Privacy Policy

Last Update: June 19th, 2025

Welcome to Prismer! Prismer are services with generative artificial intelligence as its core function (“Prismer” or “the services”) provided by Shanghai Pumizhitu Technology Co., Ltd. and its affiliated companies (“we” or “Prismer AI”) through web pages, applications, browser extensions. The Privacy Policy(“this policy”) is to clearly explain how we collect, use, disclose, and protect your personal information, as well as the rights you have and to help you make appropriate choices.

Your privacy matters to us. Please do take the time to get to know and familiarize yourself with the policy and practices. By continuing to use the services, you agree with the policy. If you do not wish your personal information collected, used, or disclosed as described below, or if you are under the age of 14, you should stop accessing the services. We would like to specifically remind you that when you access third-party products and services through the services, the handling of your personal information and privacy will be managed by the third party in accordance with its own policies. We cannot be responsible for the processing activities of third parties. In such cases, we recommend that you carefully read the relevant policies of the third parties to understand your rights and obligations.

1Personal Information We Collect

Personal Information You Provide:

Account Information:

The information you provide when registering for and using an account, such as username, telephone number, profile picture, email address and account credentials. This information is used to create and manage your account, ensuring that you can access and use our services smoothly.

User content:

The prompts, audios, images, videos, files and other content that you input and generate while using our products and services. This information helps us optimize our models and understand your needs and preferences, so that we can provide you with more accurate services and support.

Communication Information:

If you communicate with us, such as via email or feedback pages or our pages on social media sites, we may collect personal information like your name, contact information, and the contents of the messages you send.

Surveys, Research, and Promotions:

We collect information you provide if you choose to participate in a survey, research, promotion, contest, marketing campaign, or event conducted or sponsored by us.

We Receive from Your Use of the Services:

We may receive the following information automatically when you visit, use or interact with our services:

Log Data:

We collect information that your browser or device automatically sends when you use the services such as Internet Protocol address and language preferences.

Device and Usage Information:

We collect technical information related to your device and usage of our services. This includes device models, operating system versions, unique device identifiers, MAC addresses, user IDs, conversation IDs, IP addresses, browser types, telecommunications operators, language preferences, clipboard data, and access dates and times. The specific information collected may vary based on your device type and settings.

Cookies & Similar Technologies:

We may use cookies and similar technologies on our website to understand your usage patterns and provide more personalized services. If you use the services without creating an account, we may store some of the information described in this policy with cookies. We will obtain your consent to our use of cookies where required by applicable law.

Personal Information we collect from third parties

We may receive the information described in this policy from other sources, such as:

Technical Information:

If you choose to register or log in using a third-party service such as Google, we may collect information from that service, such as access tokens and public information like your profile picture and nickname, with your consent. This is for account binding with our services, enabling direct login. We may also request additional information if any required registration details are missing.

Security Information:

We may receive information from our trusted partners, such as security partners, to protect against fraud, abuse, and other security threats to our services.

Public Information:

We may obtain publicly available information via Internet sources in order to develop the models that power our services.

2How we use Personal Information

We use your information to provide, maintain, improve and develop the services, including for the following purposes:

To Provide the Services:

We use your information to create and manage your account, provide a seamless and convenient login experience, and enable you to interact with the services, such as engaging in conversations and accessing various features.

To Improve and Develop Our Services:

We analyze how you use the services to identify areas for improvement, develop new features, and enhance the overall user experience. This includes training and refining our underlying technology, such as machine learning models and algorithms.

To Communicate with You:

We may contact you to inform you of changes to the services, provide customer support, dealing with complaints or send you other service-related messages.

To Ensure the Safety and Security of Our Services:

We use your information to detect and prevent fraudulent activities, abuse, and other security threats. This helps us maintain the integrity and stability of our platform.

To Comply with Legal Obligations and Rules:

We use your information to comply with legal obligations, our policy and to protect the rights, privacy, safety, or property of our users, Prismer, or third parties.

To Promote Our Services:

We may use your information to promote our services or third-party services through marketing communications, contests, or promotions, with your consent where required.

3How we share Personal Information

We may share your information in the following circumstances:

Service Providers:

We engage service providers that help us provide, support, and develop the services and understand how they are used. We share your information with these service providers as necessary to enable them to provide their services. These providers will access, process, or store personal information only in the course of performing their duties to us. These providers include hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers.

