Effective Date: February 27, 2026
Last Updated: October 16, 2026
We at Subquadratic Inc. (together with our affiliates, "Subquadratic", "we", "our" or "us") respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, models, and services (collectively, "Services").
This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our Terms of Service and API Services Agreement. Our use of that data is governed by our customer agreements covering access to and use of those offerings, including our Data Processing Agreement (available at https://subq.ai/data-processing-agreement) and, where we process protected health information as a business associate, the applicable Business Associate Agreement.
We collect personal data relating to you ("Personal Data") as follows:
We collect Personal Data if you create an account to use our Services or communicate with us as follows:
When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment information, and transaction history (collectively, "Account Information").
We collect Personal Data that you provide in the input to our Services and that our Services generate in response ("Content"). Content includes text, prompts, instructions, files, documents, and images you submit, and the outputs our models return to you. Please do not submit Personal Data to our Services that you would not want processed as described in this policy, including sensitive Personal Data about yourself or others.
If you communicate with us, such as via email, support requests, or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send ("Communication Information").
We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity.
When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions:
We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
We collect information about your use of the Services, such as the types of content that you process, the features you use and the actions you take, usage volumes (such as tokens processed, characters processed, files or images uploaded, or API calls made), as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
We may determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to improve your product experience, for example to protect your account by detecting unusual login activity.
We use cookies and similar technologies to operate and administer our Services, and improve your experience. If you use our Services without creating an account, we may store some of the information described in this policy with cookies, for example to help maintain your preferences across browsing sessions. For details about our use of cookies, please read our Cookie Policy.
We receive information from our trusted partners, such as security partners, to protect against fraud, abuse, and other security threats to our Services, and from marketing vendors who provide us with information about potential customers of our business services.
We train our models on large volumes of data, including publicly available information collected from the internet and data we license from third parties. This information may incidentally include Personal Data about individuals who are not users of our Services. We do not use this information to build profiles of individuals, to contact them, or to market to them, and we take steps designed to reduce the amount of Personal Data in our training datasets. If you believe your Personal Data has been included in our training data, you may contact us at privacy@subq.ai. We will respond to your request as described in Section 5.
We may use Personal Data for the following purposes:
We may also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law. We do not use Content, including in aggregated or de-identified form, to train or improve our foundational models.
If you access our Services through a business offering, such as our API or an enterprise plan, we do not use your Content to train or improve our foundational models; our use of that Content is governed by your customer agreement.
We may disclose your Personal Data in the following circumstances:
To assist us in meeting business operations needs and to perform certain services and functions, we may disclose Personal Data to vendors and service providers, including providers of hosting services, cloud services, model inference and compute infrastructure services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers. Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.
If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a "Transaction"), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law, (iv) to detect or prevent fraud or other illegal activity, (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.
We may disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with Subquadratic. Our affiliates may use this Personal Data in a manner consistent with this Privacy Policy.
When you join a Subquadratic business account, the administrators of that account may access and control your Subquadratic account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
We'll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data will depend on a number of factors, such as:
We retain Content, including related safety classification results, for no more than sixty (60) days after processing, except that Content flagged for a potential violation of our Usage Policy may be retained for as long as reasonably necessary to investigate and address the violation, and except where longer retention is required by law. If you delete your account, we delete your Content and other Personal Data associated with it within sixty (60) days, except for records we are required to keep by law, such as billing and tax records. Where zero data retention is enabled, we do not retain Content after processing, except as described in our Terms of Service. Where we process Content on behalf of a customer of our business offerings, retention is governed by that customer's agreement with us.
Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:
You can exercise some of these rights through your Subquadratic account settings. If you are unable to exercise your rights through your account, please submit your request to privacy@subq.ai. You can contact our data protection officer at dpo@subq.ai.
Our models are trained on large datasets and do not function as a database of the information used to train them. Deleting your Personal Data from our records removes it from our systems going forward, but it does not remove information from models that have already been trained. Where we are able to, we will act on requests relating to model outputs as described below.
Our Services include foundational model capabilities. Our models generate outputs by predicting likely text, and those outputs may be inaccurate, incomplete, or misleading, including about individuals. If you notice that output from our Services contains inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests to privacy@subq.ai, and we will consider your request based on applicable law and the technical capabilities of our Services.
We do not use your Personal Data to make decisions that produce legal or similarly significant effects concerning you without human involvement. Our models generate outputs in response to the inputs you provide; those outputs are not decisions we make about you.
Subquadratic processes your Personal Data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including processing and storing your Personal Data in our facilities and servers in the United States. While data protection law varies by country, we apply the protections described in this policy to your Personal Data regardless of where it is processed, and only transfer that data pursuant to legally valid transfer mechanisms such as Standard Contractual Clauses approved by the European Commission.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases to process your Personal Data: performance of our contract with you, to provide the Services; our legitimate interests in securing, improving, and developing our Services and preventing misuse; your consent, where we ask for it; and compliance with our legal obligations.
Our Services are not directed to, or intended for, children under 18. We do not knowingly collect Personal Data from children under 18. If you have reason to believe that a child under 18 has provided Personal Data to Subquadratic through the Services, please email us at privacy@subq.ai. We will investigate any notification and, if appropriate, delete the Personal Data from our systems.
We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Services, or third-party websites.
Some U.S. state privacy laws require specific disclosures. The following provides additional information about the categories of Personal Data we collect and how we use and disclose that information.
We collect the following information, as described above:
We use this information for the following purposes, as described above:
We may disclose this information in the following circumstances, as described above:
We retain each category of Personal Data described above for the periods, and according to the criteria, described in Section 4.
Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:
We don't "sell" Personal Data or "share" Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for "targeted advertising" purposes (as those terms are defined under state privacy laws). We also don't process sensitive Personal Data for the purposes of inferring characteristics about a consumer.
Because we do not sell or share Personal Data or use it for targeted advertising, there is no such processing for you to opt out of. We nonetheless recognize opt-out preference signals, including Global Privacy Control, as an expression of your preferences.
You can exercise privacy rights described in this section by submitting a request to privacy@subq.ai.
In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.
You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to privacy@subq.ai.
Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to privacy@subq.ai.
We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law. If we make material changes to this Privacy Policy, we will provide you with notice via email or through the Services.
Please contact us if you have any questions or concerns not already addressed in this Privacy Policy:
Email: privacy@subq.ai or support@subq.ai
Mailing Address:
Subquadratic Inc.