Workspaces
Customers choose their users, permissions, content, and many retention or sharing decisions. Workspace administrators may access and manage Customer Content.
Legal
This Policy explains how PRIZ handles personal information across our website, Platform, workspaces, PRIZ Hub community, and AI-assisted features.
Important distinction. Information in a private Customer workspace is not the same as content a user deliberately publishes to PRIZ Hub. Public Content can be viewed, indexed, copied, and shared by others. Review the selected audience before publishing or sharing.
This Privacy Policy (the “Policy”) explains how PRIZ Guru, Inc. (“PRIZ,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects Personal Information when you visit or interact with PRIZ websites, use the PRIZ Platform and workspaces, participate in PRIZ Hub, communicate with us, or use AI-assisted features (collectively, the “Service”).
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identifiable person or household. It includes “personal data” and similar terms under applicable privacy law. De-identified or aggregated information that cannot reasonably be linked to a person is not Personal Information where applicable law treats it as non-personal.
Customers choose their users, permissions, content, and many retention or sharing decisions. Workspace administrators may access and manage Customer Content.
Prompts and relevant context must be processed to produce an AI response or preview. PRIZ uses OpenAI and xAI as contracted AI providers; neither uses PRIZ or Customer data processed through the Service to train its models.
A preview is not a saved Problem Candidate. Choosing Save as Draft may store the structured candidate, relevant source context, and extracted evidence in the workspace.
Content you choose to publish is public. Do not publish trade secrets, confidential Customer material, or Personal Information without authority.
This Policy applies to priz.guru and related PRIZ websites; app.priz.guru and the PRIZ innovation and engineering problem-solving platform; Customer workspaces and projects; PRIZ Hub at hub.priz.guru; AI Features such as the AI Assistant, AI-assisted guided facilitation, Shape Investigation, and related generation or analysis; sales, support, training, and events; and other PRIZ services that link to this Policy.
This Policy does not govern a third-party service or website, even if it links to or integrates with PRIZ. It also does not govern employee or applicant information handled under a separate notice.
PRIZ acts as a controller, business, or organization determining the purposes and means of processing for information used for its own business purposes, such as website visitors, account registration, workspace administration, billing, sales and marketing, support, product analytics, service security, fraud prevention, legal compliance, and operation of the PRIZ Hub community.
For Personal Information included in Customer Content where a Customer determines why and how that information is processed, PRIZ generally acts as a processor or service provider on the Customer’s behalf. The Customer is responsible for its instructions, lawful basis, notices, permissions, and responses to individuals. PRIZ processes that information under the Customer agreement, any data processing addendum, the Customer’s use and configuration of the Service, and applicable law.
If your Personal Information appears in Customer Content, direct your request to the relevant Customer first. We will assist the Customer or route the request as required by law and contract.
A Customer’s own privacy notice may also apply to its workspace. If this Policy conflicts with a signed customer data processing agreement about Customer Content, that agreement controls for the Customer to the extent of the conflict.
We may collect your name, email address, password or authentication information, profile photo, title, organization, industry, department, geography, preferences, workspace membership, role, permissions, subscription plan, and account status. If single sign-on or an identity provider is used, we may receive identifiers and authentication attributes from that provider.
We process content that users or Customers submit to the Platform, including project titles and descriptions; technical observations; process, product, or system information; measurements and evidence; investigation notes; hypotheses; problem statements; tasks; ideas; decisions; comments; files and attachments; reports; creative-tool inputs and results; team and stakeholder information; Problem Candidates; source context; and related metadata.
Customer Content can contain Personal Information about Authorized Users, employees, contractors, customers, suppliers, project stakeholders, or other people. PRIZ does not require sensitive Personal Information for ordinary engineering workflows, but users may include it. Customers and users should minimize Personal Information and avoid highly sensitive or regulated data unless a written agreement and Service configuration support it.
