Last updated: October 14, 2026
Who we are
Prisma Advisors LLC (“Prisma”) is a firm based in Carolina, Puerto Rico. We offer technology and process consulting and three products: Prisma Time, Prisma Hub and Prisma Site. For any privacy matter, write to yoel@prisma-advisors.com or call (787) 587-0199.
What data we collect on this website
What you write to us: in the contact form (name, company, phone or email, product of interest and message), or when you contact us by WhatsApp, phone or email.
The contact form is sent through FormSubmit, an outside service that turns what you write into an email that reaches us. The page loads its fonts from Google Fonts, so your browser makes a request to Google when you open it.
This website does not use advertising cookies or analytics tools.
What data is stored in the products
When a company uses our products, we store the information its team loads so we can provide the service:
- Prisma Time: the company’s users (name and email), the hours logged, projects, approvals and, if the company uses them, pay and bill rates.
- Prisma Hub: the office’s users, its client records, files and filings, tasks, emails, proposals and invoices and, if the company connects its bank accounts, their transactions and balances.
- Prisma Site: the content the client gives us for their website. Forms on a client’s website go to that client’s inbox.
Connected bank accounts (Plaid)
In Prisma Hub’s Finance module, a company admin can connect the bank accounts and credit cards of their own business. The connection is made with Plaid: the person signs in to their bank inside Plaid’s window, and Prisma never sees or stores their bank username or password.
Through that connection we receive transactions, balances, each account’s name and its last 4 digits. We use them only to show that company its own transactions and balances, categorize them, reconcile them against its invoices and prepare its reports, such as the P&L. We do not sell them, share them with third parties for their own purposes, or use them for advertising.
Each connection’s access token is stored encrypted and only our server can read it. When a bank is disconnected, the connection is removed at Plaid and that token is deleted right away; transactions already imported stay in the company’s books unless it asks us to delete them.
Plaid handles data under its own policy: Plaid End User Privacy Policy.
Whose data it is
The data a company loads into Prisma Time or Prisma Hub belongs to that company. We handle it on its behalf, to provide the service. If you are an employee or a client of a company that uses our products and want to see, correct or delete your information, the most direct route is to ask that company; you can also write to us and we will contact them.
What we use the data for
- To provide the contracted service and support it.
- To reply to people who write to us.
- To invoice.
- To improve the products.
We do not sell personal data or use it for third-party advertising.
Artificial intelligence
Three features go through Anthropic, our artificial intelligence provider: filling hours by dictating, in Prisma Time; Prisma Assistant, which answers questions about the company’s data, in Prisma Hub; and category suggestions for transactions, in Finance.
Only what each answer needs is sent: what the person dictated or asked and the records needed to answer (for example invoice totals, client names, or transaction descriptions and amounts). Passwords, access tokens and other secrets are never sent. Prisma Assistant runs only for companies that ask for it, and under Anthropic’s commercial terms this data is not used to train models.
The rest of the product works without these features.
Who we share data with
Only with the providers needed for the service to work: Supabase (database and sign-in), Vercel (hosting), Plaid (bank connections), Anthropic (artificial intelligence), Resend (email) and, on this website, FormSubmit (contact form). Product data is stored in the United States. We also share data if a law or a court order requires us to.
How we protect data
- Everything travels encrypted (HTTPS) and the database is encrypted at rest.
- Each company sees only its own data: the database enforces it on every query.
- Every person can turn on two-step verification (a code from their phone at sign-in), and it is required to connect banks.
- Only authorized Prisma staff can access the systems, always with two-step verification.
Exporting your data and canceling
Prisma Time exports hours to Excel and PDF at any time. While a company has the service, we keep its information so it can see its history.
If you cancel, you can ask for your information to be handed over within 30 days after the service ends. We delete the company’s data no later than 90 days after it ends, whether or not a handover was requested, unless a law requires us to keep it longer. Backups containing that data expire on their own within 7 days.
Your requests
You can ask us to see, correct or delete the personal information we hold about you by writing to yoel@prisma-advisors.com. A company can ask us to delete specific data or all of its data; we complete it within 30 days.
Changes to this policy
If we change this policy, we publish the new version on this page with its date.