Privacy Policy

This Privacy Policy applies to prismtechnologies.co, the public marketing pages, the contact form, and public demonstration surfaces linked from the Demo Center.

It does not automatically govern a future customer, research, or enterprise deployment. Those implementations may operate under separate privacy notices, research protocols, informed consent, data-use agreements, business associate agreements where applicable, customer contracts, data-governance policies, retention schedules, security requirements, and regulatory requirements. Where those documents apply, they control for that deployment.

The public website is not designed to collect PHI. Do not treat a contact submission or demo account as a medical, research, or government record.

Contact form. If you use Contact or the presentation contact form, we collect the information you type: name (optional), email address, interest category, and message. We store that submission in our application database and send a notification email to PRISM. We also read your IP address from request headers to apply a short-term rate limit. That IP is used for abuse prevention in memory and is not stored as a field on the contact record.

Technical and hosting information. Like most websites, our hosting provider may log IP address, browser and device information, requested URLs, timestamps, and similar request metadata needed to operate and secure the site.

Analytics. Vercel Analytics is enabled on this site and may record page views and related usage information. See Analytics below.

Theme preference.The site may store a display-theme preference in your browser's local storage. That value stays on your device.

We do not ask the public marketing pages for medical records, Social Security numbers, or DoD identifiers. If someone types that kind of information into a free-text field anyway, it may still be stored as part of the message. Please do not do that.

We use the information above to:

• Respond to business inquiries
• Operate, secure, and debug the public site and prototype
• Limit automated or abusive contact submissions
• Understand which public pages are visited

We do not sell contact-form submissions.

Depending on how you use the site, information may be processed by:

• Vercel — website hosting and Web Analytics
• Turso (libSQL) — application database for contact submissions and demonstration data
• MailerSend — email delivery for contact notifications (and Resend if that provider is configured instead)
• Mapbox — map tiles and location display if you open demonstration map views
• AI model providers — if you use a demonstration feature that calls an external model, the text you submit to that feature may be sent to the configured provider (for example a commercial API). PRISM does not own a foundation model.

We may also disclose information if required by law or to protect the site and its users.

Browsing the public marketing pages does not require an account cookie. If you sign in to a demonstration environment, we set an HTTP-only session cookie (prism_session) so the prototype can keep you signed in. That cookie is used for authentication, not advertising.

Some demonstration and presentation screens also use browser local storage or session storage for UI state (for example theme or whether an intro was dismissed).

Vercel Analytics, as used here, is a first-party script for page-view measurement. We do not run a separate advertising cookie banner because we do not operate an ad network on this site. Hosting and analytics providers may still process technical data as described above.

Vercel Web Analytics is included in the site layout and is therefore active on public pages. It is used to understand traffic to the website. We do not currently run a separate product-analytics suite (such as a marketing pixel or session replay tool) on the public site.

The Dragon's Lair / Army platform demonstration is a prototype. If you create or use a demo account, we may store account credentials (email and a hashed password), profile fields you enter, and workflow records created in that environment.

The current signup flow can accept fields such as name, email, phone, unit assignment, and other profile details, including identifiers that look like government IDs. Intake and related demo screens can accept free-text descriptions of injuries, illness, or training activity. Those paths are for synthetic or illustrative use. They are not an authorized system for real PHI, CUI, or government records.

Demonstration data may be reset, overwritten, or viewed by people operating the prototype. Do not enter real personal, medical, or government information.

Do not submit medical records, PHI, CUI, classified information, Social Security numbers, DoD identifiers, or other sensitive or regulated information through this website or public demonstration environments.

The public website does not collect PHI as a designed data category. If you need to discuss a regulated deployment, use the contact form for a business inquiry only — not for records.

A future research study or enterprise system would not automatically inherit this marketing-site policy. Those projects should publish their own notices and operate under the agreements listed in Scope.

We use ordinary safeguards appropriate to a public prototype: HTTPS for site traffic, hashed passwords for demo accounts, an HTTP-only session cookie, input checks on the contact form, and a basic rate limit on contact submissions. Those measures reduce common risks. They are not a guarantee that information cannot be accessed, lost, or misused, and they are not presented as compliance with a named government or healthcare standard.

This site is not an accredited government environment and is not authorized to process PHI or CUI.

The current public site and prototype run on third-party commercial cloud infrastructure and a hosted database. That is not the same as a production AWS, AWS GovCloud, or government-authorized deployment.

PRISM Technologies intends to support production deployments using secure cloud infrastructure such as AWS, configured according to the requirements of the applicable customer or project. The current prototype and public demonstrations should not be interpreted as representing a production AWS, AWS GovCloud, or government-authorized deployment. Architecture remains portable; AWS is an intended option, not the only one.

Contact submissions are kept so we can respond to inquiries and maintain a record of those messages. We do not publish a fixed deletion schedule on this page. If you want a contact submission removed, email contact@prismtechnologies.co.

Hosting logs and analytics follow the retention practices of those providers. Demo records may be retained, reset, or deleted as the prototype is operated.

You can decline to use the contact form or demo accounts. You can stop using the site. You can ask us about a contact submission you sent by emailing contact@prismtechnologies.co.

Browser controls can clear cookies and local storage. Clearing the session cookie signs you out of a demonstration account.

Privacy questions: contact@prismtechnologies.co or the contact form.

Legal name: PRISM Technologies LLC. A business mailing address has not been published on this website. A governing state or jurisdiction has not been designated on this public website.

See also the Terms of Service.