Privacy Policy

1. Introduction

PRISMUX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, website, and cloud-based streaming services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your name, email address, and payment information.
• Profile Information: Information you provide in your user profile, such as organization name or profile picture.
• Communications: When you contact us for support or inquiries, we collect the content of your messages.

Information Collected Automatically

• Usage Data: Information about how you use the Service, including streaming duration, features used, and performance metrics.
• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Log Data: IP address, browser type, access times, and pages viewed.
• Video Content: Video streams are processed through our cloud infrastructure to enable multi-camera switching and streaming.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience

4. Video Content and Streaming

When you use PRISMUX to stream:

• Video streams are processed in real-time through our cloud infrastructure to enable multi-camera switching. We do not record or store your video streams unless you explicitly enable cloud recording.
• If you enable cloud recording, recordings are encrypted and stored securely, accessible only to you. Recordings are deleted upon your request, with encrypted backups retained for up to 30 days.
• We do not access, view, monitor, or use your video content except as technically necessary to provide the Service or as required by law.
• Video content is never used for advertising, AI training, analytics, or shared with third parties beyond what is necessary to deliver your stream to your chosen destinations.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (payment processing, cloud hosting, analytics).
• Streaming Destinations: When you stream to platforms like YouTube or Twitch, your stream is sent to those platforms according to their terms.
• Legal Requirements: If required by law or to protect our rights, privacy, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement robust technical and organizational measures to protect your information:

• Encryption in Transit: All data transmitted between your devices and our services is protected using TLS 1.2 or higher. Media streams are encrypted using DTLS-SRTP.
• Encryption at Rest: All stored data, including any cloud recordings, is encrypted using AES-256 encryption.
• Infrastructure Security: Our services are hosted on SOC 2 Type 2 certified cloud infrastructure with physical security controls, redundant systems, and 24/7 monitoring.
• Access Controls: We enforce least-privilege access, multi-factor authentication for administrative systems, and conduct regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain different types of data for different periods:

• Account Data: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations.
• Video Streams: Processed in real-time only; not stored unless you enable cloud recording.
• Cloud Recordings: Retained according to your subscription plan. Deleted upon your request, with encrypted backups retained for up to 30 days.
• Usage and Log Data: Retained for up to 12 months for analytics, security, and service improvement purposes.
• Operational Metrics: Retained for up to 30 days by default.

You can request deletion of your account and associated data at any time by contacting us at privacy@prismux.com.

8. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at privacy@prismux.com.

9. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.

10. International Data Transfers

PRISMUX is based in the United States and operates globally. Our cloud infrastructure is hosted in data centers located in the United States, European Economic Area (EEA), and Singapore. Your data may be transferred to, stored, and processed in any of these regions.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on the following safeguards:

• EU-U.S. Data Privacy Framework (DPF): We rely on the DPF, including the UK Extension and Swiss-U.S. DPF, as our primary transfer mechanism where applicable.
• Standard Contractual Clauses (SCCs): Where the DPF does not apply or is insufficient, we use the European Commission-approved Standard Contractual Clauses to ensure adequate protection.
• UK International Data Transfer Addendum: For UK transfers, we apply the UK-specific addendum to SCCs as required.

Our infrastructure sub-processors maintain SOC 2 Type 2 certification and implement equivalent security measures across all regions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@prismux.com