Privacy Policy

Overview

We are committed to protecting your privacy. This privacy policy (this "Privacy Policy") is provided by SB Technology, Inc. ("SandboxAQ," "we," "us," or "our") on behalf of itself and its affiliates (including Cryptosense SA).

This Privacy Policy describes how SandboxAQ and its affiliates collects, uses, stores, discloses, and secures the personal data related to your use of our service and any services that link to this Privacy Policy ("Service").

As used in this Privacy Policy, "personal data" means any information relating to an identified or identifiable individual and includes any information that constitutes "personally identifiable information," "personal data," or "personal information" under applicable privacy or data protection laws or regulations. For the purposes of applicable data protection laws, SandboxAQ is a data controller and responsible for the processing your personal data.

If you are a resident of California, please also review our California Resident Privacy Notice for more information about the types of personal information we collect and disclose, as well as how to exercise your rights under California law.

You acknowledge the collection, use, disclosure, procedures, and other processing described in this Privacy Policy.

The Types of Personal Data We May Collect and Use

We may collect and process the following personal data from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use the full extent of the Service if that personal data is necessary to provide you with the Service or if we are legally required to collect it.

(a) Personal Data You Provide to Us

• Account data — We collect the data you provide to create, update, or manage your account, including, for example, your name and email address.
• Service data — We collect the personal data you provide when you use the Service.
• Contact data — We may collect your personal data when you inquire about us, the Service, or when you otherwise interact with us. This data may include your name, email address, and any data you choose to provide to us.
• Communications data — If you contact us directly, we may receive personal data about you, such as your name, email address, the contents of a message or attachments that you may send to us.

(b) Personal Data We Collect When You Use the Service

• Location data — We may collect and infer your general location information, including, for example, by collecting and using your internet protocol (IP) address.
• Device data — We may receive information about your device and software, including IP address, device type, device identifiers, web browser type and version, and operating system version.
• Usage data — We automatically receive information about your interactions with the Service, like the searches you conduct and the dates and times of your visits.
• Prompts and Outputs — The Service allows you to submit text, audio, images, video, documents, and other materials to the Service ("Prompts"), which generate responses based on your Prompts ("Outputs"). We will collect any information you choose to provide in your Prompts, and this information may be reproduced in the Outputs.

(c) Personal Data We Receive from Other Sources

• Information from Third-Party Services — If you choose to link the Service to a third-party account, including a large language model ("LLM") provider, we may receive information about you, including your use of the third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.

Using Your Personal Data, the Legal Bases, and Purposes

We use the personal data we collect:

• To provide, maintain, improve, debug, administer, and enhance the Service;
• To understand your preferences and analyze how you use the Service and develop new products, services, features, and functionality;
• To communicate with you, provide you with relevant updates and other information, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you;
• To generate anonymized or aggregated data containing only de-identified, non-personal data that we may use for any lawful purposes;
• To facilitate the connection of third-party services or applications, including LLMs;
• To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our contracts or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), we only process your personal data when we have a valid "legal basis," including as set forth below.

• Contractual Necessity — You may enter into a contract with us and some processing will be necessary for the performance of that contract or will be done at your request prior to entering into that contract. The provision of certain personal data may be necessary to provide our Service.
• Compliance with Legal Obligation — Processing may be necessary to discharge a relevant legal or regulatory obligation. For example, we may process your personal data to comply with tax and accounting obligations.
• Legitimate Interests — We may process your personal data where we or a third party have a legitimate interest in processing your personal data. The processing will, in all cases, be necessary for the legitimate business interests of SandboxAQ, such as (i) carrying out the ordinary or reasonable business activities of SandboxAQ; (ii) conducting internal analytics; and (iii) ensuring the security of information systems. We only rely on our or a third party's legitimate interests to process your personal data when these interests are not overridden by your rights and interests.
• Consent — We may also process data where you have provided consent. You have the right to withhold consent or withdraw it at any time in the future.

