Terms of use
In short
- What you store in Prisma (your clients, projects and files) is yours.
- We use it only to make your portal work. We don’t review it, we don’t sell it and we don’t use it for anything else. From your portal we only receive general usage figures (totals and dates), never the content.
- Each agency has its own database, separate from all the others.
- Data is stored on Hostinger servers in Brazil, travels over a secure connection (HTTPS) and keys are stored encrypted.
- Prisma is not your backup: keep the originals of your files wherever they belong.
- If you want a copy of your data, or want us to delete it, write to us and we will do it within 5 business days.
What follows is the detail. If anything is unclear, write to us before accepting.
1What Prisma is and who provides it
Prisma is a portal for an agency or independent professional to share projects with their clients: stages, tasks, content to review and approve, files, meetings and messages. It is provided by Ripia Administración y Asesorías SpA, RUT 77.762.113-0, with its address at Santa Magdalena 75, oficina 304, piso 3, Providencia, Santiago, Chile (hereinafter, “Prisma”).
These terms govern the use of the service by the agency that subscribes to or tries it, and by the people on its team (“you”). By ticking “I have read and accept” in the welcome wizard, you accept them on behalf of your agency.
2Beta version
Prisma is in beta: we are improving it all the time and it may have faults, changes or interruptions. If the service changes in a significant way or ends, we will notify you by email at least 30 calendar days in advance. If it ends, within that period we will send you a copy of your data.
Usage data. During the beta, your portal sends Prisma, once a day, general usage figures (totals, dates of the last sign-in and system version) to make sure it works and to control AI spending. Individual information about your clients or the content of your work is never sent.
3Your account
- You sign in with your email and a code that we send you; there are no passwords to keep.
- You are responsible for what is done with your account and those of your team, and for inviting only appropriate people.
- You must provide truthful information and keep it up to date.
4Your data is yours
All the content you upload or generate in Prisma (clients, contacts, projects, tasks, files, messages) remains yours or your clients’, as applicable. Prisma uses it solely to provide you with the service: storing it, showing it to those you authorize and sending the portal’s emails and notices. We don’t review it, we don’t sell it, we don’t hand it over to third parties for other purposes and we don’t use it for advertising.
To be able to do this, you give us the limited permission strictly necessary to store, copy (for example, in backups), adapt to the portal’s format and show that content to the people you invite, only while you use the service. By uploading material (photos, videos, brands, texts, your clients’ documents) you warrant that you have the right to do so and to share it with those you invite.
5Your clients’ personal data
Your clients and their contacts entrust their data to you. You are the controller of that data: you decide what it is used for and how you inform those people about it. Prisma is your processor: it processes the data only on your behalf, to provide the service, and does not use it for its own purposes. These terms are the data processing agreement between your agency and Prisma. If you need a separately signed agreement, request it at info@usaprisma.com.
As processor, Prisma undertakes to:
- Process the data only according to your instructions, which are those you give by using the portal and these terms.
- Keep it confidential and allow access only to Prisma personnel who need it, bound by a duty of confidentiality and with your express consent in each case.
- Apply the security measures in section 7.
- Use only the providers in section 6 and notify you at least 30 calendar days before adding or changing one, so that you can object or close your account.
- Help you respond when a person asks to access their data, correct it, delete it, object to its use or take it with them. You can do many of these things yourself from the portal (for example, by anonymizing a contact).
- Notify you of any security incident affecting your data, as set out in section 7.
- When the service ends, return the data to you and then delete it, as set out in section 12.
Legal framework. Prisma complies with Chilean personal data protection law: Law No. 19.628 (Chile), as amended by Law No. 21.719. When your agency or the people whose data you store are in the European Union, we also apply the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), including its rules for processors. If your agency is in the European Union and you need the European Commission’s standard contractual clauses to send data to Chile, request them at info@usaprisma.com. You, as controller, must comply with the rules that apply to you with respect to your clients.
6Where data is stored and who helps us
To provide the service we use these providers, which process data on our behalf and under a duty of confidentiality:
- Hostinger: servers, databases, files and email sending. Data is stored in Brazil, a country that the European Union recognizes as providing an adequate level of data protection.
- Artificial intelligence providers (Anthropic, OpenAI, Google, depending on which one is chosen in the settings): only if your agency turns on the AI features and only with the text you send (see section 9). They process data outside Chile, mainly in the United States.
When data leaves Chile or the European Union, we do so with the safeguards required by the applicable law (countries recognized as adequate, or contractual clauses with the provider).
7Security
- Each agency has its own database, separate from those of the other agencies.
- Everything is transmitted over a secure connection (HTTPS).
- The keys and credentials you enter (for example, for email or artificial intelligence) are stored encrypted.
- Access to the server is restricted. The files you upload are stored with that restricted access; they are not encrypted one by one.
- The Prisma team only accesses your agency’s data with your express consent in each case: when you ask us for help or to resolve a technical or security problem. The only exception is when the law or an order from an authority requires us to.
- No system is infallible. If we detect an incident affecting your data, we will notify you without delay and at the latest within 48 hours of detecting it, with what we know about the incident and what we are doing about it. We will also give you what you need to notify your clients or the authority, if that applies to you.
