1. Who we are
PRSXA is provided by Pearl Organisation ("we", "us"). We are the controller (also called the "data fiduciary" under some laws) of the personal data described in this policy. This policy applies to prsxa.com and the PRSXA chat. Other Pearl products have their own privacy notices.
2. What we collect
Information you give us
- Account details: your name, email address, password (stored only as a secure one-way hash), and, if you add them, your mobile number and two-step sign-in settings.
- Linked Pearl accounts: if you sign in with an existing Pearl Organisation account (Pearl Client Workspace (PCW), Pearl Marketplace, Pearl Products, or the ERP for PEARLians), we use your email, name, mobile number and password hash from that account to create and keep your PRSXA account, and we check that the other account is still active.
- Your content: what you type, the files, images and voice you share, and the answers PRSXA produces, together with chat titles, modes and settings.
- Payments: your plan, billing country, invoices and payment status. Card and bank details are collected and stored by our payment providers; we receive only limited details such as the card brand, the last four digits and the expiry date.
- Messages to us: what you send when you contact support or answer a survey.
Information collected automatically
- Usage: how many messages you send, which features and models you use, your allowance and timestamps.
- Device and connection: IP address, approximate location derived from it, browser and device type, time zone, language, and sign-in sessions.
- Storage on your device: see the Cookie Policy.
We don't knowingly collect sensitive personal data (such as health or religious beliefs). Please don't include it in chats unless you need to, and never include other people's sensitive data without their permission.
3. How we use it, and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Create and secure your account, sign you in (including across Pearl products), and run the chat | Contract |
| Process your content to generate answers, search the web, create images and read documents when you ask | Contract |
| Apply your plan's allowance, take payments, send receipts and keep tax records | Contract; legal obligation |
| Detect and prevent abuse, fraud, spam and security threats, including automatic safety checks on messages | Legitimate interests; legal obligation |
| Send service emails, such as sign-in codes, security alerts, receipts and important changes | Contract; legitimate interests |
| Measure and improve the Service with usage statistics | Legitimate interests, or consent where the law requires it |
| Send offers about PRSXA and other Pearl products (you can opt out at any time) | Consent or legitimate interests, as local law allows |
| Comply with the law, respond to lawful requests and protect our rights | Legal obligation; legitimate interests |
Where other data protection laws apply to you, we process personal data on the bases those laws allow, such as your consent or other legitimate uses. Where we rely on consent, you can withdraw it at any time; this does not affect processing that took place before.
4. AI and your data
- How answers are made. To answer you, your messages, files and images are processed by our AI platform and the AI model providers it uses, only to provide the Service to you and under contracts that protect your data.
- Automatic safety checks. Messages may be checked automatically to detect content that breaks our Acceptable Use Policy. A blocked message is not shown to other people. We do not make decisions with legal or similarly significant effects about you solely by automated means; if your account is restricted, you can ask a person to review it.
- Human access. PEARLians do not read your chats, except when you ask for support with a specific chat, when it is necessary to investigate abuse or a security problem, or when the law requires it. Access is limited and recorded.
5. Who we share it with
We don't sell your personal data, and we don't share it for cross-context behavioural advertising. We share it only as follows:
| Who | Why |
|---|---|
| AI model and moderation providers | To generate answers, images and voice, and to run safety checks |
| Payment providers (such as Stripe and Razorpay) | To take payments and prevent payment fraud |
| Hosting, storage, email and messaging providers | To run the Service, store files, and send emails, sign-in codes and WhatsApp codes |
| Web search providers | To find fresh information when a question needs it (only the search query is sent) |
| Font and icon delivery networks | To display the website; they receive your IP address when your browser loads them |
| Other Pearl Organisation products | To keep your one Pearl Organisation account working across products |
| Authorities, advisers and successors | When required by law, to protect people and our rights, or as part of a merger or sale, under confidentiality |
Our providers may use your data only to provide their services to us, and must protect it.
6. International transfers
We and our providers may process data in different countries, including the United States. When personal data from the EU, UK or another country with transfer rules leaves that country, we use recognised safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), or another lawful transfer mechanism.
7. How long we keep it
| Data | How long |
|---|---|
| Chats and files | Until you delete them or close your account. Deleted chats and files are permanently removed from our systems, including backups, within 90 days. |
| Account details | While your account is open, then up to 90 days after closing (to handle any final requests), unless a longer period is required by law. |
| Payments and invoices | At least 8 years, or longer if tax and accounting laws require. |
| Security, sign-in and safety records | Up to 12 months, or longer when needed to investigate an incident or abuse. |
| Consent records (terms, cookie choices) | For as long as needed to show what was agreed, and at least while your account is open. |
8. How we protect it
We use encryption in transit, hashed passwords, one-time sign-in links that expire after two minutes, optional two-step sign-in, new-device alerts, access controls and monitoring. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
9. Your rights
Depending on where you live, you have the right to:
- know what personal data we hold about you and get a copy;
- correct inaccurate data;
- delete your data and close your account;
- receive your data in a portable format;
- object to or restrict certain processing, and opt out of marketing;
- withdraw consent at any time;
- appoint someone to exercise your rights on your behalf where the law allows; and
- complain to a data protection authority, such as your local EU authority, the UK Information Commissioner's Office, or the authority where you live.
California and other US states: you have the right to know, delete and correct personal information, and not to be discriminated against for using your rights. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.
To use your rights, write to support@pearlorganisation.com with "Privacy request" in the subject line. We will confirm your identity and reply within the time the law allows (usually one month). You can also delete chats yourself in PRSXA at any time.
10. Children
PRSXA is only for people aged 18 and over. We don't knowingly collect data from anyone younger. If you believe a child has given us personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy. If the changes are important, we will tell you by email or in the Service before they take effect. The date at the top shows when it was last updated.
Contact us
Pearl Organisation
Email: support@pearlorganisation.com. For privacy requests, please write "Privacy request" in the subject line. For complaints, write "Grievance" in the subject line and it will go to our Grievance Officer.