Privacy Policy

1. Scope

This Privacy Policy describes how Prime 88 ("we," "our," "us") collects, uses, stores, and shares information about you when you visit our public surfaces, access authenticated workspaces, or interact with our operations infrastructure. It applies to all visitors, users, and tenants of the Service.

This policy should be read in conjunction with our Terms of Service.

2. Types of Information We Collect

The categories of personal information we collect depend on how you interact with the Service:

Contact and Account Information. Name, email address, and account credentials provided when you sign up or authenticate.

Usage and Device Information. Pages visited, referring URL, browser type and version, device type, operating system, and anonymized IP address (truncated or hashed).

Communications. Information you provide when contacting support, including correspondence and any attachments.

Workspace Data. Content and configuration information submitted by tenants and their authorized users to their authenticated workspace. Prime 88 processes this data solely to provide the Service and has no independent right to access or use it.

Payment and Billing Information. Billing contact details and transaction records. Payment processing is handled by third-party payment providers; we do not store full payment card numbers.

3. How We Collect Information

Directly from you. When you create an account, sign in, fill out forms, contact support, or otherwise communicate with us.

Automatically. Through cookies, log files, and similar technologies when you browse our public surfaces or use the Workspace. This includes page views, session duration, and referral data.

From other sources. Identity providers you authorize (such as Google or GitHub OAuth) may share profile information as permitted by your privacy settings with that provider.

4. How We Use Information

We use the information we collect to:

(a) provide, maintain, and improve the Service, including authentication, session management, and workspace functionality; (b) communicate with you regarding your account, security notices, support requests, and service updates; (c) monitor and analyze usage trends to improve performance, reliability, and user experience; (d) detect, prevent, and respond to abuse, fraud, unauthorized access, and security incidents; (e) comply with legal obligations and enforce our Terms of Service; and (f) develop and improve our products and services, including through the use of aggregated or anonymized data.

5. How We Disclose Information

We do not sell your personal information. We may share information with the following categories of recipients:

Service Providers. We engage third-party companies to perform functions on our behalf, such as hosting and infrastructure, security monitoring, analytics, identity verification, payment processing, and customer support. These providers are contractually bound to handle your information consistent with this policy and applicable law.

Affiliates. We may share information with entities under common ownership or control, who will use it in accordance with this policy.

Legal and Compliance. We may disclose information if required by law, legal process, or governmental request, or where necessary to protect our rights, property, or safety, or that of our users or others.

Business Transfers. In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality arrangements.

With Your Consent. We may share information for any other purpose disclosed to you at the time of collection or with your consent.

6. Security

We maintain a comprehensive information security program that includes reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS 1.3) and at rest, access controls, and regular security assessments. We do not disclose specific security controls in this policy, as doing so could compromise their effectiveness. For more information about our security practices, contact us at the address below.

7. Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Usage analytics are retained for 14 months. Authentication logs are retained for 90 days. Workspace data is retained for the duration of the tenant agreement plus 30 days, after which it is securely purged unless otherwise required by law or legal hold.

8. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

(a) access the personal data we hold about you; (b) request correction or deletion of inaccurate or incomplete data; (c) restrict or object to processing; (d) data portability, where technically feasible; (e) withdraw consent at any time where processing is based on consent; (f) opt out of the sale or sharing of your personal information (we do not sell your information).

California Residents. Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, used, shared, or sold; to request deletion; to opt out of the sale of personal information; and to non-discrimination for exercising these rights. To exercise your rights, contact us at [email protected].

EEA / UK Residents. Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Requests will be addressed within 30 days. You also have the right to lodge a complaint with your local data protection authority.

All data subject requests are acknowledged within 72 hours. We may ask you to verify your identity before processing a request.

9. Cookies and Similar Technologies

Essential Cookies. We use essential cookies for session management, authentication, and security. These are necessary for the Service to function and cannot be disabled. They are set as HttpOnly, Secure, and SameSite=Strict where applicable.

Analytics. We use privacy-preserving analytics that employ anonymized or aggregated data, truncated IP addresses, and no cross-site tracking. You may opt out of analytics cookies through your browser settings.

Third-Party Cookies. We do not use third-party tracking or advertising cookies. Identity providers (e.g., Google, GitHub) may set their own cookies when you choose to authenticate through them; those are governed by their respective privacy policies.

Most browsers allow you to control cookies through settings. Disabling essential cookies may prevent the Workspace from functioning properly.

10. International Data Transfers

Your information may be processed in countries where we or our service providers operate. When we transfer data across borders, we implement appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms, to ensure your information receives an adequate level of protection. By using the Service, you understand that your information may be transferred to facilities in the United States and other jurisdictions as necessary to provide the Service.

11. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data without parental consent, we will delete it promptly. Please contact us if you believe a minor has provided us with personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will revise the "Last Updated" date at the top of this page and notify affected users via email or a notice on the Service at least 14 days before the changes take effect. We encourage you to review this page periodically.

13. Contact

For privacy-related inquiries, data subject requests, or questions about this policy:

[email protected]

Prime 88
Correspondence address available on request.

We will acknowledge your request within 72 hours and respond within 30 days.