Privacy Notice
Last updated: 2026-07-21
1. Who we are
PurposePRISM is operated by Christa C Mariah ("we", "us", "our"). We act as the data controller for personal data collected through this site and app.
2. Personal data we collect
- Account data: name, email, login credentials.
- Profile & journey data: hero profile, journal entries, quest answers, chronicles.
- Support & communications: messages you send us or post in community.
- Usage & device data: IP address, browser, device identifiers, telemetry.
3. How we use your data
- Creating and operating your account and providing the service.
- Personalizing your journey, dashboard, and community experience.
- Providing customer support and responding to your requests.
- Security, fraud prevention, and enforcement of our Terms.
- Product improvement and (with consent where required) marketing communications.
4. Legal basis
We process personal data on the basis of contract performance (delivering the service you signed up for), our legitimate interests (security, product improvement), your consent (where required, e.g. marketing or non-essential cookies), and compliance with legal obligations.
5. Sharing your data
We share personal data with the following categories of recipients:
- Service providers / subprocessors: hosting, database, analytics, and email tooling that operate the service on our behalf.
- Merchant of Record — Paddle: Paddle.com Market Limited acts as our reseller and Merchant of Record for all purchases. Paddle handles payments, billing, subscription management, tax compliance, invoicing, and payment-related support.
- Professional advisers: legal, accounting, and compliance advisers where necessary.
- Authorities: where required by law or to protect our rights.
6. Data retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. When data is no longer needed we delete or anonymise it.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, contact us at the email listed below. You also have the right to complain to your local data protection authority.
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and authenticated APIs — to protect your personal data.
9. Cookies
We use essential cookies to keep you signed in and to operate the service. Where we use analytics or non-essential cookies we will ask for your consent and let you manage preferences.
10. Contact
Questions about this notice or your data can be sent to Christa C Mariah at the contact address shown on this site. Billing questions can be sent directly to Paddle via paddle.net.