Privacy Policy

PrismTranslate is operated by T6 CONSULTING LLC. This policy explains what personal data we process when you use the PrismTranslate hosted service, whether as an account holder (an organizer running translated sessions) or as an attendee (someone listening to a session). For privacy requests, contact us at legal@prismtranslate.com.

Account: name, email address, a securely hashed password (we never store the plain text), and an optional profile image URL from Google sign-in.

Login sessions: IP address and browser user-agent, kept with each active login session for security and fraud prevention.

Billing:we store your Square customer and card-on-file identifiers, plan status, and a record of each period’s charge. Card details are collected and held by Square, not by us.

Session content: audio you broadcast is processed in real time for translation — we do not store the audio itself. What we do store: per-language text transcripts of what was said, AI-generated session summaries, and any glossaries you create. Session metadata (title, languages, start/end times) and a metered-usage ledger (translated language-seconds) are also stored.

Invitations: the email addresses you invite to your organization.

Attendees do not need accounts. When you join a session as an attendee we process your chosen language and a randomly generated connection identity, and your device connects to our audio-delivery provider (LiveKit) to receive translated audio. Your IP address is used transiently for connection handling and rate limiting; attendee pages set no cookies and contain no analytics or tracking.

If you speak near an organizer’s microphone, your speech may be included in the audio that is translated and transcribed. The organizer running the event is responsible for notifying you and obtaining any legally required consent.

• To provide the service: translation, captions, transcripts, summaries, glossaries.
• To meter usage and bill pay-as-you-go subscriptions.
• To secure accounts and prevent abuse (login IP/user-agent, rate limiting).
• To send transactional email: verification links, sign-in links, invitations.

We do not sell personal data, do not use it for advertising, and do not send marketing email. We do not use your content to train AI models, and we use paid API tiers of our AI providers configured so that they do not either.

Where GDPR applies, our legal bases are: performance of a contract (providing the service and billing), legitimate interests (security, abuse prevention), and consent where required (which the organizer is responsible for obtaining from speakers — see Section 3).

Translation is performed by DeepL’s Voice API; session summaries are generated by Google’s Gemini API from stored transcripts. All translated audio, captions, transcripts, and summaries are AI-generated and may contain errors.

We share data only with the service providers needed to run PrismTranslate:

We may also disclose data where required by law, or in connection with a merger or acquisition (in which case this policy continues to apply to data collected under it).

Our infrastructure runs in the United States, and some providers process data there. Where data of EU/UK residents is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or the EU–US Data Privacy Framework with the relevant provider. [Counsel: confirm mechanism per vendor before launch.]

• Transcripts:deleted automatically after your plan’s retention window — 7 days on the trial plan, 365 days on pay-as-you-go.
• Broadcast audio: not stored; processed in transit only.
• Login sessions (IP, user-agent): kept for the life of the session.
• Account data: kept until you delete your account.
• Billing and usage records: kept as required for accounting, tax, and audit obligations.
• Trial-abuse prevention: when an account is deleted, we keep a pseudonymous record — a keyed, non-reversible hash of the email plus the free-trial minutes used that calendar month — so deleting and re-creating an account does not reset the free trial. It contains no readable personal data and has no effect after that month ends.

You can access and update account details in the dashboard, download transcripts (TXT/VTT) from each session page, and delete your account — including organizations only you belong to and their transcripts — from the Account page. Deletion requires email confirmation.

Depending on where you live (including the EU/UK under GDPR and California under CCPA/CPRA), you may also have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. To exercise any right, email legal@prismtranslate.com. We do not discriminate against you for exercising privacy rights.

We use only essential cookies: a session cookie that keeps account holders signed in. There are no analytics, advertising, or tracking cookies, and attendee pages set no cookies at all. Fonts and other page assets are served from our own infrastructure, not third-party CDNs.

Passwords are hashed with a modern memory-hard algorithm; credentials are compared in constant time; API secrets are stored in a managed secret store; access tokens are scoped per session and per room; data is encrypted in transit. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as required by law.

The service is intended for business use by adults 18 and over, and we do not knowingly collect personal data from children.

We will post any changes to this policy here and update the date above; material changes will be announced by email or in-product notice. Questions and privacy requests: T6 CONSULTING LLC · legal@prismtranslate.com. For anything else, including support, email support@prismtranslate.com.