How we handle your data.

This Privacy Policy describes how Sociail, Inc. ("Sociail," "we," "us") collects, uses, and shares information when you visit our marketing pages, request Early Access, sign into your Sociail workspace at chat.sociail.com, install or use Browser Control, or interact with our support channels.

Sociail is a shared AI workspace where people and AI teammates work in shared context. If your workspace is administered by a company, team, or workspace owner, that organization may also control workspace configuration and may have separate policies that apply to your work inside that workspace.

We collect the following categories of information:

• Account and profile information. Name, email address, authentication details, workspace details, and optional profile information you provide.
• Early Access and support information. Details you submit through our Early Access request flow, help forms, support messages, CRM handoff workflows, or feedback channels.
• Workspace content. Messages, room context, artifacts, files, decisions, and other content you create, upload, or share inside Sociail rooms.
• AI interactions. Prompts, instructions, AI responses, model routing metadata, tools invoked, approvals granted, and related receipts.
• Browser Control activity. When you enable Browser Control, we process the page context, URL, approval state, and action details you explicitly approve.
• Subscription and payment information. If paid plans are enabled for your account, we collect billing details needed to administer the subscription. Full payment card details are processed by Stripe or another payment processor and are not stored on Sociail servers.
• Technical data. Device type, browser, IP address, log data, usage events, error reports, and similar information collected automatically.
• Integration information. If you connect a third-party service, we may receive information from that service according to the permissions you grant.

Our help and request forms ask you not to send passwords, payment card numbers, private keys, or other unnecessary secrets. If you send sensitive information anyway, we process it only as needed to handle the request and protect the service.

We use the information we collect for the following purposes:

• Provide and operate the service. Authenticate users, route AI requests, show workspace content to the right participants, maintain rooms, and generate receipts.
• Support you. Respond to questions, troubleshoot issues, qualify Early Access requests, and improve support quality.
• Maintain security. Detect abuse, prevent fraud, investigate unauthorized access, and enforce our Terms of Use.
• Improve Sociail. Use product analytics, support signals, feedback, and de-identified operational metadata to improve reliability, safety, routing, and product quality.
• Communicate with you. Send service notices, policy updates, Early Access updates, onboarding messages, and marketing messages where permitted. You can opt out of marketing emails.
• Comply with legal obligations. Meet legal, tax, accounting, regulatory, or dispute-resolution requirements.

During request-led Early Access, we do not use your workspace content to train general AI or foundation models by default. Optional model-training, research, or benchmarking use of workspace content requires your explicit opt-in or a written agreement.

We share information in limited circumstances:

• Within your workspace. People you invite into a room can see the room's content. Workspace owners may see administrative information about their workspace.
• Service providers. We use vendors for hosting, authentication, analytics, payment processing, email delivery, support tooling, CRM workflows, and AI model inference. They process information for us under applicable service terms, data-processing controls, and retention limits.
• AI providers. When you direct a prompt or action to an AI teammate, the necessary inputs are sent to the model provider used for that request.
• Legal and safety. We may disclose information when required by law, to enforce agreements, or to protect Sociail, our users, or others.
• Business transfers. If Sociail is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may transfer to the successor entity subject to this policy.
• Aggregated or de-identified information. We may use or share data that cannot reasonably identify an individual or workspace.

We do not sell your personal information. We also do not use third-party advertising cookies on the public website.

Sociail uses third-party AI model providers to power AI teammates and AI-assisted features. When you direct a prompt to an AI teammate, Sociail sends the necessary inputs, workspace context, and tool instructions needed to fulfill that request.

We minimize the context sent for a request and do not use your workspace content to train general AI or foundation models by default. Provider handling remains governed by applicable service terms, retention limits, and data-processing controls.

Browser Control is user-enabled and approval-based. The extension only inspects or acts on a browser page when you explicitly approve the action through a visible approval prompt. Approval state is recorded with the corresponding action.

AI outputs may be incorrect or incomplete. Important decisions should not rely solely on AI output.

We use cookies and similar technologies for authentication, session management, security, preferences, site analytics, and performance measurement. We use privacy-conscious first-party telemetry and aggregate analytics to understand public website traffic, campaign source, Early Access funnel steps, support intent, and site performance.

We do not use website analytics to store raw support messages, hidden product conversations, private workspace content, or private portal content. Where applicable law requires consent for non-essential cookies, we provide a consent mechanism.

Our services do not currently respond to "Do Not Track" browser signals. You can control cookies through your browser, although disabling certain cookies may affect service functionality.

We retain workspace content and account information for as long as your account or workspace is active and as needed to provide the service. After deletion of an account or workspace, we delete or anonymize associated content within a reasonable period except where retention is required for legal, regulatory, security, billing, backup, or legitimate business reasons.

Logs, receipts, abuse-prevention records, support records, billing records, and backups may be retained for limited additional periods consistent with industry practice and legal requirements. Aggregated or de-identified improvement records may be retained longer when they do not reasonably identify you or your workspace.

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including HTTPS/TLS for data in transit, access controls, logging, vulnerability management, and internal security practices appropriate for the service.

No method of transmission or storage is 100% secure. If you believe your account or workspace has been compromised, contact us immediately. If a breach requires notification, we will notify affected users and regulators as required by applicable law.

Depending on where you are located, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal exceptions.
• Receive a copy of your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of certain sharing or marketing communications.
• Lodge a complaint with your local data protection authority.

California residents may have rights under the CCPA/CPRA. People in the EEA, United Kingdom, or Switzerland may have rights under GDPR, UK GDPR, or similar laws. To exercise these rights, use available account controls or contact us at the address below. We may need to verify your identity before fulfilling a request.

Sociail is not intended for children under the age of 13, or under 16 in jurisdictions where that higher age applies. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

Sociail is operated from the United States. By using our services, you understand that your information may be transferred to, processed in, and stored in the United States and other jurisdictions. Where required by law, we use appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of the page. For material changes, we will provide additional notice, such as by email, in-product notice, or another reasonable channel.

For privacy questions, requests, or concerns, contact Sociail Privacy. For product help, use our help channels. For the plain-English operating model behind our privacy-first AI posture, read Trust.

Mailing address: Sociail, Inc., 511 N Boardwalk, Rehoboth Beach, DE 19971, USA.