When you use an AI Feature, we process your prompts, submitted text, selected project or workspace context, relevant Customer Content, feature settings, and the resulting Output. We may also process ratings, edits, approvals, saves, rejections, and other feedback about the Output. This can include Shape Investigation input and preview data, Problem Candidate fields, AI Assistant conversations, extracted evidence, summaries, classifications, scores, questions, research requests, and suggested actions.
We collect profiles, team information, projects, descriptions, images, problem statements, tools, ideas, solutions, comments, reactions, publication settings, topic tags, update dates, and other material submitted to or generated through PRIZ Hub. Content intentionally published to PRIZ Hub is Public Content.
We collect plan, seat, invoice, credit-note, transaction, tax, billing-contact, payment-status, renewal, cancellation, and limited payment-method information. This may include invoice and credit amounts, whether a payment succeeded or failed, whether a saved payment method is approaching expiration, and records about billing communications, such as message type and version, recipient address, provider message identifier, delivery status, timestamp, retry status, and information used to prevent duplicate notices. Payment card or bank details are generally collected directly by our payment processor rather than stored by PRIZ, although we may receive a token, card brand, last four digits, billing address, expiration information, or transaction status.
We may collect IP address, browser and device type, operating system, language, referring and exit pages, timestamps, pages or features used, clicks and navigation, workspace and project identifiers, session information, approximate location derived from IP address, cookie or device identifiers, performance data, crash reports, request logs, and security events.
PRIZ retains operational logs and analytics containing account, event, code, and technical information, such as user or workspace identifiers, event names, status information, exceptions, errors, performance information, request metadata, and diagnostic details. PRIZ configures these systems primarily to understand use, operate and secure the Service, and diagnose problems rather than to collect the contents of Customer projects. Depending on the event, error, integration, and configuration, diagnostic records may nevertheless contain limited request or error context or other Personal Information. Persistently saved Platform data may be stored in PRIZ’s main application database or associated object storage, depending on its type.
We collect information you provide when requesting a demo, contacting sales or support, attending training or an event, completing a survey, subscribing to communications, or otherwise interacting with us. This may include contact details, organization, role, interests, messages, attachments, call or meeting notes, and support diagnostic information.
We and our providers may use cookies, pixels, local storage, tags, SDKs, and similar technologies to authenticate users, remember preferences, secure the Service, measure performance, understand use, and—where enabled and legally permitted—support communications or advertising. Section 12 explains these technologies and choices.
Unless PRIZ has expressly agreed in writing, do not provide government-classified information; ITAR-controlled or similarly restricted military technical data; payment-card data outside designated payment fields; protected health information; biometric identifiers; genetic information; account credentials for third-party services; Social Security or national identification numbers; or other highly sensitive information not needed for the intended Service workflow.
We collect Personal Information:
Workspaces organize Customer users, projects, roles, permissions, billing, and content. Workspace administrators may access, manage, export, restrict, or delete content and may change an Authorized User’s access. Content is available to people selected by the user or Customer through roles, invitations, sharing links, publishing controls, or integrations.
When you submit investigation text or other context to Shape Investigation, PRIZ and authorized providers process that material to generate a structured preview. Processing may include extraction, summarization, classification, scoring, organization of evidence, and generation of proposed Problem Candidate fields.
Before Save as Draft: the submitted content must be transmitted and processed to return the preview. PRIZ does not save the readable submission or preview as a workspace Problem Candidate in its main application database before you select Save as Draft. If you refresh or leave the page, the unsaved browser preview is removed and ordinarily must be entered again. Providing the feature may involve processing by OpenAI or xAI, observability or diagnostic services, and temporary staging of extracted images. If you select Find Similar Projects, PRIZ may retain a non-readable content hash and numerical embedding as described in Section 10. The preview has not yet been saved as Customer Content merely because it appears on screen.
After Save as Draft: the structured candidate and information identified by the interface—potentially including relevant source context and extracted evidence—are stored in encrypted form in PRIZ’s main application database, become Customer Content in the Customer workspace, and are available according to workspace permissions and retention choices. PRIZ configures its operational logging and analytics to avoid intentionally copying the contents of saved projects, subject to the diagnostic-processing qualification in Section 2.6.
