Privacy Policy

Last Updated: February 11, 2026 | Version 2.0

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, organization, job title, and credentials when you register
• Profile Data: Professional information, preferences, and settings you configure
• Content: Data, text, and inputs you submit to The Service for analysis
• Communications: Correspondence when you contact us for support or feedback
• Payment Information: Billing details processed by our secure payment providers

1.2 Information Collected Automatically

• Usage Data: Features accessed, time spent, interaction patterns
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP addresses, access times, pages viewed, referring URLs
• Analytics: Aggregated performance and usage metrics

1.3 Information from AI Interactions

• Session Data: Inputs and outputs from AI coaching sessions
• Behavioral Patterns: Anonymized patterns used to improve AI models
• Feedback: Ratings and feedback you provide on AI responses

2. How We Use Your Information

Purpose	Legal Basis
Provide and maintain The Service	Contract performance
Process transactions and billing	Contract performance
Personalize your experience	Legitimate interest
Improve AI models and algorithms	Legitimate interest
Send service communications	Contract performance
Ensure security and prevent fraud	Legitimate interest / Legal obligation
Comply with legal requirements	Legal obligation
Marketing (with consent)	Consent

3. Data Sharing and Disclosure

3.1 Service Providers

We share data with trusted third-party vendors who assist in operating The Service:

• Cloud infrastructure providers (data hosting and processing)
• Payment processors (transaction handling)
• Analytics services (usage insights)
• Customer support tools (ticket management)

All service providers are bound by data processing agreements and confidentiality obligations.

3.2 Legal Requirements

We may disclose information when required by law, legal process, or government request, or to protect the rights, property, or safety of The Company, our users, or others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction. We will notify affected users before their data becomes subject to a different privacy policy.

3.4 With Your Consent

We may share information with third parties when you explicitly authorize such sharing.

4. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: TLS 1.3 for data in transit; AES-256 for data at rest
• Access Controls: Role-based access, multi-factor authentication, principle of least privilege
• Infrastructure: SOC 2 Type II compliant hosting environments
• Monitoring: 24/7 security monitoring and intrusion detection
• Audits: Regular security assessments and penetration testing
• Incident Response: Documented procedures for security incident handling

5. Data Retention

We retain your data according to the following principles:

• Account Data: Retained while your account is active, plus 30 days after deletion request
• Session Data: AI interaction logs retained for 90 days for service improvement, then anonymized or deleted
• Billing Records: Retained for 7 years as required by tax and accounting regulations
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@thetadriven.com. We will respond within 30 days.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Data Processing Agreements with all sub-processors
• Compliance with applicable cross-border transfer requirements

8. Cookies and Tracking

8.1 Types of Cookies We Use

• Essential: Required for core functionality (authentication, security)
• Functional: Remember preferences and settings
• Analytics: Understand usage patterns (can be disabled)

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect The Service's functionality.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. AI and Automated Decision-Making

The Service uses AI for coaching, analysis, and recommendations. You have the right to:

• Know when AI is being used to process your data
• Understand the logic involved in automated decisions
• Request human review of significant automated decisions
• Opt out of AI-based profiling for marketing purposes

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising privacy rights

13. European Privacy Rights (GDPR)

EU/EEA residents have rights under the GDPR as outlined in Section 6. For GDPR-specific inquiries or to contact our Data Protection Officer, email dpo@thetadriven.com.

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or through The Service at least 30 days before taking effect. The "Last Updated" date indicates the most recent revision.

15. Contact Us