Privacy Policy

Last Updated: December 26, 2025 | Effective Date: December 26, 2025

PRIVACY COMMITMENT: KARLWITHAK Enterprises, doing business as PRISM ("Company," "We," "Us," or "Our"), is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, disclose, retain, and safeguard information when you access or use our website, applications, and services (collectively, the "Services"). By using the Services, you consent to the data practices described in this Policy. If you do not agree with the terms of this Policy, please do not access or use the Services.

ARTICLE I: SCOPE AND APPLICATION

Section 1.1 — Covered Services

This Policy applies to all personal information collected through: (a) the PRISM website located at prismtrades.us and any associated subdomains; (b) mobile applications, desktop applications, and browser extensions; (c) email communications and newsletters; (d) customer support interactions; (e) social media pages and integrations; and (f) any other services, products, or features that reference this Policy.

Section 1.2 — Third-Party Services

This Policy does not apply to information collected by third parties, including third-party websites, services, or applications that may be accessible through links on our Services. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before providing any personal information.

Section 1.3 — Children's Privacy

The Services are not intended for individuals under the age of eighteen (18) years. We do not knowingly collect, solicit, or maintain personal information from children under 18. If we learn that personal information has been collected from a child under 18 without verification of parental consent, we will delete that information promptly. If you believe we might have any information from or about a child under 18, please contact us immediately.

ARTICLE II: INFORMATION WE COLLECT

Section 2.1 — Categories of Personal Information

We may collect the following categories of personal information:

Category Examples Collected
Identifiers Name, email address, username, account ID, IP address, device identifiers Yes
Contact Information Email address, phone number, mailing address Yes
Commercial Information Purchase history, subscription tier, billing records, transaction details Yes
Financial Information Payment card details (processed by third-party payment processors), billing address Partial
Internet/Network Activity Browsing history, search queries, interactions with Services, clickstream data Yes
Geolocation Data Approximate location derived from IP address Yes
Device Information Device type, operating system, browser type, screen resolution, language preferences Yes
Inferences Preferences, characteristics, behavior patterns derived from collected information Yes

Section 2.2 — Information You Provide Directly

We collect information that you voluntarily provide when you: (a) register for an Account; (b) subscribe to a paid tier; (c) complete forms or surveys; (d) participate in promotions or contests; (e) contact customer support; (f) post comments or feedback; or (g) otherwise communicate with us.

Section 2.3 — Information Collected Automatically

When you access or use the Services, we automatically collect certain information, including:

Section 2.4 — Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities. These technologies serve the following purposes:

You may control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Services.

ARTICLE III: USE OF INFORMATION

Section 3.1 — Purposes of Processing

We use the information we collect for the following purposes:

Section 3.2 — Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions requiring a legal basis for processing, we rely on the following:

ARTICLE IV: DISCLOSURE OF INFORMATION

Section 4.1 — Categories of Recipients

We may disclose your personal information to the following categories of recipients:

Section 4.2 — Third-Party Service Providers

Our service providers are contractually obligated to: (a) use personal information only for the purposes specified in our agreements; (b) implement appropriate security measures; (c) comply with applicable data protection laws; and (d) delete or return personal information upon termination of services.

Section 4.3 — Legal Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to: (a) comply with applicable laws, regulations, subpoenas, or court orders; (b) respond to governmental or regulatory requests; (c) protect our rights, property, or safety, or that of our users or the public; (d) detect, prevent, or investigate fraud, security breaches, or illegal activities; or (e) enforce our Terms of Service or other agreements.

ARTICLE V: DATA RETENTION

Section 5.1 — Retention Periods

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Retention periods are determined based on: (a) the nature and sensitivity of the information; (b) the purposes for which it is processed; (c) applicable legal requirements; and (d) our legitimate business interests.

Section 5.2 — Account Deletion

Upon termination of your Account, we will delete or anonymize your personal information within a reasonable period, except to the extent retention is necessary to: (a) complete pending transactions; (b) comply with legal obligations; (c) resolve disputes; (d) enforce our agreements; or (e) maintain aggregated, anonymized data for analytical purposes.

ARTICLE VI: DATA SECURITY

Section 6.1 — Security Measures

We implement technical, administrative, and physical security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: (a) encryption of data in transit and at rest; (b) secure authentication mechanisms; (c) access controls and permissions; (d) regular security assessments and penetration testing; (e) employee training on data protection; and (f) incident response procedures.

Section 6.2 — Limitations

Notwithstanding our security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information. You are responsible for maintaining the confidentiality of your Account credentials and for any activities that occur under your Account.

Section 6.3 — Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities in accordance with applicable laws. Notification will include: (a) the nature of the breach; (b) the categories of data affected; (c) the likely consequences; and (d) the measures taken or proposed to address the breach.

ARTICLE VII: YOUR PRIVACY RIGHTS

Section 7.1 — Rights Under Applicable Law

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Section 7.2 — Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Article X. We will respond to your request within the timeframes required by applicable law. We may require verification of your identity before processing your request. Certain rights may be limited where we have compelling legitimate grounds or legal obligations.

Section 7.3 — California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including: (a) the right to know what personal information is collected, used, shared, or sold; (b) the right to delete personal information; (c) the right to opt-out of the sale or sharing of personal information; (d) the right to correct inaccurate personal information; (e) the right to limit use of sensitive personal information; and (f) the right to non-discrimination for exercising privacy rights.

Section 7.4 — Do Not Sell or Share My Personal Information

We do not sell personal information in exchange for monetary consideration. However, certain disclosures to third parties for advertising purposes may constitute "sharing" under California law. You may opt-out of such sharing by contacting us or using any "Do Not Sell or Share" link provided on our website.

ARTICLE VIII: INTERNATIONAL DATA TRANSFERS

Section 8.1 — Transfer Mechanisms

Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from the laws of your country. When we transfer personal information internationally, we implement appropriate safeguards, including: (a) Standard Contractual Clauses approved by the European Commission; (b) binding corporate rules; (c) certification mechanisms; or (d) other legally recognized transfer mechanisms.

Section 8.2 — EU-U.S. Data Transfers

For transfers of personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, we rely on applicable data transfer mechanisms that ensure an adequate level of protection as required by applicable data protection laws.

ARTICLE IX: UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will: (a) post the updated Policy on our website with a revised "Last Updated" date; (b) notify you by email or through the Services where appropriate; and (c) obtain consent where required by applicable law. Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated Policy.

ARTICLE X: CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

KARLWITHAK Enterprises (d/b/a PRISM)
Data Protection Inquiries
Email: privacy@prismtrades.us
Support: support@prismtrades.us

For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.

← Return to PRISM