Legal
Privacy Policy
Effective date: September 24, 2026 · Last updated: October 6, 2026
This policy explains what personal information Prismonde LLC ("Prismonde," "we," "us") collects through prismonde.com (the "Site"), why we collect it, who we share it with, how long we keep it, and what you can do about it. It applies to everyone who visits the Site, submits one of its forms, opens a document we send, or emails us.
It covers the Site only. Information we handle during a client engagement is governed by the agreement for that engagement.
1. Who is responsible
Prismonde LLC, San Mateo, California, United States, is the data controller for information collected through the Site.
Contact: hello@prismonde.com
2. What we collect
Information you give us directly. The Site has three forms. It has no accounts and no sign-ups.
- The intake form at /scope collects your name, work email, fund or firm, the portfolio company, the company’s annual revenue band, and what you write about what missed.
- The brief request ("Read the brief") collects your work email.
- The sample readout request collects your work email and your fund or company.
With each brief or sample readout request we also record which document you asked for, the page of the Site you asked from, the date and time, the domain of your email address, and whether that domain belongs to a free email provider such as Gmail.
The brief and its link. We send the brief to the email address you give us as a link that is unique to your request. When the link is opened, we record that it was opened, how many times, and when it was first and last opened, against your request. The link does not expire, and anyone you forward it to opens it as you would, so their opens count against your request too. Some email security services open links automatically when a message arrives, so an open does not always mean a person read the brief. We do not otherwise track the email: it contains no tracking pixel and no other tracked links.
Anything you write in a free-text field is collected as written. Do not include information you do not want us to hold, including sensitive personal information about yourself or others.
Email you send us. If you email hello@prismonde.com, including through the Careers page, we receive your email address, your name if your email client includes it, and whatever you write. We keep the correspondence. Do not send sensitive or confidential information unless we have a written agreement covering it.
Information collected automatically. The Site is hosted on Vercel. Vercel’s servers record standard request logs: IP address, browser type, device type, referring page, pages requested, and timestamps. We do not use these logs to identify individuals.
To stop automated abuse, the Site holds the IP address of each form submission in temporary memory for about ten minutes, to limit how many requests one address can make. It is not stored or linked to your submission. Before acting on a form, we also count the requests made from your email address in the past day, using the records described above. And the Site uses Vercel BotID, which reads signals from your browser when you submit a form to tell a person from an automated program. Vercel processes those signals to give that answer; we do not receive or keep them.
The Site uses Vercel Web Analytics to understand aggregate traffic. It records page views, the referring site, approximate country, browser, operating system, and device type. It does not use cookies, does not store IP addresses, and does not track you across other websites. Visitors are counted using a hash that is discarded daily, so it cannot be used to build a profile of you over time.
The Site’s typefaces are served from prismonde.com itself. Your browser does not request them from any third party.
Cookies. The Site does not set cookies.
What we do not collect. We do not knowingly collect information from anyone under 18. We do not collect payment information through the Site. We do not buy data about you from third parties.
3. Why we collect it and our legal basis
| Purpose | Data | Legal basis (GDPR, where it applies) |
|---|---|---|
| Evaluate and respond to a request to scope the diagnostic, and discuss a possible engagement | Intake form submissions, email correspondence | Steps prior to entering a contract at your request; legitimate interest in responding |
| Send you the brief or the sample readout you requested, see whether the brief’s link was opened, and follow up with you about the Prismonde Diagnostic | Document requests, the brief’s open record, email correspondence | Steps prior to entering a contract at your request; legitimate interest in following up on a request you made |
| Operate, secure, and debug the Site; understand aggregate traffic | Server logs, analytics | Legitimate interest in keeping the Site running, secure, and useful |
| Comply with legal obligations and defend legal claims | Any of the above | Legal obligation; legitimate interest |
We do not use your information for automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We do not sell personal information. We do not share it for cross-context behavioral advertising. We share it only with the service providers below, each acting on our instructions, and only as needed to do what this policy describes.
| Provider | What they do | Data they handle | Location |
|---|---|---|---|
| Vercel Inc. | Hosts the Site, runs the form handlers, serves the brief, provides analytics, and checks form submissions for automated abuse (BotID) | Form submissions in transit; server logs; aggregate analytics; browser signals when you submit a form | United States |
| Resend (Plus Five Five, Inc.) | Delivers form submissions to our inbox and sends you the brief’s link | All form fields; your email address | United States |
| Notion Labs, Inc. | Keeps our record of intake form submissions and of brief and sample readout requests | All intake form fields; for document requests, your work email and its domain, fund or company, the document, the page you asked from, request and open times | United States |
| Google LLC (Google Workspace) | Our email | Email content | United States |
If we change providers, we will update this table.
We may also disclose information if required by law, subpoena, or court order; to enforce our terms; or to protect the rights, safety, or property of Prismonde or others. If Prismonde or this Site is sold or transferred, your information may transfer with it, subject to this policy.
5. International transfers
We are in the United States and our providers store data in the United States. If you are outside the U.S., your information is transferred to and processed in the U.S., where privacy laws may differ from yours. Where GDPR or UK GDPR applies, we rely on our providers’ Standard Contractual Clauses or equivalent safeguards. Contact us if you want details.
6. How long we keep it
| Data | Retention |
|---|---|
| Form submissions, document requests, the brief’s open record, and email correspondence | 3 years from the last message, unless we start working together, in which case it moves to our client files and is kept for the length of the engagement plus 7 years for tax and legal purposes, or unless it is needed longer for a legal matter. |
| A request not to be contacted | Kept indefinitely, as your email address and the date you asked, so that we keep honoring it. Everything else follows the rows above. |
| Server logs | Per Vercel’s log retention, which is short-lived. |
| Analytics | Aggregate only; no individual records are retained. |
Copies may persist briefly in provider backups until those cycle out.
7. Your rights
Regardless of where you live, you can ask us to:
- tell you what information we hold about you;
- correct it;
- delete it;
- stop using it for a particular purpose;
- give you a copy in a portable format;
- stop emailing you.
If you are in the EU, EEA, UK, or Switzerland, you also have the right to object to processing based on legitimate interest, to restrict processing, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local supervisory authority.
If you are a California resident, the California Consumer Privacy Act may not apply to us given our size, but we honor the same rights regardless: to know, to delete, to correct, and to not be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under California law.
To exercise any right, email hello@prismonde.com with "Privacy request" in the subject. We will verify you by confirming access to the email address on file, and respond within 30 days. We do not charge for requests unless they are manifestly excessive.
8. Do Not Track
The Site does not respond to browser "Do Not Track" signals because it does not track you across sites in the first place.
9. Security
The Site is served over HTTPS, and form submissions travel over HTTPS. Each brief link carries a signature, so it cannot be guessed or altered to reach the brief. Data at rest sits inside providers with access controls. No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as required by law.
10. Children
The Site is not directed at anyone under 18, and we do not knowingly collect their information. If you believe a minor has submitted a form or emailed us, tell us and we will delete it.
11. Changes
We will post changes here and update the date at the top. If a change materially affects how we use information you have already given us, we will email you before it takes effect.
12. Contact
hello@prismonde.com
Prismonde LLC, San Mateo, California