Privacy Policy

Effective date: April 6, 2025 · Last updated: April 6, 2025

1. Who we are

Prism ("we", "us", "our") is a Chrome browser extension that provides an AI-powered natural language interface for cryptocurrency transactions. Our website is prismtx.app. You can contact us at support@prismtx.app.

2. What data we collect

Prism is designed to be privacy-first. Here is exactly what is and is not collected:

Data stored locally on your device only:

• Your Groq API key (encrypted with AES-256-GCM, never transmitted to us)
• Your contact vault (encrypted with AES-256-GCM using your PIN, never transmitted to us)
• Your transaction history (stored locally in Chrome extension storage)
• Your wallet addresses (read from MetaMask/Phantom, never stored by us)

Data sent to third-party services on your behalf:

• Your natural language intent text is sent to Groq for AI parsing (using your own API key or our managed key)
• Audio recordings are sent to Groq Whisper for transcription when you use voice input
• Swap quotes are fetched from 1inch DEX aggregator
• Portfolio balances are fetched from public blockchain RPC endpoints

Data we never collect:

• Your private keys or seed phrases
• Your wallet balances or transaction history
• Your browsing history
• Any personally identifiable information beyond what you voluntarily provide

3. Managed plan (paid subscribers)

If you subscribe to Prism Managed ($5/month), we collect and store the following on our servers:

• Your license key (issued by Lemon Squeezy upon purchase)
• A randomly generated device ID unique to your browser install
• A count of your monthly API requests (to enforce plan limits)
• The timestamp of your last activity

We do not store your name, email address, or payment information — those are handled entirely by Lemon Squeezy.

4. How we use your data

• To provide and improve the Prism service
• To enforce subscription plan limits (managed plan only)
• To respond to support requests you initiate

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

5. Data sharing and third parties

We do not sell, rent, or share your personal data with any third parties for their own purposes. The only third-party services that receive data are:

• Groq — AI inference and audio transcription (Groq Privacy Policy)
• Lemon Squeezy — payment processing and license management (Lemon Squeezy Privacy Policy)
• 1inch — DEX swap quote aggregation (1inch Privacy Policy)

6. Data security

All sensitive data stored locally (API keys, contacts) is encrypted using AES-256-GCM with a per-install device key. This means even if someone gained access to your Chrome profile data on disk, they could not read your stored keys or contacts without the encryption key.

Our API server uses HTTPS/TLS for all communications. JWTs issued for managed plan authentication expire every 30 days.

7. Data retention

• Local data — retained until you uninstall the extension or clear Chrome extension storage
• Managed plan server data — retained for the duration of your subscription plus 30 days after cancellation, then permanently deleted

8. Your rights

You have the right to:

• Access the data we hold about you
• Request deletion of your data
• Cancel your managed subscription at any time
• Export your local data at any time through Chrome extension storage

To exercise any of these rights, email us at support@prismtx.app.

9. Children's privacy

Prism is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of Prism after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us at support@prismtx.app.