Privacy Policy
Version 2026-07-10 · Effective as of the date above.
STS Automatic LLC, based in South Carolina, U.S.A., is the operator of the Prizm P.M. platform ("Prizm", "we", "us"). This Privacy Policy explains what personal information we collect, how we use and disclose it, and the choices you have. It applies to the Prizm P.M. website, applications, APIs, and related services (the "Service").
1. Information We Collect
- Account information: name, email, hashed password, role (Landlord or Tenant), phone, and contact details you provide, plus your acceptance of our Terms and this Policy (with version and timestamp).
- Property & lease information: property addresses, unit details, lease terms, tenant records, rent charges, autopay settings, maintenance requests, uploaded lease and property documents, and messaging within the Service (uploaded by Landlords and Tenants).
- Payment information: payment-method identifiers, transaction amounts, surcharges, late fees, payout records, and Stripe account/connect identifiers. Full card numbers, full bank-account numbers, and Stripe-verification documents are handled by Stripe and are not stored on our servers.
- Landlord Stripe Connect data: where a Landlord onboards for payouts, Stripe may collect identity, business, tax (e.g., SSN/EIN), and bank-account information directly; we receive limited status and reference identifiers from Stripe.
- Communications: messages you send us, including support requests and emails to property@prizmbi.xyz.
- Technical & usage data: IP address, browser and device information, log files, pages viewed, actions taken in the Service, and diagnostic error data.
- Cookies & similar technologies: for authentication, session management, security, preferences, and limited analytics.
2. How We Use Information
- to provide, secure, maintain, and improve the Service;
- to process rent payments, autopay, late fees, surcharges, and payouts, and to prevent fraud;
- to enable Landlords and Tenants to communicate, manage leases, and transact;
- to send transactional messages (payment receipts, autopay notices, late-fee notices, maintenance updates, account notices);
- to comply with legal, tax, and regulatory obligations and to enforce our Terms;
- to record acceptance of legal terms (with version and timestamp) as evidence of agreement;
- to analyze usage and improve product features.
We do not sell your personal information. We do not use your personal information to train third-party generative-AI models.
3. Legal Bases (EEA/UK Users)
Where applicable, we process personal information based on (a) performance of a contract with you, (b) our legitimate interests in operating and securing the Service, (c) compliance with legal obligations, or (d) your consent, which you may withdraw at any time.
4. How We Share Information
- Between Landlord and Tenant. Information relevant to a lease is shared between the Landlord and their Tenants — for example, a Landlord can see rent charges, payments, autopay status, and maintenance requests for their Tenants; a Tenant can see their own lease, charges, receipts, and payment history.
- Service providers. We share information with vendors that host and operate the Service on our behalf, including Stripe (payment processing, Connect payouts, identity verification), Supabase (database, authentication, and storage infrastructure), transactional email providers, and mapping and property-data providers.
- Legal & safety. We may disclose information to comply with law, respond to lawful requests, protect our rights and users, and investigate fraud or security incidents.
- Business transfers. In a merger, acquisition, financing, or sale of assets, information may be transferred subject to this Policy.
5. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations (including tax and financial recordkeeping), resolve disputes, and enforce our agreements. You may request deletion of your account at any time by emailing property@prizmbi.xyz; some records — including payment, payout, tax, and dispute records — may be retained where required by law or by Stripe.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, row-level security in our database, hashed credentials, least-privilege access controls, and use of a PCI-DSS-compliant payment processor (Stripe) so that we do not store full card or bank-account numbers on our servers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
7. Your Rights & Choices
Depending on where you live, you may have the right to:
- access, correct, or delete your personal information;
- object to or restrict certain processing;
- request portability of your information;
- withdraw consent where processing is based on consent;
- appeal a denial of a privacy request.
To exercise these rights, email property@prizmbi.xyz. We may need to verify your identity before responding. Note that a Landlord is typically the controller of information about their Tenants; we may direct Tenant requests about lease-related records to the applicable Landlord.
8. U.S. State Privacy Rights
Residents of California, Colorado, Connecticut, Virginia, and other U.S. states with comprehensive privacy laws have the rights described above and the right not to receive discriminatory treatment for exercising them. We do not "sell" personal information or engage in "targeted advertising" as those terms are defined under those laws.
9. International Transfers
We are based in the United States and process information there. If you access the Service from another country, your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards, such as standard contractual clauses, for cross-border transfers.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe we have, contact us and we will delete it.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated by posting the updated Policy with a new version date and, when appropriate, by in-app notice or email.
12. Contact
Prizm P.M. is owned and operated by STS Automatic LLC, based in South Carolina, U.S.A.. For questions about this Policy or to exercise your rights, contact property@prizmbi.xyz.
This document is a general template and does not constitute legal advice. Consult qualified counsel to tailor it to your jurisdiction and business.