Privacy Policy
Last updated June 10, 2026
1. Who We Are
Prisma is operated by Carajillo Solutions LLC, a Texas limited liability company ("we," "us," or "our"). Contact: privacy@caraji.io | Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216, USA.
2. The Waitlist (Pre-Launch)
Before Prisma launches, the only personal information we collect on this site is the email address you submit to the waitlist, together with the language you signed up in. We use it to let you know when Prisma is ready, and we don't sell it or hand it to anyone for their own marketing. You can have your email removed at any time: write to privacy@caraji.io or follow the instructions on our data deletion page.
3. When Prisma Launches: Your Account and Connected Social Networks
Prisma is a publishing tool: you connect your social media accounts, and Prisma adapts and publishes your content to them. Once the product is live, we will process:
- Account information: your email address and name, used for authentication and transactional email
- Connected channel information: the identifiers and names of the social accounts, pages, and profiles you connect through each network's official API
- Access tokens: the credentials each network issues so Prisma can publish on your behalf; stored encrypted at rest and never shown to anyone
- Your content: the posts, captions, and media you compose, schedule, and publish, plus each network's response (post ID, publish status)
- Payment information: processed by Stripe, Inc.; we receive a customer ID and payment metadata, never your full card number
We access only the data needed to provide the publishing service you asked for. We never sell personal data, never use your content or your audience's data for advertising, and never access more of your social accounts than publishing requires.
4. The Social Networks You Connect
Prisma publishes through each network's official API, and only to the accounts you personally connect and authorize: Instagram, Facebook, and Threads (operated by Meta Platforms, Inc.), X, LinkedIn, TikTok, YouTube (operated by Google LLC), Bluesky, and Pinterest. The same rules apply to every one of them:
- We use each network's API only to publish for you and to identify the account you connected. Prisma's use of information received from a network's API is limited to operating the publishing features you asked for, and complies with that network's developer and platform terms, including any "limited use" requirements.
- We are independent. Prisma is not endorsed by, certified by, affiliated with, or sponsored by Meta Platforms, X Corp., LinkedIn Corporation, TikTok, Google LLC or YouTube, Bluesky, Pinterest, Inc., or any other network. All product names, logos, and trademarks belong to their respective owners and are used only to identify the networks you can connect.
- We never resell or redistribute network data. We do not sell, rent, license, share, or otherwise redistribute any network's content, or any data we derive from a network's API, to any third party, and we never use it for advertising or to build advertising profiles.
- When you disconnect, we delete it. When you disconnect a network, or delete your Prisma account, we immediately revoke our access and delete the credentials we hold for that network (such as OAuth access and refresh tokens, or app passwords), and we permanently delete any other data we derived from that network's API (the account, page, and profile identifiers and names, and any cached profile data) within 30 days. Content you already published to a network stays on that network and is governed by the network's own terms and privacy policy.
5. How We Share Information
We share personal data only with the service providers below, and only to operate Prisma:
| Provider | Location | Purpose |
|---|---|---|
| DigitalOcean LLC | United States | Cloud hosting and media storage |
| Stripe, Inc. | United States | Payment processing |
| LLM provider (to be announced before launch) | United States | AI caption assistance (your draft content is sent solely to generate suggestions for you) |
| The social networks you connect | Varies | Recipients of the content you choose to publish through Prisma |
Subprocessors are contractually prohibited from using your data for any purpose beyond providing services to Prisma. The social networks process the content you publish under their own terms and privacy policies.
6. Security
All traffic is encrypted in transit (HTTPS/TLS). Network access tokens and application credentials are encrypted at rest. Access to production systems is restricted and authenticated. No security measure is absolute; if we become aware of a breach affecting your personal data, we will notify you as required by applicable law.
7. Data Retention
- Waitlist emails: kept until the launch notification is sent, then deleted; removed earlier on request
- Active accounts: retained for the life of the account
- After cancellation: your data is retained for 90 days (so you can reactivate without losing your work), then permanently deleted
- Access tokens: revoked and deleted immediately when you disconnect a channel or delete your account
- Stripe payment records: retained as required by tax law
- Server logs: rolled after 90 days
8. Cookies
Today we use only first-party functional cookies: a session cookie (which also remembers your language choice) and a CSRF token. There are no advertising cookies or behavioral tracking. If we adopt analytics or similar tools later, we will list them here and update this policy.
9. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by writing to privacy@caraji.io. We acknowledge requests within 5 business days and fulfill them within 30 days. California residents: we do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your privacy rights.
10. International Data Transfers
Our servers are located in the United States (DigitalOcean). If you use Prisma from outside the United States, your data is transferred to and processed in the United States, protected by the safeguards described above.
11. Changes to This Policy
If we make a material change, we will notify registered users by email at least 30 days before it takes effect. For minor updates (such as adding a new service provider or tool), we will update this page and the "Last updated" date.
12. Contact
- Privacy: privacy@caraji.io
- Product support: support@prisma.onl
- Mailing address: Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216, USA