For example, these service providers serve to: (i) support core app functionalities like social sharing, account authentication, push notifications, and real-time communication; (ii) optimize app performance and ensure security through monitoring and anomaly detection; (iii) facilitate data analysis and marketing optimization for improved user engagement and advertising effectiveness.

Affiliates:

We may share your information with our affiliates, ensuring that they handle your information in a manner consistent with this Privacy Policy.

Third Parties You Share Information with:

Our services allow you to share information with third parties. For example, you can share your conversations with others via the share function. Information you share with third parties is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.

Corporate Transactions:

In the event of a corporate transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or a portion of our business, your information may be shared with third parties. If such a transaction involves the transfer of your personal information, we will require the new holder of your personal information to continue to be bound by this policy. Otherwise, we will require the company, organization, or individual to obtain your consent again.

Legal Obligations and Rights:

We may share your information with government authorities or other third parties if we have good faith belief that it is necessary to: (i) comply with applicable law, legal process or government requests, as consistent with international standards; (ii) protect and defend the rights, property, and safety of us, users and public as well as the safety, security of our products, employees, users; (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) detect or prevent fraud or other illegal activity; (v) protect against legal liability.

4Your Rights and Choices

You have the rights to access, rectify or update, transfer, delete your personal information as well as restrict how we process, withdraw your consent, lodge complaints before the competent authorities and potentially others. You can exercise some of these rights directly through settings or through your account if you have registered. Additionally, your device may offer settings that allow you to manage the information we collect. For instance, you can decide whether to permit us to access your mobile advertising identifier through the settings on your Apple or Android device.

If you prefer not to receive marketing or advertising emails, you can simply use the “unsubscribe” link or mechanism provided in those emails. If you are unable to exercise your rights through the methods mentioned above, please submit your request through info@ceresman.com.

If you choose to delete your account, you will not be able to reactivate your account or retrieve any of the content or information in connection with your account.

A note about accuracy:

Services like Prismer generate responses by analyzing a user’s request and predicting the words that are most likely to follow. However, the most probable words may not always be factually accurate. As a result, you should not assume that the output from our models is factually correct. If you find that our output contains inaccurate information about you and you wish to request a correction or removal of that information, please contact us. We will review your request in accordance with applicable laws and the technical capabilities of our models.

5Information Security

We are fully aware that the security and confidentiality of your personal information are of utmost importance to you. We will endeavor to avoid collecting irrelevant user information and will take reasonable technical and organizational measures to protect your personal information from unauthorized access, public disclosure, use, modification, damage, or loss, including but not limited to:

Data Encryption:

We will use industry-leading encryption algorithms to encrypt users’ personal information, ensuring that even if the data is obtained by unauthorized third parties, they will not be able to decipher the actual information of the users.

Data Transmission Security:

We use encryption technology to provide reliable encrypted protection for communication between users and servers, ensuring that data is not intercepted or tampered with during transmission.

System Security Protection:

We regularly conduct security checks and vulnerability patches on servers and systems to prevent hacker attacks and virus intrusions.

Institutional Safeguards:

We have established a dedicated data protection department and appointed a person in charge to be responsible for the protection of users’ personal information. We regularly provide training and education on personal information protection to our employees to ensure that all staff understand and value the protection of users’ personal information. We strictly limit employees’ access to user data, allowing only specific employees to access relevant data when necessary for business purposes. We also monitor and assess employees who access users’ personal information, and take prompt action if any improper behavior is detected.

Data Backup:

We regularly back up users’ personal information data and store the backup data in different physical locations to reduce the risk of data loss due to accidents or disasters.

Data Breach Alert:

We have set up a real-time monitoring system to monitor abnormal data access and leakage situations. Once signs of data leakage are detected, we will immediately take measures to stop the leakage, promptly identify the cause, and develop corresponding improvement measures.

Please note that due to the limitations of technical and management means, although we have taken the above measures and made every effort to improve the security level, we cannot guarantee absolute security. Also, we cannot guarantee the effectiveness of privacy settings or security measures on third parties related to the services. Therefore, you should take special care in deciding what information you send to us. We strongly recommend that you take more proactive security measures together with us, such as refusing to lend accounts, disclose verification codes, or upload sensitive information, which are high-risk operations.

We have developed a cybersecurity incident emergency response plan. In the unfortunate event of a personal information leak or other security incidents, we will immediately activate the emergency response plan to take measures to prevent the expansion of harm. We will promptly inform you of the basic situation of the security incident, the potential impact, and the remedial measures we have taken through means such as telephone or push notifications. When it is difficult to notify each individual whose personal information is affected, we will issue a public announcement in a reasonable and effective manner. At the same time, we will also report the relevant situation to the regulatory authorities, cooperate with the investigation, and hold the responsible parties accountable for their legal responsibilities.