If the feature changes this boundary or the fields saved, PRIZ will update the interface or relevant notice so users can understand what occurs before and after saving.
The AI Assistant and other AI Features may process project context to answer questions, assist research, suggest tools, provide feedback, generate reports or summaries, or support structured methods. If you save a conversation or Output to a project, it becomes Customer Content. If the interface indicates that a conversation is automatically saved, it is stored according to that notice and workspace settings.
Publishing a project or other content to PRIZ Hub makes it public. Public Content may show profile or team information, project material, comments, topic tags, counts, and update dates. It may be viewed without an account, indexed by search engines, quoted or copied by others, and remain in third-party caches after you remove it. PRIZ uses Public Content to operate, moderate, display, and search PRIZ Hub. Hub publication does not authorize PRIZ to reuse Public Content in external websites, newsletters, social media, presentations, advertising, or other public marketing channels; any such external promotional use requires separate affirmative permission from the authorized project owner.
After a project is first published, eligible later changes may be republished to PRIZ Hub automatically approximately four hours after the last change. Choosing Save a draft saves the current Hub publication form values, but it does not unpublish an already-public project or pause its scheduled automatic republication. Users may use Update to publish the current changes immediately or Unpublish to remove the project from PRIZ Hub. Users should review the current publication status before adding sensitive information to a project that remains public.
When a contributor is first publicly associated with a Hub project, including when the contributor is added to an already-public project, PRIZ uses the contributor’s account and notification information to send a notice identifying the project and explaining public access, search indexing and caching, attribution, identity settings, and the removal path. PRIZ records limited delivery and retry information to provide the notice and prevent duplicates. Private profile fields are not made public unless the contributor separately enabled them. Removing the contributor removes that person’s public attribution from the Hub project and its PRIZ-controlled search representation.
When an administrator rejects a new pending Hub comment or discards a proposed edit, PRIZ uses the author’s account and notification information to send a brief moderation notice. For a discarded edit, the notice explains that the previously approved version remains public. PRIZ records limited, non-sensitive delivery and retry information to provide the notice and prevent duplicates and does not include unnecessary rejected content or internal moderator details in the notice.
Viewers may report public Hub projects and approved public comments through the in-product Report action or use the Contact Us form as a fallback. A report may include the reported content’s type and identifier, public URL, selected category, optional details, timestamp, and reporter identity or contact information when available. PRIZ uses this information to route, investigate, document, and resolve the report. PRIZ does not display the reporter’s identity to the project owner, contributors, commenter, or public. Reports are reviewed by authorized personnel and do not automatically remove reported content.
Collaboration features disclose information to the users, teams, or recipients selected by you or the Customer. Automatically generated reports and exports may compile Personal Information and Customer Content from several parts of a project. Review the audience and contents before sharing outside the workspace.
| Purpose | Examples | Typical legal basis where required |
|---|---|---|
| Provide and administer the Service | Create accounts and workspaces, authenticate users, process Customer Content, run projects and tools, collaborate, save content, publish requested Public Content, provide support, and process payments. | Performance of a contract; steps requested before a contract; Customer instructions where PRIZ is a processor. |
| Provide AI Features | Transmit prompts and context, generate previews and Output, save requested drafts or conversations, and support human review. | Performance of a contract; user request; Customer instructions; consent where required for a particular use. |
| Secure and protect | Prevent fraud and abuse, control access, monitor security events, debug incidents, enforce terms, and protect users, PRIZ, and others. | Legitimate interests; legal obligation; protection of rights and safety. |
| Operate, analyze, and improve | Measure performance, understand feature use, fix errors, plan capacity, test changes, and improve usability and reliability. | Legitimate interests; consent for non-essential cookies where required. |
| Communicate | Transactional notices, service updates, renewal and cancellation messages, receipts, credit notes, payment-failure and expiring-payment-method notices, security alerts, support responses, events, surveys, and requested information. | Performance of a contract; legitimate interests; legal obligation. |
| Market PRIZ | Newsletters, product announcements, offers, lead management, and measuring campaign effectiveness. | Consent where required; otherwise legitimate interests, subject to opt-out rights. |
| Comply and defend | Tax and accounting, sanctions checks, lawful requests, disputes, audits, regulatory obligations, and establishing or defending legal claims. | Legal obligation; legitimate interests; establishment, exercise, or defence of legal claims. |
Where we rely on legitimate interests, those interests include operating a secure and useful business service, supporting Customers and users, improving product performance, protecting rights, and responsibly developing our business. We consider the impact on individuals and do not rely on an interest where overridden by applicable privacy rights.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already completed and may limit the associated feature.
