Premise Privacy Policy

Version 1.0 Effective Date: Feb. 20, 2026

1. Our Core Promise: Data Sovereignty

At Prologue, which owns and operates Premise, we believe your brand is a proprietary asset. Unlike free consumer AI tools, we treat your inputs as strictly confidential commercial data. 

• No Training on Client Data: We do not use your Brand Knowledge Base, uploaded documents, or proprietary prompts to train our global AI models. Your brand voice remains siloed and exclusive to only your account.
• Ownership of Prompts & Outputs: You (the Client) retain full ownership of the conversational prompts you type into the platform and all final content (outputs) generated by Premise. Due to the nature of generative AI, we cannot guarantee that the outputs are globally unique, free from third-party infringement, or eligible for copyright or trademark protection, as these capabilities are determined by legal entities beyond our control. You are solely responsible for reviewing and legally clearing any content before commercial use.
• Ownership of the Knowledge Base: The underlying Brand Knowledge Base and strategic rules are configured exclusively by Prologue staff or authorized Admins (Certified Partners). You own 100% of your company's original information, facts, and existing brand assets. Separately, the specific AI instructions, custom prompt engineering, and backend logic that Prologue or a Certified Reseller writes to make the software understand the brand may not be the property of or made available to the brand.

2. Information We Collect

Account Information

We collect information necessary to create your workspace, including names and email addresses for Account Owners, Admins and authorized writers (Bylines). Billing is processed securely via our payment processor; we do not store raw credit card details.

Brand Assets (The "Knowledge Base")

To configure the Premise engine, Prologue staff or authorized Certified Partners may upload brand guidelines, style guides, voice samples, and strategic positioning documents. This data is stored in a secure, isolated environment, accessible only to authorized users and the AI processing pipeline.

Usage Data

We collect technical metadata and interaction data to improve your specific software experience. This includes login timestamps, session duration, feature usage, and direct user feedback (such as upvoting or downvoting generated content). We link your usage and feedback directly to your account to help improve your experience. This allows the system and Prologue staff to refine your outputs, troubleshoot errors, and actively tune your Brand Knowledge Base to generate better results for your specific team over time. 

3. How We Use Your Information

We use your data solely to deliver the Premise service:

• To Generate Content: Transmitting your prompts and brand context to our underlying LLM providers via secure, enterprise-grade APIs.
• To Maintain the System: Prologue support staff may access your account to troubleshoot errors or, for users who pay for maintenance, to actively tune your Brand Knowledge Base.
• To Manage Access: Ensuring only authorized users can access your workspace.

4. Sub-Processors & Third-Party Infrastructure

Premise is an orchestration layer that sits on top of best-in-class AI models and infrastructure. We share limited, necessary data with the following secure partners:

AI Model Providers 

We utilize enterprise API agreements with these providers, which stipulate that they do not use API data to train their base models.

• OpenAI: Processes your prompts, chat messages, and organization knowledge base content for AI-powered generation.
• Google Gemini: Processes your prompts, chat messages, and organization knowledge base content for AI-powered generation.

Hosting & Operations

• Neon: Database hosting and management. Stores all application data, including user accounts, content, chats, and organization information.
• Vercel: Application hosting and deployment. Processes application logs, performance metrics, and user requests.
• Google (SMTP): Sends login verification codes via Gmail SMTP. Processes your email address and verification codes.

5. Cookies & Tracking Technologies

Premise uses cookies and tracking technologies to secure the platform and improve the service.

• Essential Cookies: We use NextAuth.js session management to maintain your logged-in state securely. These use HTTP-only cookies stored securely in your browser and contain encrypted session tokens. You cannot disable these, as the platform will not function without them.
• Functional Storage: We use your browser's Local Storage to remember UI preferences (like open tabs and active workspaces). This data is stored only on your local machine and is never transmitted to our servers.
• Analytics Cookies: We use Google Analytics to understand how users interact with Premise (page views, session duration, device type, location at the city/country level). You can opt out using the Google Analytics Opt-out Browser Add-on.
• Internal Analytics: Our platform administrators monitor system health, feature usage, and user activity (chats created, content generated) stored securely in our database. This is strictly internal and never shared with third parties.
• Do Not Track: While some browsers include a "Do Not Track" signal, there is no industry standard for how to respond. We do not currently respond to these signals, but we strictly limit tracking to the essential and analytical functions described above.

6. Data Security, Access Control & Breach Notification

We employ industry-standard security measures to protect your data. All data is encrypted at rest (in our database) and in transit (via SSL/TLS).

We enforce strict Role-Based Access:

• Members (You): Have full access to generate content, but read-only access to Brand Rules to prevent accidental breakage.
• Admins (Partners): Certified partners you authorize can edit Brand Rules.
• Bylines (Writers): Can only see their own workspace and history. They cannot see the history of other users.

Data Breach Notification: We take the security of your proprietary brand data seriously. In the event that our systems are compromised and we confirm a data breach that exposes your personal information or Brand Knowledge Base to unauthorized parties, we commit to notifying the affected Org Admins as soon as possible, and strictly within 72 hours of discovering the breach. We do not store credit card information. 

7. Data Retention & Deletion

We store your prompt history and generated content to allow you to build a library of work. You may request the full deletion of your workspace and Brand Knowledge Base at any time by contacting support. Upon termination of service, data may be retained for up to 7 days as a grace period before permanent deletion.

8. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you are granted specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA).

• We do not sell your personal data. Premise is a B2B SaaS platform funded entirely by our subscription fees.
• Right to Know, Access, & Deletion: You have the right to request a copy of the personal information we have collected about you over the past 12 months, and the right to request that we delete it (subject to certain billing/compliance exceptions). Deleting this data could result in the deletion of your account if the data being deleted will impact the service we can provide to you. 
• To exercise these rights, please contact the "Org Admin of your workspace or email us directly at brad@prologuestories.com. We will not discriminate against you for exercising your privacy rights.

9. Business Transfers & Acquisition

Prologue may undergo corporate transactions such as a merger, acquisition, bankruptcy, or sale of all or a portion of our assets. In the event of such a transaction, your data—including your user account, Brand Knowledge Base, and proprietary content—will transfer to the acquiring entity as part of our business assets. By using Premise, you acknowledge and agree that this data will transfer to the new owner automatically, and we will not ask for additional permission prior to the transfer.

10. Contact Us

For privacy concerns or data subject requests, please contact: Prologue Support: brad@prologuestories.com, or you can write us at:

119 Evergreen Road, #43272 
Louisville, KY 40243