6Retention

We store your information as long as necessary to provide the services, fulfill the purposes outlined in this policy and other legitimate business purposes (such as service improvement, resolving disputes, safety or security), comply with legal obligations. Retention periods vary based on factors such as information type, sensitivity, and legal requirements. For example, account, input, and payment information are retained while your account is active. Violation-related information is retained until the violation is resolved. Also, in some cases, the length of time we retain data depends on your settings.

Your personal information may be transferred to and stored on servers located outside your country of residence. We store the information we collect in secure servers located in the People’s Republic of China. When cross-border transfers are necessary, we will implement appropriate safeguards, consistent with applicable data protection laws, to ensure your information is protected for the purposes outlined in this policy.

7Children

Our Services are not directed to, or intended for, children under 14. We do not knowingly collect information from children under 14. If you have reason to believe that a child under 14 has provided information to us through the services, please contact info@ceresman.com. We will investigate any notification and, if appropriate, delete the information in time.

If you are 14 or older but under 18, you should read and agree to this policy together with your parents or other guardians before using our Services.

8Privacy Policy Updates

We may update this policy from time to time as required. When we do, we will publish an updated version and effective date on this page, or by providing any other notice required by applicable law. We recommend that you review the updated policy each time you access the services to stay informed of our privacy practices.

9Contact us

Contact Information for Suggestions:

You can provide suggestions regarding this policy or our personal information management practices directly through the feedback features built into our products and services.

Contact Information for Policy Comments, Complaints, or Reports:

Please send detailed comments, complaints, or reports concerning this policy or our personal information management practices to info@ceresman.com.

10Supplemental Terms - Jurisdiction-Specific

European Economic Area (“EEA”), Switzerland, and UK

If you are using the services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

Legal bases for processing

We use your personal data only as permitted by law. Our legal bases for processing your personal data described in this policy are described in the table below.

Purpose of processingPersonal information categoriesLegal bases
To create and manage your account, provide a seamless and convenient login experience, and enable you to interact with our services, such as engaging in conversations and accessing various features.- Account Information- Where necessary to perform a contract with you when we provide and maintain our services.
To identify areas for improvement, develop new features, and enhance the overall user experience. This includes training and refining our underlying technology, such as machine learning models and algorithms.- User Content- Where necessary to pursue our legitimate interests in identifying and resolving issues with the platform and enhancing its functionality; and to conduct research and safeguard personal data through aggregation or anonymization, in line with the principles of data minimization and privacy by design.
To inform you of changes to your services- Account Information- Your consent when we ask for it to process your personal data for a specific purpose to provide services.
To comply with our legal obligations, or as necessary to perform tasks in the public interest, or to protect the vital interests of our users and other people. This could include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life.- Account Information- Where necessary to comply with a legal obligation: This applies in situations where we are required to take steps to ensure the safety of our users, or to comply with a valid legal request, such as an order from law enforcement agencies or courts. It also applies when we are fulfilling our obligations under applicable laws, or when we are protecting the rights, safety, or property of ourselves, our affiliates, our users, or third parties.
To detect and prevent fraudulent activities, security abuse, and other security threats. This helps us maintain the integrity and stability of our platform.- Account Information- Where necessary to comply with a legal obligation when we use your personal data to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.

Data storage

It is important to note that our servers are situated in the People’s Republic of China. Consequently, when you utilize our services, your personal data may be processed and stored on our servers located in the People’s Republic of China. This could involve either a direct submission of your personal data to us or a transfer of your data conducted by us or a third-party.

Your rights

You have the following rights:

  • The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
  • The right to request proper rectification or erasure of your personal data or restriction of the processing of your personal data;
  • Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible (data portability);
  • Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time (withdrawal will not impact the lawfulness of data processing activities that have taken place before such withdrawal);
  • The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;
  • The right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
  • The right to request the restriction of the processing of your information where (i) you are challenging the accuracy of the information, (ii) the information has been unlawfully processed, but you are opposing the deletion of that information, (iii) you need the information to be retained for the pursuit or defense of a legal claim, or (iv) you have objected to the processing and you are awaiting the outcome of that objection request;
  • The right to object to processing your personal data for direct marketing purposes; and
  • The right to lodge complaints before your local data protection authority.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Please contact us if you would like to exercise any of your rights.