PrismForge turns your text prompts into editable CAD geometry. To do that, some of your data — your prompt, your design context, and your account details — travels to our servers and our AI provider. This page explains exactly what we collect, why, who it's shared with, and the rights you have over it.
We collect what we need to run the service: your account details, the prompts and design context you submit, and your billing records. We do not sell your data or use it for advertising.
Your prompts, reference images, and a snapshot of your scene are sent to our AI provider, Anthropic, to generate geometry. Your account email is never sent to Anthropic.
Payments run through Razorpay. We never see or store your full card number — only the last four digits and a one-way fingerprint used to prevent fraud.
You can ask us to access or delete your data anytime at contact@prismforge.co.in.
PrismForge is operated by Vivek Trivedi, an individual based in India trading under the brand name "PrismForge" ("PrismForge", "we", "us", or "our"). PrismForge is not an incorporated company. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy.
This policy applies to the PrismForge website at prismforge.co.in and to the PrismForge plugins for AutoCAD, Blender, Rhino, and Grasshopper (together, the "Service").
You can reach us at any time at contact@prismforge.co.in.
We collect only what we need to run the Service. The categories below reflect what the Service actually does.
Our legal basis under the DPDP Act is your consent (given when you create an account and submit prompts) and our need to perform the service you have requested. We do not use your data for advertising, and we do not sell your personal data.
PrismForge generates geometry using large language and vision models provided by Anthropic (the Claude API). To do this, the following are transmitted to Anthropic for processing:
Your account email and payment details are never sent to Anthropic. Anthropic processes this content to return geometry and acts as our processor for that purpose. Anthropic's handling of API data is governed by their own commercial terms; as of this policy's date, content submitted through Anthropic's commercial API is not used to train their models.
If you do not want your prompts or design context processed by a third-party AI provider, please do not use the Service, as this processing is essential to how it works.
Some of our sub-processors (notably Anthropic, Vercel, and Resend) operate outside India, primarily in the United States. This means your data may be transferred to and processed in countries other than your own. We share data with these providers only to the extent needed to deliver the Service, and only with providers that maintain recognised security and data-protection practices. By using the Service, you consent to these transfers.
We keep personal data only as long as we need it for the purposes above:
| Data | Retention |
|---|---|
| Account information | While your account is active, and up to 90 days after you ask us to delete it. |
| Prompts, generation history & outputs | While your account is active, so you can see your usage history. Deleted on account deletion or on request. |
| Payment & billing records | Up to 8 years, as required by Indian tax and accounting law, even after account closure. |
| Analytics & telemetry | Up to 24 months in identifiable form, after which it is aggregated or anonymised. |
| Fraud-prevention signals (hashed IP, instrument fingerprints) | Up to 24 months. |
No method of transmission or storage is perfectly secure. While we work to protect your data, we cannot guarantee absolute security. If a personal-data breach occurs, we will act in line with our obligations under the DPDP Act.
Under the DPDP Act, you have the right to:
To exercise any of these rights, email contact@prismforge.co.in. We will respond within a reasonable period and may need to verify your identity first.
PrismForge offers a limited number of free generations to new accounts. To stop a single person from creating many throwaway accounts to abuse the free tier, we use a small set of privacy-preserving signals:
These signals are used solely to detect and prevent abuse, and are retained as described in section 7.
We keep this minimal:
The Service is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy as the Service evolves or as the law changes. When we make material changes, we will update the "Last updated" date at the top of this page. Significant changes may also be communicated by email. Continued use of the Service after an update means you accept the revised policy.
For any privacy question, data-rights request, or grievance, contact our Grievance Officer:
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India under the DPDP Act.