Home/Legal/Privacy

Prime RP Privacy Notice

Effective April 19, 2026

How we collect, use, share, and protect personal data across the website, product, and enterprise sales relationship.

01

Scope and who “Prime RP” means

“Prime RP”, “we”, “us”, and “our” refer to the service operators and the relevant contracting entity identified in your order forms, contracts, or onboarding materials.

This notice covers website visitors at primerp.ai, people contacting us for sales, demos, or support, authorized product users, and business contacts involved in enterprise sales and account management. If you access Prime RP through an employer or organization, that entity may also control certain information processing with its own privacy obligations.

02

Data we collect

  • Identity and account data: name, email, company, role, username, profile photo, login identifier
  • Contact and communications data: message content, inquiries, support requests, feedback, meeting requests
  • Service usage data: device, browser, logs, crashes, sessions, pages, interactions
  • Location data: approximate or precise device location, when enabled
  • Operational content: task details, approval comments, files, HR records, workflow data
  • Technical identifiers: IP address, cookies, storage identifiers, notification tokens, security logs
  • Commercial data: billing contacts, contract details, implementation information
  • Limited sensitive or regulated information, per contract requirements
03

Where data comes from

Information is collected directly from users contacting us, requesting demos, creating accounts, or submitting content; from organizations, administrators, or implementation teams provisioning accounts or configuring workflows; automatically from devices and browsers during public site or service use; and from integrations, public sources, or service providers relevant to implementation or requested services.

04

Why we process personal data

  • Providing, securing, operating, and improving the website, platform, and services
  • Setting up accounts and managing authentication, permissions, and workspaces
  • Supporting approvals, tasks, collaboration, communications, HR workflows, hiring, finance, and procurement features
  • Responding to sales, support, feedback, legal, privacy, or security inquiries
  • Monitoring performance, troubleshooting, maintaining availability, and preventing fraud and unauthorized access
  • Complying with legal obligations and enforcing contracts
  • Analyzing usage and quality to improve the service and inform decisions
05

Lawful bases where applicable

Under GDPR or UK GDPR, we rely on performance of a contract or pre-contract steps, legitimate interests in operating and improving the service, consent where required or chosen, compliance with legal obligations, and protection of vital or public interests where applicable law permits.

06

How we share data

Data may be shared with service providers and infrastructure partners; implementation partners or contractors; your organization, administrators, or authorized users; advisers, auditors, insurers, or professional service providers; authorities, courts, regulators, or law enforcement; and buyers, successors, or counterparties in a transaction or restructuring.

We do not “sell” personal information unless that term applies under a specific applicable law.

07

International transfers

Prime RP may process data in more than one country depending on hosting, support operations, or service providers. Where a transfer is restricted under applicable law, we use appropriate safeguards such as contractual measures, adequacy mechanisms, or other lawful transfer tools.

08

Data retention

Personal data is retained as long as needed for the purposes described here, during the contract term, and thereafter for security, continuity, audit, support, backup, dispute resolution, and legal compliance. Retention periods vary by data type, configuration, and applicable law.

09

Your privacy rights

Rights vary by location. EEA and UK residents have rights to access, rectify, erase, restrict, object, request portability, and withdraw consent. California and certain other U.S. state residents have rights to know, access, delete, correct, opt out of certain uses, appeal, or limit the use of sensitive data.

Enterprise account holders may be directed to their organization to exercise these rights. Requests can be sent to privacy@primerp.ai or submitted through the Account Deletion Request page.

10

Security

We use administrative, technical, and organizational measures designed to protect personal data appropriate to the nature of the information and the risks involved. No method of storage or transmission is completely secure, but our design emphasizes least privilege, auditability, role-based controls, and operational resilience.

11

Regional notices

EEA and UK: GDPR and UK GDPR apply, and you have the right to lodge a complaint with your local supervisory authority. Information is provided concisely, transparently, intelligibly, and accessibly.

California and other U.S. states: residents may have additional rights under state privacy laws, including the right to know, access, delete, correct, appeal, or opt out of certain disclosures or targeted advertising, depending on applicable law.

12

Cookies and local storage

The launch website currently uses essential local storage for theme preference and basic interface state. See the Cookie Notice for the current list and retention details.

13

Children

Prime RP is not directed to children, and we do not knowingly collect personal data from minors in a manner prohibited by applicable law. If you believe a minor has submitted personal data improperly, contact us so we can review and take appropriate action.

14

Updates and contact

This notice may be updated periodically. Material changes are reflected in the effective date above, with additional notice where appropriate. Questions or rights requests should be directed to privacy@primerp.ai.