Privacy Policy

1. Scope

This Privacy Policy applies to information collected through Prism's websites, applications, client portals, dashboards, communications, and related services.

It does not govern information handled by third parties under their own privacy policies.

Where Prism processes information on behalf of a business customer, that customer's instructions and applicable agreement with Prism may also govern the processing of that information.

2. Information We Collect

The information Prism collects depends on how you interact with us.

Information You Provide

We may collect information you provide directly, including:

• name;
• business email address;
• telephone number;
• company or organization;
• job title;
• account information;
• login and authentication information;
• billing and subscription information;
• communications with Prism;
• support requests;
• product feedback; and
• information submitted through forms or demonstrations.

Information Submitted Through the Services

Users may submit business information and content to Prism, including:

• property information;
• locations and addresses;
• search criteria;
• lease and financial assumptions;
• documents;
• photographs;
• comments and advisor commentary;
• client and contact information;
• messages; and
• other business records.

We refer to this generally as Client Data.

Information Collected Automatically

When you use Prism's websites or Services, we may automatically receive certain technical information, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring pages;
• pages or features accessed;
• dates and times of access;
• session and authentication events; and
• diagnostic, performance, and security information.

We may use cookies, local storage, and similar technologies where appropriate.

3. How We Use Information

Prism may use information to:

• provide and operate the Services;
• create and administer accounts;
• authenticate users;
• maintain appropriate organization and user access;
• perform requested analyses;
• display Client Data to authorized users;
• provide customer support;
• communicate about accounts, subscriptions, or Services;
• protect Prism, our users, and the Services from fraud, misuse, and security threats;
• troubleshoot and improve product performance;
• develop and improve Prism products and functionality;
• understand product usage;
• comply with legal obligations; and
• enforce our agreements and policies.

We may also use contact information to communicate about Prism products and services where permitted by law. You may opt out of marketing communications at any time.

4. Client Data and Business Customers

Prism is designed primarily as a business-to-business platform.

Organizations using Prism control which individuals are authorized to access their workspace and Client Data.

Where Prism processes personal information submitted by a Client on that Client's behalf, Prism generally acts as a service provider or processor to that Client, subject to the applicable agreement.

Clients are responsible for ensuring that they have appropriate rights and authority to provide information to Prism.

5. How We Share Information

Prism does not sell personal information to advertisers.

We may disclose information in the following circumstances.

Service Providers

We may use third-party service providers to support functions such as:

• hosting and cloud infrastructure;
• authentication;
• databases and storage;
• payments;
• email;
• customer support;
• mapping and geographic services;
• analytics;
• security; and
• other business operations.

These providers may process information only as necessary to provide their services to Prism and subject to applicable contractual obligations.

At Your Direction

We may disclose information when you direct us to do so, including through authorized integrations, exports, shared reports, client portals, or other collaboration functionality.

Within an Authorized Organization

Information may be available to users authorized to access the same Prism organization, client account, workgroup, Search, or other permitted workspace.

Access is determined by Prism's authorization systems and customer configuration.

Legal and Safety Requirements

We may disclose information if reasonably necessary to:

• comply with law, regulation, subpoena, court order, or legal process;
• enforce our agreements;
• protect the rights, safety, or property of Prism, our users, or others;
• investigate fraud or security incidents; or
• prevent unlawful activity.

Corporate Transactions

Information may be transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate protections.

6. Aggregated and De-Identified Information

Prism may create aggregated or de-identified information that does not reasonably identify an individual or specific Client.

We may use this information for:

• product development;
• benchmarking;
• analytics;
• research;
• service improvement; and
• other legitimate business purposes.

7. Cookies and Similar Technologies

Prism may use cookies and similar technologies to:

• keep users signed in;
• maintain secure sessions;
• remember preferences;
• understand Website or Service usage;
• diagnose technical issues; and
• improve performance.

Some cookies are necessary for the Services to function.

Where legally required, Prism will provide appropriate choices regarding non-essential cookies.

8. Third-Party Services

The Services may contain links to, integrate with, or receive information from third-party websites and services.

Those third parties operate under their own terms and privacy policies.

Prism is not responsible for the privacy practices of third parties.

9. Data Retention

Prism retains information for as long as reasonably necessary to:

• provide the Services;
• maintain customer accounts;
• fulfill contractual obligations;
• maintain security;
• resolve disputes;
• preserve legitimate business records; and
• comply with legal obligations.

Retention periods may vary depending on the type of information and the applicable customer relationship.

Information may be retained longer where required by law or necessary for legitimate legal, security, audit, or fraud-prevention purposes.

10. Data Security

Prism uses reasonable administrative, technical, and organizational safeguards designed to protect personal information and Client Data.

However, no system for storing or transmitting information is completely secure, and Prism cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their own account credentials and for promptly notifying Prism of suspected unauthorized access.

11. Your Privacy Rights

Depending on where you live, applicable law may give you rights concerning your personal information, including rights to:

• request access;
• request correction;
• request deletion;
• obtain information about how your data is used;
• object to or restrict certain processing; or
• exercise other applicable privacy rights.

These rights may be subject to legal exceptions.

To submit a privacy request, contact Prism using the information below.

We may need to verify your identity before fulfilling a request.

Where Prism processes information solely on behalf of a business customer, we may direct your request to that customer.

12. Marketing Communications

You may opt out of promotional emails by using the unsubscribe mechanism provided in the communication or by contacting Prism.

You may continue to receive necessary administrative, account, security, or transactional communications.

13. Children's Privacy

The Services are intended for business and professional users and are not directed to children under 13.

Prism does not knowingly collect personal information directly from children under 13 through the Services.

If we learn that such information has been collected inappropriately, we will take reasonable steps to delete it.

14. International Use

Prism may process or store information in the United States or other countries in which Prism or its service providers operate.

Where required, Prism will use appropriate mechanisms for transfers of personal information across jurisdictions.

15. Changes to This Privacy Policy

Prism may update this Privacy Policy from time to time.

When we make changes, we will update the effective date above.

If changes are material, we may provide additional notice through the Website, Services, or other appropriate means.

16. Contact Us

Questions, concerns, or privacy requests may be directed to: