Privacy Policy

UNISEN Learn ("UNISEN Learn", "we", "us", or "our") operates the Prism Learning platform and website at prismlearning.ai (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Service, and the rights you have in relation to that information.

1. Data controller

UNISEN Learn is the data controller for personal data processed through the Service. If you have questions about this Privacy Policy or how we handle your personal data, please contact us at the details at the end of this policy.

2. Personal data we collect

We collect the following categories of personal data:

• Account and contact data: name, email address, password hash, and any profile information you provide.
• Authentication data: account credentials, login history, and session tokens used to keep you signed in securely.
• Content you provide: documents, images, links, text, prompts, and any other files or inputs you upload to create learning materials.
• Generated content: study guides, quizzes, summaries, podcasts, and other outputs created by the Service based on your inputs.
• Usage and analytics data: feature usage, interactions, study progress, quiz attempts, and workspace activity.
• Technical and device data: IP address, browser type, device type, operating system, and unique device identifiers.
• Communication data: messages, support requests, and feedback you send to us.
• Payment data: we do not collect or store full payment card details. Our reseller, Paddle, processes payment, billing, tax, and invoicing information on our behalf.

3. How we use your personal data

We use personal data for the following purposes:

• To create and manage your account and provide access to the Service.
• To process your uploaded materials and generate personalized learning content.
• To maintain security, prevent fraud, and detect abuse.
• To respond to support requests and improve the Service.
• To send essential service updates, billing notices, and optional marketing communications (where you have consented).
• To comply with legal obligations and enforce our Terms of Service.

4. Legal basis for processing

We process personal data on the following legal grounds:

• Performance of a contract: to provide the Service and fulfill our obligations under our Terms of Service.
• Legitimate interests: for security, fraud prevention, product improvement, and customer support.
• Consent: where required, for example for marketing communications or certain cookies.
• Legal obligation: to comply with applicable laws, regulations, or lawful requests.

5. Who we share data with

We share personal data only with the following categories of recipients:

• Service providers: hosting, cloud infrastructure, analytics, email, customer support, and security vendors.
• Merchant of Record (Paddle): we share the data necessary for Paddle to process payments, manage subscriptions, handle tax and invoicing, and provide buyer support. Paddle's privacy practices are described in its own policies.
• Professional advisers: legal, accounting, and compliance consultants where necessary.
• Authorities: law enforcement, regulators, or courts where required by law or to protect our legal rights.
• Business transfers: in connection with a merger, acquisition, or sale of assets, personal data may be transferred to the relevant successor.

6. International data transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom and European Economic Area, including the United States, where our service providers operate. Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent legal mechanisms to protect your data.

7. Data retention

We keep your personal data for as long as your account is active, or as long as needed to provide the Service, comply with legal obligations, resolve disputes, or enforce our agreements. When you delete your account, we will delete or anonymize your personal data within a reasonable period, unless applicable law requires us to retain it for longer.

8. Your rights

Depending on your location, you may have rights under data protection laws, including:

• The right to access your personal data.
• The right to rectify inaccurate or incomplete data.
• The right to erase your personal data in certain circumstances.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time.
• The right to complain to a supervisory authority.

We aim to respond to requests within one month. To exercise your rights, contact us using the details below.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, secure authentication, and regular security review. No system is completely secure, and we cannot guarantee absolute security.

10. Cookies and similar technologies

We use cookies and similar technologies to operate the Service, remember your preferences, analyze usage, and support security. Essential cookies are necessary for the Service to function. Analytics and marketing cookies are used only with your consent where required by law. You can manage cookie preferences through your browser settings.

11. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of the Service after any changes constitutes acceptance of the revised policy.

13. Contact us