HomeData Handling
Terms

Data Handling

Last updated: May 2026

The short version

Your assessment responses generate your report. Your report is stored so you can access it through your profile at any time. Your data is not sold, shared, or used for any purpose beyond this. That is the complete picture.

What PRISM stores and why

DataPurposeRetention
Name, email, age, country of origin, destinationReport personalisation and deliveryDuration of account
Assessment responses (60 questions)Report generation and profile accessDuration of account
Generated reportOn-demand access through your profileDuration of account
Transaction recordAdministrative and refund processing7 years (standard accounting)
Session data (device, browser, IP)Security and service integrity90 days

Your report is yours

Once generated, your report is accessible through your profile at any time. You can read it, download it as a PDF, and share it at your discretion. PRISM does not access your report after generation except to serve it to you on request.

Who can see your data

Nobody except you. PRISM staff do not routinely access individual assessment responses or reports. PRISM does not share individual data with governments or immigration authorities, employers or credential bodies, immigration consultants or agencies, research institutions, or advertisers.

Aggregated data

PRISM may analyse aggregated, fully anonymised data — for example, distribution of scores across pillar categories — for product improvement purposes. This analysis cannot identify individual users and is not shared externally.

Data infrastructure

PRISM uses industry-standard cloud infrastructure with encryption at rest and in transit. Authentication is required to access any stored personal data or report. PRISM does not operate its own physical servers.

Account deletion

You may request deletion of your account at any time by contacting us below. Upon verified request, all personal data and assessment responses associated with your account will be deleted within 30 days. Transaction records are retained for the legally required period.