Privacy Policy
Adaptive Thinking. Built To Last.
Privacy Policy
Table of Contents
Summary
SubThought collects only the information necessary to provide our platform and services. We do not sell your personal data. We use industry-standard security practices to protect your information. If you have questions, contact us.
Introduction
SubThought Corporation (“SubThought,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at subthought.ai, use our platform, or interact with our services (collectively, the “Services”).
By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Services.
This policy applies to all visitors, users, customers, partners, and others who access or use SubThought’s Services — including individuals who submit inquiries through our contact forms, developers who use our API and platform tools, and enterprise customers deploying our cognitive systems.
Information We Collect
Information You Provide Directly
We collect information you voluntarily provide when you interact with our Services, including:
- Contact information such as your name, email address, phone number, and company name when you submit a contact form or request access to our platform
- Account registration information when you create a developer account or access our platform
- Communications you send to us, including emails, support requests, and messages submitted through our contact form
- Investor inquiry information, including your investment type, range, and organization, when you request access to investor materials
- Payment and billing information when you purchase our services (processed securely through third-party payment processors)
Information Collected Automatically
When you visit our website or use our Services, we automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring URLs and exit pages
- Device identifiers and technical specifications
- Date and time of access
Platform and API Usage Data
If you use the SubThought platform, Mind Server API, or developer tools, we may collect usage data including API call logs, error reports, performance metrics, and deployment configuration data — solely for the purposes of providing, maintaining, and improving our Services.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate our Services — including processing your requests, managing your account, and delivering platform functionality.
- To respond to your inquiries — including contact form submissions, support requests, and investor access requests.
- To communicate with you — including sending transactional emails, platform updates, developer newsletters (where you have opted in), and important notices about our Services.
- To improve our Services — analyzing usage patterns to enhance platform performance, fix bugs, and develop new features.
- To ensure security — detecting, preventing, and addressing fraud, abuse, and security incidents.
- To comply with legal obligations — meeting applicable legal, regulatory, and contractual requirements.
- To protect our rights — enforcing our Terms of Service and other agreements.
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:
- Service providers — We engage trusted third-party vendors to help us operate our Services, such as cloud hosting providers, email delivery services, payment processors, and analytics tools. These providers are contractually obligated to use your information only as directed by us and in accordance with this policy.
- Business transfers — If SubThought is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- Legal requirements — We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- With your consent — We may share your information with third parties when you have given us explicit consent to do so.
Cookies & Tracking Technology
We use cookies and similar tracking technologies to operate and improve our Services. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use:
- Essential cookies — Required for the website to function. These cannot be disabled.
- Analytics cookies — Help us understand how visitors interact with our site. We use this data in aggregate form to improve our Services.
- Preference cookies — Remember your settings and preferences to improve your experience.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services. We do not use cookies for behavioral advertising or cross-site tracking.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Contact form submissions are retained for up to 24 months.
- Account data is retained for the duration of your account and for up to 12 months following account closure.
- Platform usage logs are retained for up to 12 months.
- Investor access request data is retained for up to 36 months.
- Legal and compliance records are retained as required by applicable law.
When your information is no longer required, we securely delete or anonymize it.
Data Security
We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Access controls and authentication requirements for systems that process personal data
- Regular security assessments and vulnerability testing
- Employee training on data privacy and security practices
While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying affected users promptly in the event of a data breach affecting their personal information.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right of access — Request a copy of the personal information we hold about you.
- Right of rectification — Request correction of inaccurate or incomplete information.
- Right of erasure — Request deletion of your personal information, subject to legal retention requirements.
- Right to restrict processing — Request that we limit how we use your information.
- Right to data portability — Request your information in a machine-readable format.
- Right to object — Object to our processing of your information in certain circumstances.
- Right to withdraw consent — Withdraw consent for processing where consent is the legal basis.
To exercise any of these rights, please contact us. We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request.
Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will promptly delete that information.
International Data Transfers
SubThought is headquartered in the United States. If you are accessing our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
By using our Services, you acknowledge that your information may be transferred to countries that may have different data protection laws than your country of residence. Where required, we implement appropriate safeguards for international data transfers, including standard contractual clauses approved by relevant regulatory authorities.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify registered users by email where required by applicable law
- Post a prominent notice on our website for material changes
We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions about these Terms or wish to report a violation, please contact us. Our team is happy to clarify any part of this agreement before you use our Services.