Privacy policy

1. Who we are

Prism is a DigiCube product operated by Infinite Barakah Ventures FZ LLE, Dubai, United Arab Emirates (“we”, “us”). You can reach us about privacy at privacy@infinitebarakah.com.

2. Our role

Interview data. When an organization (our “customer”) uses Prism to interview its people, the customer decides why and how those interviews are run. For that data the customer is the controller and we act as its processor, handling it only on the customer’s instructions and to provide the service.

Account and website data. For workspace admin accounts and visits to this website, we are the controller.

3. What we collect

From workspace admins

• Name, email address and login credentials.
• Organization details you provide — company name, industry, size, description, logo and brand color — and discovery campaign goals and questions.
• Details of the people you invite: name, email, job title, department and manager.

From employees who are interviewed

• What you say during the interview — by voice or text — including the transcript of a voice conversation. Voice audio is processed by our voice provider to run the conversation and produce the transcript.
• Documents generated from your interview: a role profile, standard operating procedures, a process map and structured notes about your work.
• Basic session information, such as when the interview started and finished and whether you used voice or text.

Interviews are about how work gets done. Please don’t share sensitive personal information such as health, religious or financial details — it isn’t needed.

Technical data

• Essential cookies that keep admins signed in, and your browser’s local storage for display preferences (theme, voice or text). We do not use advertising or analytics trackers.
• Standard server logs, such as IP address and request times, used for security and troubleshooting.

4. How we use it

• To run interviews and generate the documents and analysis the customer has asked for.
• To operate, secure and support the service, and to send service emails such as interview invitations.
• To meet legal obligations.

We do not sell personal data, use it for advertising, or use interview content to train AI models of our own.

5. AI processing and review

Interviews are conducted by Sara, an AI interviewer, and the resulting documents are produced by AI models. Outputs can contain mistakes, so findings are marked as stated by the employee or inferred, and employees can review what is shared from their interview before it is used. Prism’s outputs are meant to document work — customers should not rely on them alone to make decisions about an individual’s employment.

6. Who we share it with

Interview data is visible to the customer’s workspace admins. We also use the following service providers, which process data on our behalf under contractual safeguards:

• Supabase — database and authentication (data stored in the Asia-Pacific (Singapore) region).
• Vercel — application hosting.
• ElevenLabs — voice conversation and speech transcription.
• OpenRouter and Anthropic — AI language models used for text interviews and document generation.
• Resend — delivery of invitation and service emails.

We may also disclose data where required by law or to protect our rights, users or the public.

7. International transfers

Our providers may process data outside your country, including in Singapore, the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

8. Retention

Interview data is kept for as long as the customer keeps it in their workspace. Admins can delete individual interviews, which removes the transcript and generated documents from Prism. When a workspace is closed, we delete its data within a reasonable period unless the law requires us to keep it. Account data is kept while the account is active.

9. Security

Each organization’s data is isolated to its own workspace and visible only to its admins. Data is encrypted in transit, and access is restricted to what is needed to run the service. No system is perfectly secure, but we work to protect your data and will respond promptly to any incident.

10. Your rights

Depending on where you live — including under the UAE Personal Data Protection Law and, where applicable, the GDPR — you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to data portability. If you were interviewed by your employer, please contact them first, as they control your interview data; we will support them in responding. You can also contact us at privacy@infinitebarakah.com.

11. Children

Prism is a workplace tool and is not intended for anyone under 18.

12. Changes

We may update this policy as Prism evolves. We will post the new version here and change the date above; significant changes will be communicated to workspace admins.

13. Contact

Infinite Barakah Ventures FZ LLE
Dubai, United Arab Emirates
Privacy: privacy@infinitebarakah.com · General: hello@thedigicube.com