8Backups and files
Prisma is not a backup service. The files you upload are copies: the original must remain stored by you or by whoever is responsible for it. If a file is lost or damaged in Prisma, recovering it from your original is your responsibility.
Texts that exist only in Prisma (notes, messages, comments, meeting summaries) have no guaranteed backup. Our hosting provider keeps an automatic copy of the last 24 hours. In exceptional cases we may try to recover information from that copy, but we do not promise that it is possible or that it will be complete.
9Artificial intelligence (optional)
Some features, such as proposing a summary and tasks from a meeting transcript, use an artificial intelligence provider. They are only used if your agency turns them on. When you use them, the text you send is transmitted to the provider chosen in the settings.
- With Prisma’s trial allowance (tokens): your account receives an included amount of usage (tokens). You can use it as long as you have a balance left, with no expiry date. In this case, Prisma sends the text to the provider as part of the service. When the allowance runs out, to keep using AI you must enter your own key.
- With your own key: use is also governed by your contract with that provider, which charges you for it.
Avoid sending information you don’t want to share with the provider. The transcript may contain your clients’ data; informing them is your responsibility if the law or your contract requires it. Nothing the AI proposes is published without your approval.
10Portal emails
The portal sends emails in your name and your agency’s (invitations, notices, summaries). You decide whom to invite and when; you are responsible for making sure those people expect to receive them.
11Acceptable use
Do not use Prisma for illegal activities, to send spam, to infringe third-party rights, or to try to access other agencies’ data or damage the service. If an account does so, we may suspend it, notifying it when possible. In that case, within 30 calendar days we will copy the agency’s data and send it to its representative; afterwards we will delete it, unless the law requires us to keep it, depending on the case.
12Copy, account closure and deletion of your data
- Copy: you can request a copy of your data by writing to info@usaprisma.com. We will reply within 5 business days.
- Account closure: you can close your agency’s account whenever you want, by requesting it at the same email address. Within 30 calendar days we will send you a copy of your data and then delete it.
- Deletion: when we delete your data, the hosting’s automatic copy is replaced on its own within the following 24 hours. We will only keep what the law requires us to retain, for the period it requires.
13The data Prisma processes on its own account
Apart from your clients’ data, Prisma processes some data about the people on your team and those who enter the portal. For this data, Prisma is the controller.
- What data: name and email of those who use the account; IP address, date and time of access and technical server logs; which version of these terms each person accepted, and when.
- What for: giving you access and sending you the codes to sign in, keeping the service secure, detecting abuse and proving acceptance of these terms. The legal basis is performance of the contract with your agency, our legitimate interest in the security of the service and compliance with legal obligations.
- Cookies: we only use those necessary for the portal to work (the signed-in session and your preferences, such as light or dark mode). We don’t use advertising or tracking cookies. If your agency includes in a piece of content a video or document from another service (for example YouTube, Vimeo, Loom, Google Drive, Canva or Figma), that service may set its own cookies when you open it; they are not Prisma cookies.
- How long: access logs, up to 12 months; account data, for as long as the account exists; the record of acceptance of the terms, for as long as the account exists and up to 5 years after it is closed.
- With whom: only with the providers in section 6. We don’t sell this data or use it for advertising.
- Your rights: you can request access, correction, deletion, objection, portability or blocking of your data by writing to info@usaprisma.com. If you are not satisfied with our response, you can complain to Chile’s Personal Data Protection Agency or, if you are in the European Union, to the data protection authority of your country.
14Prisma’s property
The software, the design, the “Prisma” brand and the rest of the service belong to Ripia Administración y Asesorías SpA. Using Prisma gives you the right to use the service while you have the account, but does not transfer any ownership of it to you. If you send us ideas or comments to improve it, we may use them freely, without any obligation to you.
15Price
During the beta the service is free of charge. If it is charged for later on, we will inform you in advance and you will not be charged without your acceptance.
16Liability
We do what is necessary for the service to work and to protect your information. As Prisma is in beta, it may have faults or interruptions (section 2). To the extent the law allows, Prisma is not liable for indirect damages, for the loss of files whose original you were supposed to keep (section 8), or for the loss of information that cannot be recovered from the hosting’s 24-hour copy. This does not limit our liability in cases of willful misconduct or gross negligence, nor the rights that the law gives you and that cannot be waived.
17Changes to these terms
If we change these terms, we will publish the new version with its date and, when the change is significant, we will ask you to accept it again when you sign in. We keep a record of which version each person accepted, and when.
18Governing law and courts
These terms are governed by the laws of Chile. Any dispute will be submitted to the ordinary courts of justice of the city and commune of Santiago, Chile, without prejudice to the data protection rights that the law of your country gives you and that cannot be waived. If you are in the European Union, you may also complain to the data protection authority or the courts of your country of residence, as the GDPR allows.
19Contact
Write to us at info@usaprisma.com or to Ripia Administración y Asesorías SpA, Santa Magdalena 75, oficina 304, piso 3, Providencia, Santiago, Chile.