Privacy policy
Last changed
Prism is owned and operated by Prism Media Intelligence LLP ("Prism", "we"), and built and run with Matryx Social Labs Private Limited (Matrix Social Labs) as its technology partner. This page says what we collect, why, where it goes, and how to have it removed. It is written to India's Digital Personal Data Protection Act, 2023, under which Prism Media Intelligence LLP is the data fiduciary.
What we collect
Reading without an account: nothing that identifies you. One cookie, prism.returning, tells the front page you have been here before so it can take you straight to the chart. Your browser keeps a few settings on your device (theme, the scope you last chose, the last story you opened) and sends them nowhere.
Asking a question without an account: the question and the answer are stored against a random session id that lives in your browser. To keep the free box open for everyone we count questions per session and per hashed IP address; the hash cannot be turned back into your address and the counter expires within a day.
An account: your email address, from the sign-in link you click or from Google if you sign in with Google. From Google we receive your email and the fact that Google has verified it, nothing else. At onboarding you may tell us your name, profession, state and reading languages, and we record the time you agreed to the Terms.
What you do with an account: the tickers and sectors on your watchlist; the questions you ask and their answers, linked to your account; and, once paid plans exist, your plan, its status and the amount. We never see or store card or UPI details, the payment provider holds those.
Technical records: our hosts keep ordinary server logs (IP address, browser, pages requested) for a short period to run and secure the service.
Why we collect it
- To sign you in and keep you signed in.
- To show you your state's news and your reading language.
- To answer your question and remember the thread.
- To apply fair-use limits on the question box.
- To bill you for a plan you chose and send its invoices.
- To send you the email you asked for: a sign-in link, and later a daily brief if you opt in.
We do not sell personal data and we do not use it for advertising. We do not build profiles of you for anyone else.
Who processes it for us
- Matryx Social Labs Private Limited (Matrix Social Labs) engineers and operates the service for us, and so has access to production systems on our instructions.
- Vercel hosts the website.
- Railway hosts the API and the database.
- Resend delivers our email.
- Google, only if you choose Sign in with Google.
- Razorpay processes payments, once paid plans are on sale.
- OpenRouter, and the model providers it routes to, receive the text of a question in order to answer it. Your email and name are not sent with it.
Some of these providers run servers outside India. Each is bound by its own contract to process data only on our instructions.
Cookies and device storage
One cookie, prism.returning, for routing a returning reader. On your device: your session token, your profile, your theme, your last scope and your last opened story. There are no advertising cookies and no cross-site tracking. If we add usage analytics we will use a tool that sets no cookies, and say so here.
How long we keep it
- A sign-in link works for 15 minutes and once.
- A session lasts 30 days unless you sign out.
- Account data stays until you delete the account.
- Anonymous questions stay against their random session id only.
- Billing records stay as long as tax law requires.
Your rights
You can ask what we hold about you, have it corrected, have it erased, or withdraw your consent, which closes the account. You can nominate someone to exercise these rights for you. Write to hello@readprism.news from the address on the account; we act within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.
Children
Prism is not for anyone under 18, and we do not knowingly hold data about a child. If you believe we do, write to us and we will remove it.
Security
Everything travels over HTTPS. Sign-in links and session tokens are stored only as hashes. Access to production data is limited to the people who run the service.
Changes
This page carries the date it last changed. If a change matters to you, we will say so at sign-in before it applies.
Contact
Prism Media Intelligence LLP · hello@readprism.news. The same address reaches our grievance officer. Matters about the engineering of the service reach Matryx Social Labs Private Limited (Matrix Social Labs) through us.