Privacy Policy

1. Information We Collect

PRISC GROUP ("we," "our," or "us") collects information to provide better services to our clients. We collect information in the following ways:

• Information you give us: Contact details, business information, and service requirements when you request consultations or services.
• Information we get from your use of our services: Website usage data, system performance metrics during service delivery.
• Technical information: IP addresses, browser types, and device information for security and optimization purposes.
• Payment and billing information: When you become a paying client, we collect billing details such as your name, billing email, and payment history. Your full payment card or bank-account numbers are collected and stored by our payment processor (Stripe), not by PRISC Group Inc.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve our IT services and support
• Process service requests and communicate with clients
• Monitor system performance and security
• Comply with legal obligations and industry regulations
• Send important service updates and security notifications

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in these circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• Service providers and subprocessors: We share information with trusted third-party providers who help us deliver our services, under confidentiality and data-processing terms. These include, for example: Stripe (payment processing), Supabase (data hosting and storage), Cloudflare (website hosting, security, and bot protection), n8n (workflow automation), Microsoft 365 (business email), Anthropic (AI processing under commercial no-training terms), DocuSign (electronic signatures), Resend (transactional email), Twilio (voice and messaging), Sentry (application error monitoring), Better Stack (status page hosting and uptime monitoring; our public status page at status.priscgroup.com stores no client personal data), Snyk (Probely) (application security scanning of our own website; processes no client personal data), and Google (website analytics). Each processes data only as needed to perform its function.
• To protect the rights, property, or safety of PRISC GROUP, our clients, or others

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure backup and disaster recovery procedures

5. Payment Processing

We use Stripe, Inc. to process payments and manage subscriptions. When you make a payment or manage billing, your information is collected and processed by Stripe under its own privacy policy and PCI-DSS standards. PRISC Group Inc. does not store your full card or bank-account details; we retain limited billing records (such as invoices and payment status) for accounting and legal compliance.

6. Your Data in Our Automations

To deliver automation and IT services, we process data that flows through the workflows and systems we build and operate for you, such as leads, customer records, documents, and messages. We act as a processor on your behalf: this data remains yours, we use it only to operate the services you have engaged us for, and we never sell it or use it for unrelated purposes. Where you maintain your own n8n or other software accounts, that data resides in your accounts under your control. Upon termination, we return or help you export your data and revoke our access in accordance with your Service Agreement.

7. AI Processing

Some of our services use commercial AI models to process content such as service requests, proposals, and support communications. This processing runs under commercial API terms that prohibit the provider from training models on your data. We never use your data to train AI models, and Zero Data Retention handling is available from our AI providers upon written request. AI-generated outbound communications are subject to human review before sending.

8. Cookies and Tracking

Our website uses cookies to improve user experience and analyze site usage. You can control cookie preferences through our cookie consent banner or your browser settings.

Status update emails are optional. We send them only to addresses that have subscribed to our status page at status.priscgroup.com, and every status email includes a one-click unsubscribe link.

9. Error Monitoring and Session Recording

We use Sentry to detect and diagnose problems with our website. When an error occurs, Sentry records technical details about what went wrong, along with a replay of the browsing session that led to it, so we can reproduce and fix the issue. Text content and images are masked in these recordings, so we see the structure of what happened rather than what you read or typed. We do not record sessions that complete without an error. If you are signed in to a PRISC account when an error occurs, your email address is attached to the report so we can follow up with you directly.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal obligations)
• Object to processing of your personal information
• Request data portability

11. Data Retention

We retain personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Client data is typically retained for 7 years after service completion.

12. Delete Your Data

This section applies to the PRISC Group client portal at priscgroup.com and to the PRISC Command Center mobile app for iPhone and Android, both published by PRISC Group Inc. The same account is used in both, so one request covers the portal and the app.

How to request deletion

1. Sign in to the client portal at priscgroup.com/portal (the account owner must make the request).
2. Open Your Data from the portal menu and choose Request deletion. You can export a copy of your data on the same screen first.
3. If you cannot sign in, email support@priscgroup.com from the email address on the account with the subject "Delete my data".

What happens next

• A PRISC person confirms the request with you by email within two business days. Nothing changes until then.
• After confirmation, access to the portal and the app ends. A 30-day window lets you change your mind.
• After the window, we erase your data and send you a written confirmation of what was erased and what was kept.

What is deleted

Your account and sign-in credentials, your workspace (approvals, run receipts, automation settings, IT records, messages with PRISC Support), documents and facts you gave the Business Brain, and every push notification token registered by the mobile app.

What is kept, and for how long

Invoices, payment records and signed agreements, because the law and our accounting obligations require them, for up to 7 years. Backups age out on their normal cycle and are never restored to bring deleted data back. Nothing else is retained.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date above.