PRIZ uses OpenAI and xAI as its AI service providers across the Platform. Depending on the feature, PRIZ may send one of these providers the prompt, selected Customer Content, relevant project context, instructions, and limited technical metadata. The provider returns generated or analyzed content to PRIZ. PRIZ uses contractual and configuration controls appropriate to the information and intended processing.
Provider logging, abuse monitoring, processing location, and temporary retention may vary by provider, feature, and enterprise configuration. Current material details may be supplied in product notices, a Customer agreement or data processing addendum, or PRIZ’s then-current subprocessor information.
PRIZ does not treat ordinary use of an AI Feature as consent to train a generalized AI model. PRIZ will not use non-public Customer Content to train a generalized AI model unless the relevant Customer has affirmatively agreed after clear notice and any consent required by law has been obtained.
Under PRIZ’s provider arrangements, neither OpenAI nor xAI uses PRIZ data or Customer data processed through the Service to train its models.
PRIZ may use feedback that you intentionally submit, and may use aggregated or de-identified operational information that cannot reasonably identify a person or Customer, to evaluate and improve the Service. PRIZ does not attempt to re-identify information treated as de-identified except to test whether de-identification controls are effective or as permitted by law.
Use of non-public Customer Content by OpenAI and xAI is limited by the applicable provider terms, PRIZ configuration, and contractual instructions. Customers may request current provider and subprocessor information as described in Section 8.
AI Output may be inaccurate, incomplete, outdated, or biased. PRIZ labels or otherwise identifies direct AI interactions and AI-assisted workflows where appropriate. The Service is designed to support human judgment, not replace it. Users remain responsible for reviewing Output, source evidence, and relevant context before saving, approving, publishing, converting a candidate into a project, or making an engineering, safety, operational, employment, legal, financial, or business decision.
PRIZ does not intend its AI Features to make solely automated decisions about individuals that produce legal or similarly significant effects. The Terms prohibit such use unless lawful, expressly agreed, and supported by appropriate safeguards. If PRIZ itself introduces a feature that makes such a decision, we will provide any explanation, notice, human review, or challenge process required by law before the feature is used for that purpose.
We may disclose Personal Information as follows:
PRIZ does not sell Personal Information for monetary consideration. If a disclosure through analytics or advertising technology is legally treated as a “sale,” “sharing,” or targeted advertising, applicable opt-out rights are described in Sections 12 through 14.
PRIZ uses service providers to operate a global software service. Relevant categories include cloud hosting and storage; AI model and AI infrastructure services; database and content delivery; authentication and identity; monitoring, logging, error tracking, and security; product and website analytics; email, chat, support, and customer relationship management; billing and payment; and professional services.
PRIZ uses DigitalOcean to host the PRIZ application, encrypted main application database, and backups in DigitalOcean’s San Francisco, California, United States data-center region.
As of the Last updated date, PRIZ’s AI providers are OpenAI and xAI. They process prompts, relevant context, and limited technical information to provide requested AI functionality. Neither provider uses PRIZ or Customer data processed through the Service to train its models.
PRIZ evaluates providers in proportion to the nature and risk of the processing and uses contracts intended to require appropriate confidentiality, security, purpose limitation, deletion or return, and assistance obligations. No provider arrangement eliminates all risk, and provider practices can change.
Enterprise Customers may request PRIZ’s then-current subprocessor list through our contact page. Where a Customer agreement or applicable law requires advance notice of a new subprocessor or an objection process, PRIZ will follow that agreement or law.
PRIZ’s application, encrypted main application database, and backups are hosted in DigitalOcean’s San Francisco, California, United States data-center region. PRIZ personnel located outside the United States may access Customer Content only through a dedicated virtual private network (“VPN”) hosted in San Francisco, California. The VPN secures and routes the connection through San Francisco, but authorized personnel may still view or otherwise process information from the country where they are physically located. Depending on applicable law, this may constitute international processing or access.
OpenAI, xAI, and other service providers may process limited information in the United States or other countries where they are authorized to operate. Those countries may have privacy laws or government-access rules that differ from those in your jurisdiction. PRIZ therefore does not represent that every processing operation occurs only in the San Francisco region.
The transfer terms applicable to a particular Customer or provider depend on the parties, their roles, and the countries involved. Where applicable law requires a transfer mechanism, relevant contractual terms may use an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another legally recognized safeguard. Customers in the EEA, United Kingdom, or Switzerland should contact [email protected] to confirm the terms applicable to their account before submitting Personal Information that requires a particular transfer mechanism.
Canadian organizations remain accountable for Personal Information transferred to a provider for processing. PRIZ uses contractual or other measures intended to provide a comparable level of protection and makes information about material cross-border processing available through this Policy, Customer agreements, and subprocessor information.
You may request information about an applicable transfer safeguard through our contact page. We may provide a redacted copy where necessary to protect commercial or security information.
We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, the Customer’s documented instructions, and legal, security, accounting, dispute, and enforcement needs. The actual period depends on the type of information, feature, Customer agreement, account status, user choices, sensitivity, legal requirements, and whether the information is needed to protect the Service.
| Information | Typical retention approach |
|---|---|
| Account, profile, and workspace administration | For the life of the account or Customer relationship, followed by a reasonable closeout period and any period needed for security, disputes, legal compliance, or recordkeeping. |
| Saved Customer Content | Depending on its type, stored in PRIZ’s encrypted main application database or associated object storage, including for uploaded project files and profile images. Retained according to Customer instructions, workspace controls, and the Customer agreement. PRIZ does not intentionally use operational logs or analytics as storage for Customer project contents, subject to the diagnostic-processing qualification in Section 2.6. Content may remain until a user or administrator deletes it or the workspace ends, subject to export periods, legal holds, and backup cycles. |
| Shape Investigation input before Save as Draft | PRIZ does not save the readable pre-save submission or preview as Customer Content in its main application database unless the user selects Save as Draft. Refreshing or leaving the page removes the unsaved browser preview. If the user selects Find Similar Projects, PRIZ may cache a non-readable SHA-256 content hash and numerical embedding as a search optimization; that cache does not contain the readable submission or identifiers for the user, Customer, workspace, team, or candidate. Cache entries are refreshed when reused and deleted after more than 30 days of inactivity by an automated cleanup that runs at least daily. AI providers, observability services, and temporary image staging may process or retain limited records as described in Sections 6, 8, and this Policy. |
| Saved Problem Candidates, source context, and extracted evidence | Treated as Customer Content and stored in encrypted form in PRIZ’s main application database. PRIZ does not intentionally use operational logs or analytics as storage for this content, subject to the diagnostic-processing qualification in Section 2.6. Retained until deleted, the Customer instructs otherwise, the workspace ends, or the applicable agreement requires deletion, subject to backup and legal exceptions. |
| AI Assistant conversations and other Output | If saved to a project, treated as Customer Content and stored in encrypted form in PRIZ’s main application database. PRIZ does not intentionally use operational logs or analytics as storage for prompts or responses, subject to the diagnostic-processing qualification in Section 2.6. Provider-side processing and any temporary provider retention are addressed separately under Sections 6 and 8. |
| Public Content | Until unpublished or deleted, followed by a reasonable period for removal from active systems. Search-engine caches, copies made by others, legal records, and backups may persist longer. |
| Usage, analytics, diagnostic, and security data | May contain account or workspace identifiers, events, exceptions, errors, request metadata, performance information, and diagnostic details. These systems are not intended to store the contents of Customer projects, but limited request or error context or other Personal Information may be captured depending on the event, integration, and configuration. Retained for periods appropriate to analytics, performance, security, fraud prevention, and incident investigation. Aggregated or de-identified information may be retained longer. |
| Billing, transaction, tax, and contract records | Includes relevant invoices, credit notes, transaction and payment-status information, and versioned delivery or retry evidence for billing communications. Retained for the Customer relationship and the period required for tax, accounting, audit, collections, dispute, fraud prevention, and legal obligations. |
| Sales, support, and marketing records | For the relationship, request, or campaign and a reasonable follow-up period; suppression records may be retained to honor opt-outs. |
Deletion from active systems does not always mean immediate erasure from backups. Backup copies are isolated from ordinary use and removed or overwritten according to backup cycles, unless preserved for a legal hold or security investigation. We may retain the minimum information necessary to document a request, enforce agreements, prevent fraud, comply with law, or establish or defend claims.
