Privacy Policy and User Agreement

Introduction

Welcome to Prisma. This Privacy Policy and User Agreement explains how we collect, use, store, and protect your personal information when you use the Prisma platform.

Prisma is an AI-powered role-play simulation platform for educators, researchers, and students. We are committed to protecting your privacy and complying with applicable laws, including Israel's Privacy Protection Law (PPL) and Amendment 13, and aligning with GDPR principles.

By using Prisma, you agree to the terms of this Agreement. If you do not agree, please discontinue use of the service.

Who We Are

Prisma is operated by Ikigai. For privacy law purposes, Prisma is the database owner (data controller).

Contact: nadav.prisma@gmail.com

Personal Data We Collect

• Account data – Username and email address, collected during registration and used for authentication and service communications.
• Simulation inputs and outputs – Text and AI-generated responses produced during simulations, role-plays, and analyses.
• Usage data – Credit consumption, session activity, and feature usage, used for billing and service improvement.
• Payment data – Billing identifiers and transaction records. Full payment credentials are handled by certified payment processors; Prisma does not store them.

Voluntary: Providing account data is required to use the service. Simulation content is voluntary and based on your active use. Prisma does not intentionally collect sensitive personal data such as health records, biometric identifiers, or precise location.

How We Use Your Data

• Provide simulation services – To run AI-powered simulations, process inputs, and generate feedback and analyses.
• Account functionality – To authenticate users, track credits, and maintain your subscription and simulation history.
• Credit and billing management – To apply monthly plan credits, track top-up purchases, manage reserve overuse, and process payments.
• Service improvement – We may analyze usage data in aggregate or anonymized form to improve simulations, AI quality, and platform performance.
• Operational communications – Service notices, billing alerts, credit warnings, and important platform updates.
• Legal compliance and platform integrity – To comply with legal obligations and protect Prisma against misuse.

Credits, Reserves, and Overuse

Prisma uses a credit system to account for AI usage costs. Credits are consumed during simulations based on AI model usage.

• Plan credits – Included monthly with your subscription. Refreshed (not accumulated) each billing cycle.
• Top-up credits – Credits you purchase separately. These accumulate and are preserved across monthly resets.
• Reserve (overdraft) – If a simulation is in progress and your credits run out, it will not be interrupted. The overage is charged against a reserve. The overuse amount is deducted from your next plan credit allocation.

You will be notified on your home dashboard if you have an active overuse balance. You can add top-up credits at any time to avoid a reduced reset at the next billing cycle.

Data Storage and International Transfers

Personal data is stored and processed on secure cloud infrastructure, including AWS (United States). This may involve transferring data outside Israel.

Prisma implements safeguards required by Israeli law, including contractual protections and security controls, to ensure adequate protection for international transfers.

Data Sharing with Third Parties

Prisma does not sell personal data. Data may be shared only with trusted processors strictly as required to operate the service:

• AI processing providers – Simulation content may be processed by external AI services — OpenAI, Anthropic, Google, and xAI — solely to generate simulation responses on Prisma's behalf. These providers may not use your data for their own purposes.
• Infrastructure providers – Cloud hosting, email delivery, and monitoring services.
• Payment processors – For paid plans and top-ups, payment details are handled by certified processors (Sumit). Prisma does not store full payment credentials.

Minors

Prisma may be used by students who are minors in educational settings. If you are under 18, your institution or a parent or legal guardian must review this Agreement and confirm appropriate consent.

Prisma does not knowingly collect personal data from children under 13 without institutional or parental consent.

Participants Without an Account

Participants join a simulation session using a participant code, without creating a Prisma account. No personal data is collected from participants beyond that code, unless the teacher or researcher running the simulation explicitly collects it within the scenario itself.

Your Rights and Choices

• Access – Request a copy of your personal data.
• Correction – Request correction of inaccurate data.
• Deletion – Delete your account and associated data via your profile page.
• Withdraw consent – Where processing relies on consent, you may withdraw it by contacting us.

Requests can be made via your account settings or by contacting nadav.prisma@gmail.com.

Data Retention

Data is retained only as long as necessary for service provision or legal obligations. Upon account deletion, data is removed or anonymized within a reasonable timeframe. Credit and billing records may be retained for legal and accounting purposes.

Security

• Encryption – Data encrypted in transit (TLS) and at rest. LLM API keys stored with additional encryption.
• Access controls – Restricted internal access; role-based permissions enforced throughout.
• Monitoring – Logging and security review procedures in place.

No system is completely secure, but Prisma follows industry best practices and Israeli Data Security Regulations.

Global Service

Prisma is operated under Israeli law and aligns with major global privacy principles, including GDPR concepts where applicable. Users outside Israel accept that their data may be processed subject to Israeli law.

Cookies

Prisma uses essential cookies only — to keep you logged in and to protect forms from cross-site attacks. Your theme and accessibility preferences are stored in your browser's local storage, never sent to our servers. You can review these at any time using the Cookie preferences link in the footer.

Changes to This Agreement

We may update this Agreement when we make material changes to our data practices. When we do, you will be asked to review and accept the updated version before continuing to use Prisma.

Contact Us

Email: nadav.prisma@gmail.com