Last updated: February 1, 2026
Prynt, Inc. ("Prynt," "we," "us," or "our") operates a device intelligence platform that enables businesses to identify devices, detect fraud, and protect their applications from malicious actors. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at prynt.io, use our dashboard at app.prynt.io, or interact with our API and SDKs (collectively, the "Service").
We are committed to protecting the privacy of both our customers and the end users whose device data flows through our platform. This policy applies to all data processed by Prynt, whether collected directly from you or provided to us through the use of our device intelligence services.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Service immediately.
When you register for a Prynt account, we collect personal information that you voluntarily provide to us, including your name, email address, company name, and billing information. This data is necessary to create and maintain your account, process payments, and provide customer support.
When our SDK or API is deployed by a customer, we collect technical signals from the end user's device for the purpose of generating a persistent device identifier and risk assessment. This data includes, but is not limited to:
Important: By default, Prynt does not collect or store any personally identifiable information (PII) such as names, email addresses, physical addresses, or financial information from end users. All device signals are technical in nature and are processed to generate probabilistic device identifiers.
We automatically collect certain information when you use our dashboard or API, including access timestamps, API endpoints called, request volume, response codes, and performance metrics. We use this data to monitor service health, investigate issues, and improve our platform.
We use the information we collect for the following purposes:
Prynt retains device intelligence data for a configurable period determined by each customer's account settings. The default retention period is 90 days from the date of collection. After this period, device data is automatically and permanently deleted from our active systems.
Customers on Pro and Enterprise plans may customize their retention period between 30 days and 365 days, depending on their regulatory and business requirements. Aggregate, anonymized analytics data may be retained beyond the configured retention period for the purpose of improving our models and reporting.
Account information is retained for as long as your account remains active. Upon account termination, we will delete your account data within 30 days, except where retention is required by applicable law or to resolve disputes.
Backup copies of data may exist in our disaster recovery systems for up to an additional 30 days beyond the primary deletion date.
Prynt is built on a foundational principle: we do not sell your data. We do not sell, rent, trade, or otherwise share personal information or device intelligence data with third parties for their own marketing or commercial purposes.
We may share data in the following limited circumstances:
Prynt operates globally and may process data in jurisdictions outside of your country of residence. Our primary data processing infrastructure is located in the United States (AWS us-east-1 and us-west-2 regions), with additional processing nodes in the European Union (eu-west-1) and Asia-Pacific (ap-southeast-1) for latency optimization.
For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, Prynt relies on the EU-US Data Privacy Framework (DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework, as applicable. Prynt has certified its compliance with these frameworks to the U.S. Department of Commerce.
Where the Data Privacy Framework does not apply, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for cross-border data transfers. Copies of these clauses are available upon request.
Customers with strict data residency requirements may contact us about our EU-only processing option, available on Enterprise plans.
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent local laws:
To exercise any of these rights, please contact us at privacy@prynt.io. We will respond to verified requests within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a CCPA request, email privacy@prynt.io or write to us at the address listed in Section 11.
Prynt uses a minimal set of cookies on our website and dashboard, strictly limited to those necessary for core functionality. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
The cookies we use fall into the following categories:
Our SDK, deployed on customer websites, does not set cookies on end users' browsers. Device identification is performed entirely through client-side signal collection and server-side processing, without relying on cookie-based tracking.
Prynt implements comprehensive security measures to protect the data we process. Our security program includes, but is not limited to:
While we take extensive measures to protect your data, no method of electronic transmission or storage is 100% secure. We encourage customers to use strong authentication, rotate API keys regularly, and follow the security best practices outlined in our documentation.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you through one or more of the following methods:
We encourage you to review this policy periodically. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Continued use of the Service after a revised policy becomes effective constitutes your acceptance of the updated terms.
For material changes that significantly affect how we process personal data, we will provide at least 30 days advance notice before the changes take effect.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a privacy concern, please contact us through the following channels:
For EU-specific inquiries, you may also contact our EU representative: Prynt EU B.V., Herengracht 420, 1017 BZ Amsterdam, Netherlands.
We aim to respond to all privacy-related inquiries within 5 business days and to fulfill data subject requests within 30 days of receipt of a verified request.