Overview
This Policy describes the categories of information we collect, how we use and share it, and the choices you have. It applies where we act as a controller of your personal information in connection with the Services.
Separate terms may apply to certain features. If those terms conflict with this Policy, they govern for that feature.
Scope and Controller
402x, Inc., 123 Market St, Suite 400, San Francisco, CA 94103, USA is the controller of your personal information unless stated otherwise. This Policy does not apply to third‑party services that are governed by their own privacy policies.
Information We Collect
- Account Information: name, email, password, authentication tokens, organization details.
- Payment Information: billing address and limited payment details processed by our payment processors.
- Usage Data: log data, device/browser type, pages viewed, referring/exit pages, timestamps, IP address.
- Content You Provide: files, prompts, messages, feedback, and metadata you submit to the Services.
- Cookies and Similar Technologies: cookies, pixels, and local storage used for essential, analytics, and preference purposes.
How We Use Information
- Provide, operate, and maintain the Services.
- Process transactions, prevent fraud, and ensure security and integrity.
- Improve and develop features, including analytics and research.
- Communicate with you about updates, security alerts, and administrative messages.
- Personalize content and measure performance and engagement.
- Comply with legal obligations and enforce our terms.
Legal Bases
Where required by law (e.g., in the EEA/UK), we process personal information based on: (i) performance of a contract; (ii) legitimate interests (such as security, improvement, and communications); (iii) your consent; and (iv) compliance with legal obligations.
Data Retention
We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context.
Security
We implement technical and organizational measures designed to protect information. No system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials.
International Transfers
We may transfer, store, and process information outside your country. Where required, we use approved transfer mechanisms (such as standard contractual clauses) and implement additional safeguards.
Your Rights
- Access, correction, deletion, and portability of certain information.
- Objection or restriction to processing in certain circumstances.
- Withdrawal of consent where processing is based on consent.
- Right to lodge a complaint with a supervisory authority.
To exercise your rights, contact us as described below. We may need to verify your identity before fulfilling your request.
Children's Privacy
The Services are not directed to children under the age of 13 (or as defined by applicable law). We do not knowingly collect personal information from children. If we learn that a child has provided personal information, we will take steps to delete it.
Do Not Track
Some browsers transmit "Do Not Track" signals. Our Services do not respond to such signals. We adhere to the practices described in this Policy.
Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date above or by providing a notice through the Services.