Cookie Policy

1. Introduction

This Cookie Policy explains how Prysmera.ai ("we," "our," "us") uses cookies and similar tracking technologies when you use our website, dashboard, and SDK integration. By using Prysmera, you consent to the use of cookies as described in this policy.

2. What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They allow websites to recognize your device and remember information about your preferences or actions.

3. How We Use Cookies

We use cookies for the following purposes:

Authentication - Keep you logged in to the dashboard
Security - Protect against fraudulent activity and enhance security
Analytics - Track visitor behavior on websites using our SDK
Functionality - Remember your preferences and settings
Performance - Monitor service performance and identify issues

4. Types of Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the operation of our Service and cannot be disabled.

Cookie Name	Purpose	Duration
cic_session	Authenticates your dashboard login session	7 days
XSRF-TOKEN	Protects against cross-site request forgery attacks	Session

Cookie Attributes:

HttpOnly - Cannot be accessed via JavaScript (prevents XSS attacks)
Secure - Only transmitted over HTTPS (production environment)
SameSite=Lax - Provides CSRF protection

4.2 Analytics Cookies (SDK)

These cookies are set by our JavaScript SDK on websites that integrate Prysmera.

Cookie Name	Purpose	Duration
prysmera_session	Tracks visitor session and behavior patterns	Session-only
prysmera_visitor_id	Anonymous visitor identifier for analytics	30 days

Note: These cookies do NOT collect personally identifiable information (PII). They store only anonymous session identifiers.

4.3 Third-Party Cookies

We may use third-party services that set their own cookies:

Stripe - Payment processing (strictly necessary for subscriptions)
Google Cloud Platform - Service infrastructure and performance monitoring

These third parties have their own cookie policies, which we encourage you to review.

5. Local Storage and Session Storage

In addition to cookies, our SDK may use browser storage technologies:

Local Storage - Stores widget preferences and state (persistent)
Session Storage - Stores journey path and interaction history (session-only)

These storage mechanisms are used solely for providing analytics and personalized experiences. They do not track you across different websites.

6. Do Not Track (DNT)

Our SDK respects the navigator.doNotTrack browser setting. If you enable Do Not Track in your browser, our analytics tracking will be disabled automatically. However, strictly necessary cookies for authentication will still be used.

7. How to Control Cookies

7.1 Browser Settings

Most browsers allow you to control cookies through their settings. You can:

Block all cookies
Accept only first-party cookies
Delete cookies after each browsing session
View and delete specific cookies

Browser-specific instructions:

7.2 Opt-Out of Analytics Tracking

To opt out of Prysmera analytics tracking:

Enable Do Not Track in your browser settings
Block cookies from websites using Prysmera SDK
Contact the website owner to request opt-out

7.3 Impact of Blocking Cookies

Blocking cookies may impact your experience with Prysmera:

Dashboard - You will not be able to stay logged in
Websites using SDK - Personalized guidance and interventions may not work properly

8. Cookie Consent for Website Owners

If you integrate Prysmera SDK on your website, you are responsible for obtaining proper cookie consent from your visitors in accordance with applicable laws (e.g., GDPR, CCPA).

Recommended Implementation:

Display a cookie consent banner on your website
Only initialize Prysmera SDK after user consent is obtained
Provide clear information about Prysmera's data collection practices
Offer an easy way for users to withdraw consent

Example Implementation:

if (userConsentedToCookies) {
  // Initialize Prysmera SDK
  window.PRYSMERA.init({ apiKey: 'your_api_key' });
} else {
  // Do not initialize SDK until consent is given
}

9. Data Retention

Cookie data is retained as follows:

Session cookies - Deleted when you close your browser
Persistent cookies - Deleted after the expiration period (7-30 days)
Analytics data - Retained per your subscription plan limits

10. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the "Last Updated" date at the top of this policy.