Privacy Policy

1. Overview

This privacy policy describes what personal information Shore Cloud Tech, LLC (“Shore Cloud Tech”, “we”, “us”) collects, how we use it, and your rights regarding that information. In addition to this website, we operate the Prism research screening platform (the “Site”) and provide related services (together with the website and the Site, the “Services”). By accessing the Services, you acknowledge that you have read this Privacy Policy.

2. Personal Information We Collect

We may collect your personal information when you interact with our Site, mobile applications, with us over email or the telephone, or otherwise use the Services.

Account Information. When you create an account or are invited to Prism, we collect your name, email address, and organizational affiliation. This information is provided directly by you or your account administrator.

Legal Acceptance Records. When you accept our Terms of Use, Data Processing Addendum where applicable, and Investment Disclaimer, we record your account email address, the document version(s) accepted, timestamp, IP address, and user agent (and, if you accept for an organization, the organization name and your name and title) for compliance and audit purposes. We keep these records for as long as your account exists and for six years after it closes, or longer if a dispute is pending. They are not deleted when a user or organization account is deleted.

Authentication Data. We log authentication events (sign-in, sign-out, failed attempts) including timestamp, IP address, and device/browser information. This data is mainly retained for security monitoring, compliance purposes, and providing the Services.

Platform & Usage Activity. We collect information about how you use the Site, including watchlists, screening criteria, custom groups, and AI conviction requests. Further, we collect metrics such as page views, click-through rates, session length, or number of transactions. This data is used to operate the Site and Services and for operational purposes and is scoped to your tenant — it is not shared with other tenants.

Billing Information. Subscription and payment processing is handled by our third party payment processor. Shore Cloud Tech does not store credit card numbers or full payment details. We store your payment processor customer ID and subscription status to manage your account.

Website Contact and Demo Requests. If you submit our contact or demo request form, we collect the name, email address, firm, and message you provide and use them to respond to you.

Feedback and Support. If you provide us feedback or contact us for support we will collect your name and email address, as well as any other content that you send to us, in order to reply.

3. How We Use Your Personal Information

We use collected personal information to:

• operate and deliver the Site and our Services
• identify you when you visit the Site or use the Services
• process subscription billing and manage your account
• comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim
• detect and protect against malicious or illegal activity, including to monitor the Site and investigate suspicious activity
• debug, identify and repair errors that impair existing intended functionality of our Site and Services
• send transactional emails such as invite links, billing receipts, and service notifications
• improve the Services, including Site performance and reliability and product and service offerings
• conduct analytics
• communicate with you, including to respond to your inquiries or feedback
• for internal administrative purposes, as well as to manage our relationships
• for such other purposes as you may consent (from time to time)

In many situations we have more than one purpose. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

To the extent we maintain and use personal information in a deidentified form, we will not attempt to reidentify the information, except for the purpose of determining whether our deidentification processes satisfy our legal obligations.

4. How We Share Your Information

In addition to the specific situations discussed elsewhere in this Privacy Policy, we may disclose personal information in the following situations:

• Service Providers. We share your information with service providers. Among other things service providers help us to host, administer and secure our website, communicate with you, provide technical support, process payments, and assist in the fulfillment of orders.
• Professional Advisors. We may disclose your information with our professional advisors who provide banking, legal, compliance, insurance, accounting, or other consulting services in order to complete third party financial, technical, compliance and legal audits of our operations or otherwise comply with our legal obligations.
• Other Disclosures Without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or the provision of services by a third-party intermediary.
• Corporate Transactions. If another company acquires, or plans to acquire, our company, business, or our assets, we will share information with that company, including at the negotiation stage.
• Other Disclosures with Your Consent. We may disclose your information to other third parties when we have your consent or direction to do so.

We do not train AI models on your personal account data. We do not sell your personal data to any third party. We do not share your data with advertisers or data brokers. We may disclose your personal information for any purpose with your consent.

5. Cookies & Sessions

Prism uses secure, HTTP-only session cookies for authentication purposes only. These cookies maintain your logged-in state and expire when your session ends or after a defined inactivity period. We do not use third-party advertising cookies, cross-site tracking cookies, or browser fingerprinting. We use browser localStorage to cache certain user preferences (such as legal acceptance status) to improve performance. It also stores your cookie choice on this website.

This website. This marketing website uses Azure Application Insights for page-view and performance analytics. It is loaded only after you accept analytics through the cookie banner, and it may set cookies in your browser. It is not used for advertising. You can change your choice at any time through the “Cookie settings” link in the site footer.

6. Data Retention

We retain your personal information for only as long as necessary to fulfil the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements, unless a longer retention period is required or permitted by law. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we obtained the information and whether we can achieve those purposes through other means, as well as applicable legal requirements. For example:

• Customer Data: available for you to export for 90 days after termination, after which it is deleted (see the Terms of Use and Data Processing Addendum).
• Account and subscription records: retained for up to 12 months after termination for billing dispute and compliance purposes.
• Legal acceptance records, including the record of your authorization of recurring charges: retained for as long as the account exists and for six years after it closes, or longer if a dispute is pending, and not deleted when a user or organization account is deleted.
• Login events and audit logs: retained for about 90 days.

7. Data Security

All data is encrypted in transit (TLS) and at rest. Database access is protected by Row-Level Security (RLS) ensuring tenant data isolation — no tenant can access another tenant's data. Secrets and credentials are managed via Azure Key Vault. Access to production systems is limited to Shore Cloud Tech personnel. We conduct regular security reviews and vulnerability assessments.

While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to Prism, you are responsible for keeping this password confidential. You should not share your password with anyone.

8. Transmission of Information to Other Countries

Our Services, including the Site, are intended for users in the United States, and not for individuals outside of the country. Our application data is stored within the United States. Some service providers, such as our payment processor, may process data in other countries.

9. Third Party Applications/Links

We may provide links to websites and other third-party content or services that we do not own or operate. The websites and third-party content to which we link may have separate privacy notices or policies. Please note, we have no control over the privacy practices of websites, or services that we do not own. We encourage you to review the privacy policies of any third-party website or application for details about such third party's privacy practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. If you keep using the Services after the effective date of an updated policy, you have been notified of the changes. Where the law requires your consent to a change, we will ask for it.

11. Contact

For privacy-related questions or requests, contact Shore Cloud Tech at support@shorect.com.