PRIZ uses administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, alteration, disclosure, or destruction. Depending on its type, persistently saved User Content may be stored in PRIZ’s encrypted main application database or associated object storage, including for uploaded project files and profile images. PRIZ maintains operational logs and analytics separately from the principal stores for Customer Content and configures them primarily for account, event, performance, diagnostic, and security information; Section 2.6 describes the possibility that limited Personal Information or request or error context may appear in those records. PRIZ personnel located outside the United States may access Customer Content only through PRIZ’s dedicated VPN hosted in San Francisco, California. Safeguards are selected based on factors such as sensitivity, volume, context, available technology, and risk. They may include access controls, authentication options, logging and monitoring, secure development and change practices, provider diligence, staff confidentiality obligations, incident response, and backup or recovery measures, as appropriate to the Service and plan.
PRIZ maintains an internal privacy and security review process that evaluates material data flows, service providers, access controls, retention practices, product changes, and identified risks. We use those assessments to prioritize and improve safeguards as the Service, technology, and applicable requirements evolve. References in this Policy to laws, frameworks, internal reviews, or generally recognized practices do not state or imply that PRIZ has obtained a regulatory approval, independent certification, or third-party attestation unless PRIZ expressly identifies the issuing body and scope.
Report a suspected security incident, account compromise, or vulnerability to [email protected]. Please do not include passwords, access tokens, unnecessary Personal Information, or exploit code that could endanger other users in an initial report.
No method of transmission or storage is completely secure, and PRIZ cannot guarantee absolute security. Security features may differ by plan or deployment. Customers and users are responsible for secure devices and networks, strong and unique credentials, multi-factor authentication when available, appropriate role and sharing settings, and prompt notice of suspected compromise.
If a security incident affects Personal Information, PRIZ will investigate and provide notices to Customers, individuals, or authorities as required by applicable law and contract.
Depending on current configuration, PRIZ may use providers such as Google Analytics, Mixpanel, Amplitude, HubSpot, Sentry, New Relic, or comparable analytics, communications, and diagnostic services. These providers may receive online identifiers, account or workspace identifiers, contact or profile information, event information, device and browser information, approximate location, and diagnostic details, depending on the integration. Providers and configurations can change. The then-current cookie banner, preference control, product interface, and subprocessor information provide more specific information where available.
You can use any cookie-preference control made available on a PRIZ site and your browser or device settings to reject or delete non-essential cookies. Blocking necessary cookies may prevent parts of the Service from working. PRIZ seeks to request consent before using non-essential technologies and to make withdrawal available where applicable law requires those controls. You may contact [email protected] if a preference control is unavailable or does not appear to reflect your choice.
You may send a legally recognized opt-out preference signal, such as Global Privacy Control (“GPC”). PRIZ treats such signals as an opt-out of sale, sharing, or targeted advertising for the browser or device to the extent applicable law requires and the signal can be detected by the relevant PRIZ property. Because browser “Do Not Track” signals do not have a uniform legal meaning, we do not respond to them except where required.
You may be able to review or update profile information, manage notifications, save or delete content, unpublish Public Content, export information, or close an account through the Service. Workspace administrators may control these functions for Customer accounts.
You may unsubscribe from marketing email through the link in the message or by contacting us. We may continue to send transactional, billing, security, and legal communications. We retain a suppression record to respect an unsubscribe request.
Depending on where you live and applicable law, you may have rights to:
Submit a request by email to [email protected] with “Privacy Request” in the subject line, through our contact page, or by mail to the address in Section 18. Describe the right you wish to exercise and the account, Customer, or context involved.
We may verify your identity and authority using information proportionate to the request. An authorized agent may submit a request where permitted, but we may require proof of authority and direct confirmation from you. We will not discriminate against you for exercising a privacy right.
Rights are not absolute. We may deny or limit a request where permitted by law, including to protect another person, preserve legal privilege, maintain security, prevent fraud, comply with retention duties, or where we cannot verify the request. We will explain a denial and available appeal or complaint options when required.
If a Customer controls the Personal Information, submit your request to that Customer. PRIZ will assist the Customer as required by contract and law. If you send the request to PRIZ, we may refer it to the Customer unless prohibited.
Where applicable, PRIZ handles Personal Information under the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial private-sector privacy laws, including British Columbia’s Personal Information Protection Act. PRIZ is accountable for Personal Information under its control, identifies purposes, limits collection and use to appropriate purposes, uses safeguards, supports access and correction, and provides a process to challenge compliance.
You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may prevent use of a feature. You may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial commissioner after giving PRIZ a reasonable opportunity to address the concern.
If the GDPR, UK GDPR, or Swiss data-protection law applies, Sections 5 and 9 describe our typical legal bases and international transfer safeguards. Subject to applicable conditions, individuals may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You also have the right to complain to the supervisory authority where you live, work, or believe an infringement occurred.
PRIZ evaluates the application of these laws to its activities and maintains a risk-based internal readiness and improvement process. This statement describes PRIZ’s governance approach; it is not a claim of certification, regulatory endorsement, or universal compliance with every requirement in every jurisdiction. Nothing in this paragraph limits rights or obligations that apply under law.
Right to object. Where PRIZ relies on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time. We will stop direct marketing and will stop other processing unless we demonstrate compelling legitimate grounds or need the information for legal claims, as applicable.
PRIZ does not use AI Features to make solely automated decisions with legal or similarly significant effects on individuals as part of PRIZ’s own controller activities. If that changes, we will provide required information about the logic, significance, consequences, and available human review.
Residents of California and other U.S. states may have rights described in Section 13 if PRIZ is subject to the applicable law. “Personal Information” in this subsection includes “personal data” under those laws.
| Category | Examples | Purposes | Categories disclosed to |
|---|---|---|---|
| Identifiers and contact information | Name, email, account ID, IP address, organization, billing contact. | Accounts, Service delivery, billing, security, support, communications. | Customer administrators; cloud, identity, communications, support, security, and payment providers. |
| Commercial information | Plan, subscription, purchases, renewals, invoices, transaction status. | Provide subscriptions, accounting, support, analytics, compliance. | Customer administrators; payment, billing, accounting, and professional advisers. |
| Internet or electronic activity | Pages and features used, clicks, session, browser, device, logs, cookies. | Operate, secure, analyze, troubleshoot, and improve the Service. | Hosting, security, monitoring, analytics, and communications providers. |
| Professional and organizational information | Title, employer, team, role, industry, department, project role. | Workspace administration, collaboration, sales, support, community profiles. | Customer users; support and CRM providers; the public when deliberately published. |
| User, Customer, and community content | Projects, investigation notes, files, ideas, tasks, comments, Public Content. | Provide Platform, workspace, collaboration, reporting, Hub, and support functions. | Authorized users; hosting and support providers; the public for Public Content. |
| AI input and Output | Prompts, context, previews, Problem Candidates, conversations, summaries, classifications, feedback. | Provide AI Features, save requested content, security, troubleshooting, and improvement as described in Section 6. | AI, cloud, monitoring, and support providers; Authorized Users; the public only when deliberately published. |
| Inferences | Suggested interests, tools, classifications, scores, or likely preferences generated from other information. | Personalize or provide requested features and assist structured problem-solving. | Authorized Users and service providers supporting the relevant feature. |
| Sensitive Personal Information | Account credentials; content a user submits that may reveal sensitive traits or regulated information. | Authentication and providing the user-requested Service. Users are instructed not to submit unnecessary sensitive information. | Identity, hosting, security, AI, and support providers as needed for the requested function. |
Sources are described in Section 3. Retention criteria are described in Section 10. We do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about a person or for purposes that require a right to limit under California law, unless we first provide required notice and choice.
PRIZ does not sell Personal Information for money. PRIZ does not knowingly sell or share the Personal Information of anyone under 16. If PRIZ’s use of analytics or advertising technology is treated as “sharing,” targeted advertising, or a sale under applicable law, you may opt out through an available cookie or privacy control, a recognized opt-out preference signal such as GPC, or a Privacy Request. Opt-out choices may be limited to the browser or device from which they are submitted unless linked to a verified account.
California residents may request the categories or specific pieces of Personal Information collected, categories of sources, business purposes, categories of third parties, and correction or deletion; may opt out of sale or sharing; may limit certain uses of Sensitive Personal Information; and may use an authorized agent, subject to verification and legal exceptions. PRIZ will not discriminate for exercising these rights. Other U.S. state residents may have comparable rights and, where applicable, a right to appeal.
Enterprise arrangements may include additional security features, authentication options, data-location commitments, private-cloud or Customer-managed deployment, support terms, retention instructions, audit materials, or a data processing addendum. Those features and commitments apply only when stated in a signed Customer agreement or enabled for the applicable plan.
For a private-cloud, on-premises, or Customer-managed deployment, the Customer may control infrastructure, logs, backups, access, integrations, or deletion that PRIZ does not control. The Customer’s privacy and security documentation should explain those responsibilities. PRIZ’s role is limited to the information and systems PRIZ actually processes.
Customers are responsible for completing any legal, security, privacy, export-control, or sector-specific assessment needed for their use, including determining whether a data processing addendum, privacy impact assessment, algorithmic impact assessment, or specialized agreement is required.
The Service is not directed to people under 18, and we do not knowingly collect Personal Information from a child through the Service. If you believe a child has provided Personal Information, contact us. We will investigate and delete or otherwise address the information as required by law. A school or educational Customer must not provide access to a person under 18 unless PRIZ has expressly agreed to an appropriate arrangement that addresses consent and child-privacy requirements.
We may update this Policy to reflect changes in the Service, technology, providers, law, or business practices. We will update the “Last updated” date and provide additional notice of material changes as required by law, such as by email, in-product notice, or a prominent website notice. If consent is required for a new use, we will request it before that use.
Privacy contact: Privacy Officer, PRIZ Guru, Inc. — [email protected].
Questions, complaints, and Privacy Requests may be submitted by email to [email protected] or through https://www.priz.guru/contact-us/. Please use “Privacy” or “Privacy Request” in the subject or message and include enough information for us to understand the relevant account, Customer, Service interaction, and request. Security reports should be sent to [email protected].Legal address
PRIZ Guru, Inc.
1007 Orange Street, 4th Floor, Ste 1382
Wilmington, DE 19801
USA
Send privacy correspondence by mail to: Mailing address
PRIZ Guru, Inc.
Attention: Privacy Officer
111 NE 1st St, 8th Floor, 88699
Miami, FL 33132, Miami-Dade
USA
We will respond within the period required by applicable law. If your concern relates to Customer Content controlled by an organization, we may refer you to that Customer.