Last updated: June 17, 2026

Privacy Policy

Prism is operated by Prism Learning LC (“Prism,” “we”). Short version: we collect what we need to make Prism work, we don't sell your data, and we don't train AI models on your content. The label below summarizes the details. The sections after it explain everything in plain English.

1. What we collect

Account info. Email, full name, role (teacher or student), avatar color you pick, password (stored hashed by our authentication provider; we never see it).

Content you create. Lessons, classes, blocks, notes, discussion posts, files you upload. We host this so you and the people you share it with can access it.

Usage data. Pages viewed, blocks added, AI features used, time spent on lesson pages. Used to operate, debug, and improve the Service. Never sold.

Device + technical data. Browser, OS, IP address, error logs. Used for security and to keep the Service running.

What we don't collect.We don't collect your contacts, location, microphone, camera, or browsing history outside Prism.

2. Why we use it

• Run the Service and deliver content to you and people you share with
• Generate AI responses (definitions, examples, summaries, lesson drafts)
• Keep accounts secure and stop abuse
• Communicate with you about your account or important changes
• Improve the product: usage patterns inform what we build next

3. Who we share data with

We share data only with vendors that need it to operate the Service. Each vendor is bound by a written data-protection agreement.

We name vendors by category so this policy stays accurate when we swap providers. To request the current list of specific sub-processors, email privacy@onprism.org.

We don't sell your data. We don't share it with advertisers. We share with law enforcement only when required by valid legal process.

4. AI and your content

When you use an AI feature (Reading Tools, lesson generation, search), the relevant snippet of your content is sent to a third-party AI service provider to generate the response. We have a data-processing agreement that prohibits the provider from training their foundation models on your content. We don't train any model on your content either. See AI Disclosure for the full list of AI surfaces and what each one sees.

5. Students under 13 (COPPA + FERPA)

Prism is built for classrooms. When a teacher invites a student under 13, the teacher acts as the “school official” or designee under COPPA/FERPA and is responsible for any required parental consent. We collect from students only what's necessary to deliver the educational service (name, email, work product). We don't serve ads to students or use their data for marketing.

6. Your rights

You can:

• Access, correct, or download your data: in Settings, or by emailing privacy@onprism.org
• Delete your account: in Settings. Deletes your data within 30 days except for backups (90 days)
• Opt out of marketing emails: unsubscribe link in every email

If you're in California (CCPA/CPRA), the EU (GDPR), or the UK, you have additional rights including portability, restriction of processing, and the right to object. Email privacy@onprism.org and we'll respond within 30 days.

Do Not Sell or Share (California).We don't sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of.

7. How long we keep data

Account data: while your account is active, plus up to 90 days in backups after deletion. Content: same. Server logs: 90 days. Some data we keep longer if required by law (e.g., billing records for tax purposes).

8. Security

We use industry-standard practices: TLS in transit, encryption at rest, row-level security on the database, principle of least privilege for staff access. Report security issues to security@onprism.org.

9. International transfers

Our servers are in the United States. If you access Prism from outside the US, your data is transferred to and stored in the US. For users in the EU/UK, we rely on Standard Contractual Clauses (SCCs) for transfers and have data-processing agreements with our sub-processors.

10. Changes to this policy

We'll update this page with a new “Last updated” date when things change. For material changes, we'll notify you in-product or by email.

11. Contact

Privacy questions, data requests, or complaints: privacy@onprism.org.