1. Introduction
PRYZM Inc. (“PRYZM,” “we,” “us,” or “our”) publishes the PRYZM website and mobile application, through which users may purchase, collect, store, and arrange shipment of physical collectible items (together, the “Platform”). This Privacy Policy explains what personal information we collect through the Platform, how we use and share it, and the choices and rights you have regarding it.
This Policy applies to information we collect through the Platform and in related communications. It does not apply to information collected by third parties, including third parties linked from or integrated with the Platform, who have their own privacy practices that we encourage you to review.
By downloading, registering for, or using the Platform, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Platform. We may update this Policy from time to time as described in Section 12.
2. Age Requirements
The Platform is intended for users who are at least 18 years old, consistent with the eligibility requirements in our Terms of Use. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete it as soon as reasonably possible. If you believe a minor has provided us with personal information, please contact us at [email protected] so we can investigate.
3. Information We Collect
We collect information in three ways: information you give us directly, information collected automatically as you use the Platform, and information we receive from third parties who help us operate the Platform.
3.1 Information You Provide to Us
- Account information: name, email address, phone number, date of birth, and a password, when you register.
- Identity verification (“Verification”) information: a government-issued photo ID, a live selfie or short video of your face (used to confirm you match your ID), and related metadata such as the time and location of the Verification attempt. This facial-scan data is biometric information — see Section 3.4 below for how we handle it specifically.
- Payment information: card, bank account, or linked payment-app details needed to add funds or receive a withdrawal. Card and bank details are processed by our payment processor and are not stored on PRYZM's own servers in full, unencrypted form.
- Shipping information: the name and address you provide when requesting an item be shipped to you, and any sales-tax information required to complete that shipment.
- Content you submit: messages to customer support, a profile image if you choose to add one, and any other information you choose to share with us.
3.2 Information Collected Automatically
- Usage data: pages and features you access, purchases and transactions you make, and how you interact with the Platform.
- Device and connection data: IP address, device identifiers, operating system, browser type, and mobile carrier information.
- Location data: general location (for example, derived from your IP address or, where you grant permission, device GPS), used to confirm you are accessing the Platform from an eligible location and to support fraud prevention.
- Cookies and similar technologies: used for functionality, analytics, and — where applicable — advertising. See Section 8.
3.3 Information from Third Parties
We receive information from service providers who help us operate the Platform, including: the results of an identity-verification check from our verification provider; confirmation of a successful or failed charge from our payment processor; and delivery and tracking status from shipping carriers. We may also receive fraud- or risk-related signals from anti-fraud service providers.
3.4 Biometric Information
As part of Verification, we (through our identity-verification provider) collect a facial image and a short “liveness” video to confirm that you are the person shown on your government-issued ID. This is biometric information. Before we collect it, we will present a separate consent screen describing what is collected and why. We use biometric information only to complete Verification and related fraud prevention, and we do not sell biometric information or disclose it except to the service providers who perform Verification on our behalf. We retain biometric information only until the earlier of (a) 90 days after your Verification is completed, or (b) your request that we delete it, and in either case we securely destroy it thereafter unless a longer period is required by law or an unresolved dispute.
4. How We Use Your Information
We use the information we collect to:
- create and maintain your account, and provide the features of the Platform;
- process purchases, pack openings, storage, shipping requests, and withdrawals;
- verify your identity and eligibility, and confirm you are accessing the Platform from an eligible location;
- detect, investigate, and prevent fraud, cheating, and other prohibited conduct;
- communicate with you about your account, transactions, and this Policy, and respond to support requests;
- send you marketing communications, where you have opted in, and in accordance with your preferences;
- comply with legal, tax, and regulatory obligations, including recordkeeping tied to financial transactions; and
- improve and maintain the security and performance of the Platform.
We use location information only to confirm eligibility and to support identity verification and fraud prevention — not for any other purpose.
5. How We Share Your Information
We do not sell your personal information. We may share it in the following circumstances:
- With service providers who perform functions on our behalf, such as our identity-verification provider, payment processor, shipping carriers, cloud hosting provider, and customer-support tooling — each is contractually limited to using your information only to provide services to us.
- With professional advisors and in connection with a corporate transaction, such as a merger, financing, or sale of assets.
- To comply with law, a court order, or a governmental or regulatory request, or to establish or protect our legal rights.
- If we believe it is necessary to protect the safety of PRYZM, our users, or the public, including in connection with fraud or cheating investigations.
- With your consent, or as otherwise described at the time you provide information.
- In aggregated or de-identified form that does not identify you.
If you choose to add a public profile image or username, that information may be visible to other users of the Platform, and you should treat anything you post as public.
6. Cookies and Similar Technologies
We and our service providers use cookies and similar technologies to operate the Platform, remember your preferences, understand how the Platform is used, and, where applicable, to measure the performance of our marketing. We currently use essential and analytics cookies only; we do not use non-essential advertising cookies without your consent. You can control cookies through your browser or device settings; blocking certain cookies may affect how parts of the Platform function.
7. Your Privacy Rights and Choices
Depending on where you live, you may have some or all of the following rights regarding your personal information, subject to legal exceptions (for example, information we must retain for tax, financial, or anti-fraud purposes):
- Right to know / access the personal information we hold about you.
- Right to correct inaccurate personal information.
- Right to request deletion of your personal information.
- Right to receive a copy of certain personal information in a portable format.
- Right to opt out of the sale or sharing of personal information, and of targeted advertising (we do not currently sell personal information).
- Right not to be discriminated against for exercising any of these rights.
To exercise any of these rights, contact us at [email protected]. We will need to verify your identity before acting on most requests, which may involve information similar to that used for account Verification. We will respond within the time required by applicable law.
Even where you request deletion, we may need to retain certain records — such as transaction history, identity-verification records, and communications tied to a financial transaction — for seven years from the date of the transaction, consistent with standard financial recordkeeping requirements, or longer where required by tax, anti-money-laundering, or other legal obligations, or to enforce our Terms of Use against a banned account.
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive consumer privacy law, you have the rights described above under that state's law, including the right to know, correct, delete, and port your personal information, and to opt out of the sale or sharing of personal information and of targeted advertising. Our collection of identity-verification and biometric information may be considered “sensitive personal information” under some of these laws, and you have the right to limit our use of sensitive personal information beyond what is necessary to provide the Platform.
8. Data Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption of payment and Verification data in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential and for using a strong, unique password.
9. Text Message (SMS) Communications
If you provide your mobile number and opt in, you consent to receive text messages from PRYZM related to your account and transactions (for example, withdrawal confirmations and shipping updates), and, if you separately opt in, promotional messages. Message and data rates may apply, and are your responsibility. Consent to receive SMS is not a condition of using the Platform.
You can opt out of promotional text messages at any time by replying STOP, or of all non-essential messages by contacting [email protected]; you may still receive transactional messages necessary to service an open account. Reply HELP for assistance. We do not share your mobile number or SMS opt-in status with third parties for their own marketing purposes; we share it only with vendors who help us deliver the messages you requested.
10. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Platform. After you close your account or request deletion, we retain information tied to financial transactions, identity verification, and compliance obligations for seven years from your last transaction, and we may retain limited information about a banned account (such as name, contact details, and government ID) indefinitely to prevent re-registration and protect against fraud.
11. International Users
The Platform is intended for users located in the United States, in the eligible states identified in our Terms of Use. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home jurisdiction.
12. Changes to This Privacy Policy
We may update this Policy from time to time. If we make a material change, we will provide reasonable notice, such as an in-app notice or email, before the change takes effect. The “Last Updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after a change takes effect means you accept the updated Policy.
13. Governing Law and Disputes
This Privacy Policy is part of, and incorporated into, our Terms of Use. Any dispute relating to this Policy is governed by the same governing-law and arbitration provisions set out in our Terms of Use.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or want to exercise a right described in Section 7, contact us at:
PRYZM INC.
1825 Coney Island Ave
Brooklyn, NY 11230