Prism POS privacy policy.

Who we are

Prism / Prism POS provides software for independent stores. Our public website is available at https://prismdemo.dev, and our application is available at https://app.prismdemo.dev.

The Prism Bridge Chrome extension connects approved store POS transaction activity to that store's Prism account.

Information we collect

For the Prism Bridge, we may collect transaction details needed to sync activity into the store's Prism account and provide store reporting. This may include:

• Transaction ID and timestamp.
• Item names, SKUs, UPCs, quantities, prices, taxes, and discounts.
• Payment method label.
• Limited customer or contact details only when present in the connected POS activity and allowed by the store's agreement with Prism.

We may also process account authentication information needed to connect the store's Prism account and keep the integration operating securely.

Payment card information

The extension does not collect full payment card numbers. If a store workflow requires a card reference for reconciliation, Prism should only store the last four digits where needed.

How we use information

Data is transmitted to Prism backend services for transaction sync, store reporting, reconciliation, alerts, and ordering workflows.

Authentication is used only to connect and protect the store's Prism account.

What we do not do

• We do not sell user data.
• We do not use data for creditworthiness, lending, or loan eligibility decisions.
• We do not use data for unrelated advertising.
• We do not collect full card numbers through the extension.

Sharing and service providers

We may use service providers to host, secure, monitor, and operate Prism services. These providers are used to support Prism's product functions and are not permitted by Prism to use store data for unrelated purposes.

We may disclose information if required by law, to protect Prism, or to prevent misuse, fraud, or security incidents.

Security

We use reasonable technical and organizational safeguards to protect information transmitted to and stored by Prism services. No internet-connected system can be guaranteed to be perfectly secure, but we design Prism to limit access to store data to approved account and operational purposes.

Data retention

We retain transaction and account information for as long as needed to provide Prism services, support store reporting and reconciliation, comply with legal obligations, resolve disputes, and enforce agreements. Stores may contact Prism about data access or deletion requests where applicable.

Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will update the effective date on this page.

Contact

Questions about this privacy policy or the Prism Bridge can be sent to: