personal information
• Right to non-discrimination for exercising your rights

Note: We do not sell your personal information to third parties.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: