Privacy Policy

Prism is built for motion designers — not to collect data about them. This policy explains exactly what information we handle, why, and how. The short version: we do not track you, we do not sell your data, and we collect only what is strictly necessary to deliver the product to you.

The data controller is Prism (oneprism.io), reachable at support@oneprism.io.

What we do not do

• We do not use Google Analytics, Facebook Pixel, or any behavioural tracking tools.
• We do not use advertising or retargeting pixels of any kind.
• We do not store your After Effects projects, compositions, footage, or any creative work, and we never use your work for anything other than executing the request you made.
• We do not sell, rent, or share your personal data with third parties for commercial purposes.
• We do not build profiles on you or track you across other websites or services.

The Prism extension for After Effects keeps your work on your machine: your project files and compositions stay local. When your AI makes a request, the instructions for that request round-trip through Prism's servers and are not stored. Audio you submit for transcription is processed, then discarded. The extension contains no advertising or behavioural tracking of any kind.

What we collect and why

Email address and license record

When you purchase a subscription, the transaction is processed entirely by Polar.sh, our Merchant of Record. Polar collects and holds your billing details and card information — we never see or store them. We receive from Polar only your email address and a license record. We use these to deliver your download link and license key, manage your subscription, and provide support.

Legal basis: Contract performance — this data is necessary to fulfil the subscription you purchased.

License activation

When you activate the extension, it contacts our licensing server to verify your key. That request includes your license key and an anonymised machine identifier. We use this to confirm the license is valid and to detect abuse (such as a single license being activated across an unreasonable number of machines). We do not retain your IP address beyond the immediate verification and do not link it to your identity.

Legal basis: Legitimate interest — enforcing license terms and preventing abuse.

Tool requests and usage counts

When your AI client asks Prism to act in After Effects, the request passes through our servers so the tool can run. We process these requests transiently — they are not stored — and we count them against your plan's monthly allowance (for example, AI actions, JSON operations, and AI credits). The counts are numbers tied to your license; they do not include the content of your work.

Legal basis: Contract performance — running the tools you asked for and enforcing the plan limits you purchased.

Content submitted to generative AI tools

When you run a generative AI tool, the input you provide is sent to our servers to produce your result. Audio you submit for transcription, and the text prompts you write for sound, music, and image generation, are processed by Prism and our third-party AI infrastructure providers to generate the output you asked for. Beat detection runs on our own servers and is not sent to any third party. In every case the input is processed to produce your result, then discarded — it is not stored or used to train anything.

Legal basis: Contract performance — you explicitly requested the processing by running the tool.

Server logs

Our web server records standard access logs — IP address, browser type, and pages visited — for security monitoring and error diagnosis. Logs are rotated regularly and are never used for marketing or profiling.

Legal basis: Legitimate interest — maintaining site security and diagnosing technical issues.

Third-party services

Data is processed on our behalf by Polar.sh, which handles payments, subscriptions, and license delivery (see Polar's privacy policy), and by our third-party AI infrastructure providers, which process the audio or prompt you submit to return your transcription, sound, music, or image and do not retain it.

No other third parties receive your personal data. We do not use any advertising networks, data brokers, or analytics platforms.

Cookies

We do not set any tracking, analytics, or advertising cookies. The only cookies present on this site are functional ones set by Polar.sh during the checkout process, which are necessary for that flow to operate. These cookies are not used to track you beyond the checkout session.

Data retention

We retain your email address and license record for as long as your subscription is active and for a reasonable period afterward for accounting, legal compliance, and support purposes. You may request deletion at any time. We will remove all data that we are not legally required to retain and confirm deletion within 30 days.

Your rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; restrict or object to processing; receive your data in a portable format; and withdraw consent where processing is consent-based.

To exercise any of these rights, email support@oneprism.io. We will respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Children

Prism is not directed at anyone under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy at any time. The date at the top of this page reflects when it was last revised. We will notify active subscribers by email of any material changes before they take effect. Continued use of the product after changes are posted constitutes acceptance of the revised policy.

Contact

Privacy questions or data requests: support@oneprism.io. We read and respond to every message.