Privacy Policy
Last updated June 9, 2026
1. Who We Are
Prisma is operated by Carajillo Solutions LLC, a Texas limited liability company ("we," "us," or "our"). Contact: privacy@caraji.io | Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216, USA.
2. The Waitlist (Pre-Launch)
Before Prisma launches, the only personal information we collect on this site is the email address you submit to the waitlist, together with the language you signed up in. We use it to let you know when Prisma is ready, and we don't sell it or hand it to anyone for their own marketing. You can have your email removed at any time: write to privacy@caraji.io or follow the instructions on our data deletion page.
3. When Prisma Launches: Your Account and Connected Social Networks
Prisma is a publishing tool: you connect your social media accounts, and Prisma adapts and publishes your content to them. Once the product is live, we will process:
- Account information: your email address and name, used for authentication and transactional email
- Connected channel information: the identifiers and names of the social accounts, pages, and profiles you connect through each network's official API
- Access tokens: the credentials each network issues so Prisma can publish on your behalf; stored encrypted at rest and never shown to anyone
- Your content: the posts, captions, and media you compose, schedule, and publish, plus each network's response (post ID, publish status)
- Payment information: processed by Stripe, Inc.; we receive a customer ID and payment metadata, never your full card number
We access only the data needed to provide the publishing service you asked for. We never sell personal data, never use your content or your audience's data for advertising, and never access more of your social accounts than publishing requires.
4. How We Share Information
We share personal data only with the service providers below, and only to operate Prisma:
| Provider | Location | Purpose |
|---|---|---|
| DigitalOcean LLC | United States | Cloud hosting and media storage |
| Stripe, Inc. | United States | Payment processing |
| LLM provider (to be announced before launch) | United States | AI caption assistance (your draft content is sent solely to generate suggestions for you) |
| The social networks you connect | Varies | Recipients of the content you choose to publish through Prisma |
Subprocessors are contractually prohibited from using your data for any purpose beyond providing services to Prisma. The social networks process the content you publish under their own terms and privacy policies.
5. Security
All traffic is encrypted in transit (HTTPS/TLS). Network access tokens and application credentials are encrypted at rest. Access to production systems is restricted and authenticated. No security measure is absolute; if we become aware of a breach affecting your personal data, we will notify you as required by applicable law.
6. Data Retention
- Waitlist emails: kept until the launch notification is sent, then deleted; removed earlier on request
- Active accounts: retained for the life of the account
- After cancellation: your data is retained for 90 days (so you can reactivate without losing your work), then permanently deleted
- Access tokens: revoked and deleted immediately when you disconnect a channel or delete your account
- Stripe payment records: retained as required by tax law
- Server logs: rolled after 90 days
7. Cookies
Today we use only first-party functional cookies: a session cookie (which also remembers your language choice) and a CSRF token. There are no advertising cookies or behavioral tracking. If we adopt analytics or similar tools later, we will list them here and update this policy.
8. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by writing to privacy@caraji.io. We acknowledge requests within 5 business days and fulfill them within 30 days. California residents: we do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your privacy rights.
9. International Data Transfers
Our servers are located in the United States (DigitalOcean). If you use Prisma from outside the United States, your data is transferred to and processed in the United States, protected by the safeguards described above.
10. Changes to This Policy
If we make a material change, we will notify registered users by email at least 30 days before it takes effect. For minor updates (such as adding a new service provider or tool), we will update this page and the "Last updated" date.
11. Contact
- Privacy: privacy@caraji.io
- Product support: support@prisma.onl
- Mailing address: Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216, USA