Privacy policy

Last updated 13 October 2026. This policy is under review and may change.

1. Who we are

Prism is run by Veritas Campaigns Ltd (“Veritas”, “we”, “us”), a company registered in England and Wales under number 15519084, with its registered office at 5 St. Johns Terrace, London, SE18 7RT.

For any question about this policy or your data, email hugo@veritascampaigns.com.

2. Who this policy covers

• People who use Prism: staff and volunteers of organisations that use Prism and have been invited to it.
• People who visit this website without signing in.
• People who answer a Prism supporter survey run by an organisation they support.

3. What we collect, and why

If you use Prism

• Your Google account details: your name, email address and profile picture. Prism uses “Sign in with Google”, so we never see or store a password.
• Your access: which organisation(s) you belong to, your role, and the invitation that brought you in.
• Sign-in records: when you signed in and when you last used Prism, so we can keep your account secure.
• An activity record: important actions taken in a workspace (for example, who invited a new member), so each organisation can see what happened and when.
• The content your organisation adds: posts, emails, newsletters and draft messages you paste in, and the results Prism produces from them.

We use this information to provide Prism to your organisation, to keep it secure, and to support you. Our legal basis is our legitimate interest in running the service your organisation has asked for, and the contract between us and your organisation.

The content your organisation adds belongs to your organisation. For any personal information in it, your organisation decides what goes in and why, and we process it on their behalf. Please don't paste in personal details about private individuals.

If you answer a supporter survey

Surveys are anonymous. We store your answers with a random code and nothing else: no name, no email address, no supporter number, and nothing that could be matched back to you. Because we can't tell which answers are yours, we can't find or delete them individually afterwards.

If you visit this website

We don't use analytics, advertising or tracking cookies. Like any website, our hosting provider keeps short-lived technical logs (such as IP address and browser type) to keep the service running and secure.

4. What we never do

• We never store a guess about any identified person's political views.
• We never analyse anyone's social media or email account except an organisation's own, connected by that organisation.
• We never hold lists of the people an organisation contacts, and never suggest who to contact.
• We never record who liked, opened or clicked on anything. We only see totals, such as how many people opened an email.
• We never use race, religion, sexuality, disability or other protected characteristics when analysing or rewriting content.
• We never sell data or use it for advertising.

5. Who we share data with

We use a small number of trusted providers to run Prism. They act on our instructions:

• Google: to let you sign in with your Google account.
• Railway: hosts the Prism website and its database.
• Anthropic: provides the AI that analyses and rewrites the content your organisation adds. Anthropic doesn't use this content to train its models.

Some of these providers are based in, or store data in, the United States. Where data leaves the UK, we rely on the legal safeguards UK data protection law requires, such as the UK–US data bridge or approved contract terms.

We may also share information if the law requires it.

6. How long we keep it

• Account details are kept while you have access to Prism, and removed when you no longer do.
• Drafts in Test messaging that aren't saved are deleted automatically after 30 days.
• When an organisation stops using Prism, we delete its workspace and content, unless we have agreed something different with that organisation.

7. Cookies

Prism only uses cookies that are needed for it to work: to keep you signed in, to protect the sign-in process, and to remember which workspace you're in. We don't use any other cookies, so there is nothing to opt out of.

8. Your rights

Under UK data protection law you can ask to see the personal information we hold about you, and ask us to correct it, delete it, limit how we use it, or send it to you in a portable form. You can also object to how we use it. To do any of this, email hugo@veritascampaigns.com. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Security

Each organisation's data is kept separate from every other organisation's, and is only available to people that organisation has invited. Connections to Prism are encrypted.

10. Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change matters, we'll tell the organisations that use Prism.