Privacy Policy

Prime LLC ("We," "Us," or "Our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.

1. Legal Roles: Data Controller and Data Processor

For the purposes of data protection laws, you, our Client, are the Data Controller of the personal data of your customers that is processed through our Service. You determine the purposes and means of processing that data.

Prime LLC is the Data Processor. We process this data on your behalf, based on your instructions, as outlined in this Privacy Policy and our Terms of Service.

2. Information We Collect

2.1. Client Account Information

When you register for an account, we collect information such as your name, company name, email address, and payment information.

2.2. Client's Customer Data

Our AI agent processes data from your customers on your behalf. This includes:

• Conversation content (messages, voice notes, images)
• User profile information from social media platforms (e.g., name, handle)
• Data derived from our analysis, such as sentiment, intent, and psychological/behavioral profiles (e.g., Big 5 personality traits)

2.3. Usage Data

We automatically collect information about how you interact with our Service, such as IP address, browser type, and actions taken on the dashboard.

2.4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as Meta Pixel, Google Analytics, and Microsoft Clarity) to track the activity on our Service and store certain information. These technologies help us analyze user behavior, improve our Service, and measure the effectiveness of our advertising.

3. How We Use Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: To operate the AI agent, generate analytics and reports, and manage your account.
• To Improve Our Service: We use aggregated and anonymized data to train our AI models and enhance the performance and features of the Service.
• To Process Payments: To bill you for your subscription.
• To Communicate With You: To send service-related notices, updates, and support messages.

4. Data Sharing and Third-Party Sub-processors

We do not sell your data. We share data with third-party service providers (Sub-processors) only as necessary to provide the Service. Our key Sub-processors include:

• Cloud Infrastructure: Amazon Web Services (AWS), located in the US East region, for data hosting and storage.
• AI & Language Processing: We utilize a combination of proprietary systems and industry-leading third-party Large Language Models (LLMs) to process conversation data. We select providers based on strict security and performance criteria. All third-party providers are contractually obligated to handle data securely.
• Analytics & Tracking: Google Analytics, Meta (Facebook), and Microsoft Clarity, to analyze website traffic and user behavior.
• Payment Processors: Such as Stripe, to handle your subscription payments securely.

5. International Data Transfers

Your information, including Client Data, will be transferred to, stored, and processed in the United States (where our AWS servers are located) and other countries where our third-party AI providers operate.

We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy. We rely on mechanisms like Secure Sockets Layer (SSL)/Transport Layer Security (TLS) encryption for data in transit.

6. Data Retention and Deletion

6.1. Customer Conversations

To protect the privacy of your customers, all raw conversation content (exact back-and-forth messages, voice notes, and media/images shared within the chat) is permanently deleted from our active systems 24 hours after the interaction. Note that third-party AI providers may retain data for a limited period (typically up to 30 days) solely for abuse monitoring purposes, after which it is deleted.

6.2. Retained Data (Insights & Profiles)

We retain derived data, insights, and public profile information generated from or shared during the conversations, including but not limited to:

• Psychological and behavioral profiles (e.g., personality traits, sentiment analysis).
• Transaction details (e.g., order history, product preferences, shipping details).
• Customer Profile Pictures: Publicly available profile photos (e.g., from WhatsApp or social media) used for identification.
• Business intelligence reports and performance metrics.

This data is retained for a period of one (1) year to allow for re-processing, continuous learning, and to provide the Service's core features (such as the "Memory" and "Psychology Engine").

6.3. Client Account Information

We retain your Client Account Information for as long as your subscription is active and for a reasonable period thereafter for legal or operational purposes. Aggregated and anonymized data derived from your use of the Service may be retained indefinitely for our internal improvement purposes.

7. Data Security

7.1. Security Measures

We implement enterprise-grade technical and organizational measures to protect the security of your information. This includes:

• Encryption: Data is encrypted both in transit (using SSL/TLS) and at rest (using AES-256 encryption).
• Access Controls: Strict role-based access controls (RBAC) ensure that only authorized personnel can access sensitive data.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and mitigate potential risks.

However, no method of transmission over the Internet or method of electronic storage is 100% secure.

7.2. Data Breach Notification

In the event that we become aware of a security breach that compromises your Client Data or your customers' personal data, we will notify you without undue delay. We will provide information about the nature of the breach and the steps we are taking to mitigate it.

8. Your Rights and Data Subject Requests

As the Data Controller, you are responsible for handling data privacy requests (e.g., access, deletion) from your customers. We are committed to assisting you in fulfilling these requests.

If you receive a Data Subject Access Request (DSAR) from one of your customers, please contact our support team. We will provide you with the necessary assistance to respond to the request in a timely manner, in line with our data retention policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.