Privacy Policy

Last updated: October 10, 2026

Essomen Prism is an independent, invite-only AI platform operated from India. This policy explains what data we handle, where it lives, and what choices you have.

Privacy-minded by design

Essomen Prism stores your API keys and conversation history locally in your browser. You can delete your saved conversations whenever you choose. AI requests may be processed by external model providers to generate responses.

What we store and where

• API keys (OpenRouter, Brave Search). Stored only in your browser's local storage. They are never sent to or stored on our servers. AI requests go directly from your browser to the provider.
• Conversation history. Stored only in your browser's local storage. We do not keep copies on our servers. You can delete individual conversations or clear them all from the app at any time.
• App settings and preferences. Stored in your browser's local storage (model selections, personas, custom squads, spending preferences).
• Account credentials. When you log in, we store a secure session cookie in your browser and a matching session record on our server. Passwords are stored as one-way hashes and cannot be read by us.

What happens when you clear browser data

Because your API keys, conversations, and settings live only in your browser, clearing site data or switching browsers or devices will permanently remove them. There is no cloud backup or sync. You will need to re-enter your API keys on a new browser or device.

How AI requests work

When you send a prompt, your browser sends it directly to the AI model provider you selected (for example, OpenRouter, which routes to providers like OpenAI, Anthropic, or Google). Our servers do not see, store, or process your prompts or the AI responses. Each provider has its own data handling practices, and we encourage you to review the privacy policy of any provider whose models you use.

If you enable web search grounding, your search query and Brave API key are sent through our server as a proxy to the Brave Search API. The key is forwarded in the request header only. It is never logged or stored on our servers.

What our servers record

• Account records. Your email address and login timestamps, needed to operate invite-only access.
• Session records. Temporary login sessions so you stay signed in.
• Server logs. Standard web server logs (timestamps, requested pages, error records) used for security and troubleshooting. These do not include prompt contents or API keys.

We do not run analytics tracking on the application at this time.

Invite-only access

Accounts are created by the platform administrator. There is no public registration. If you received an invitation, your account exists solely to give you access to the workspace.

Data sharing

We do not sell your personal data. We share data only as described above: AI prompts go to the model provider you choose, and search queries go to Brave Search if you enable that feature. We may disclose account records if required by applicable law.

Your choices

• Delete conversations from within the app at any time.
• Remove your API keys from Settings at any time.
• Clear your browser's site data to remove everything stored locally.
• Contact us at contact@essomen.net to request deletion of your account and associated server records.

Changes to this policy

We may update this policy as the platform evolves. The "last updated" date above will reflect the most recent version. Continued use of the platform after changes means you accept the updated policy.

Contact

For privacy questions or requests, email contact@essomen.net.