How We May Disclose Your Personal Data

• Partners and Affiliates — We may disclose any information we receive to our current or future affiliates for any of the purposes described in this Privacy Policy.
• Vendors and Service Providers — We may disclose any information we receive to vendors and service providers retained in connection with the Service.
• AI Service Providers — We may disclose information we receive to vendors that provide artificial intelligence services in order to provide you with the Service.
• LLMs — Our Service allows you to, upon your direction, disclose information to third-party LLMs, such as Anthropic. You understand and agree that the use of your information by any third-party LLMs will be governed by the privacy policies of these third-party LLMs. We encourage you to review their privacy policies.
• As Required By Law and Similar Disclosures — We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; respond to your requests; protect your, our, or others' rights, property, or safety; protect against legal liability; or investigate fraud or other unlawful activity. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Service.
• Merger, Sale, or Other Asset Transfers — We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.
• Consent — We may also disclose your information with your permission.

Links to Other Websites

The Service may include links to other websites maintained by third parties that are not owned or controlled by SandboxAQ. This Privacy Policy is limited to our own information collection practices, and we are not responsible for the privacy or information collection practices of other websites. We encourage you to be aware when you leave or are redirected from our Service and to read the privacy policies of any linked website.

International Data Transfers

SandboxAQ is headquartered in the United States ("U.S.") and works with customers and partners globally. If you choose to use the Service from the EEA, the UK or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing. We may transfer personal data from the EEA or the UK to the U.S. and other third countries based on European Commission-approved or UK Government-approved Standard Contractual Clauses, with your consent, to perform a contract with you, or otherwise in accordance with applicable data protection laws. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Service.

For more information about the tools that we use to transfer personal data, or to obtain a copy of the contractual safeguards we use for such transfers (if applicable), you can contact us using the details set out under "Contacting Us" below.

Retention of Personal Data

How long we hold your personal data for will vary. The retention period will be determined by various criteria, including the purposes for which we are using it. We generally retain personal data we process for as long as an account is active, as needed to provide the Service or as required by legal or regulatory obligations. If you wish to terminate your account or request that we no longer use your data, please contact us by using the details set out under "Contacting Us" below. We delete all your data on the expiry of 14 days after the termination of your account, except as otherwise required by applicable law or for internal compliance purposes.

Your Rights

Depending on your jurisdiction, you may have a number of legal rights in relation to the personal data that we hold about you. These rights include the following:

1. The right to obtain information regarding the processing of your personal data and access to the personal data that we hold about you.
2. In some circumstances, the right to receive some personal data in a structured, commonly used and machine-readable format and the right to request that we transmit that data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us.
3. The right to withdraw your consent to our processing of your personal data at any time. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent. Please note, however, that we may still be entitled to process your personal data if we have another legitimate basis (other than consent) for doing so.
4. The right to request that we rectify your personal data if it is inaccurate or incomplete.
5. The right to request that we erase your personal data in limited circumstances. Please note however that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it or such erasure is prohibited by law.
6. The right to object to, and the right to request that we restrict, our processing of your personal data in certain circumstances. Please note that there may be circumstances where you object to, or ask us to restrict, our processing of your personal data but we are legally entitled to continue processing your personal data and/or to refuse that request.
7. The right not to be subject to solely automated decision-making, including profiling, which have a legal or similarly significant effect on you.

You can exercise your rights by contacting us using the details set out under "Contacting Us" below. We may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain personal data for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

You also have the right, at any time, to lodge a complaint about our processing of your personal data with the relevant body regulating data protection in your country. In the UK, the data protection authority is the UK Information Commissioner's Office. A list of the EU data protection authorities and contact details is available at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

Our Service Is Not Intended for Children

Our Service is meant for adults. We do not knowingly collect, maintain, or use personal data from children under 18 years of age, and no part of the Service is directed to children. If you are a parent or legal guardian and think your child has given us information, you can contact us by using the details set out under "Contacting Us" below.

We Use Standard Security Measures

We value the security of your data and take reasonable measures to keep your data secure, but we cannot promise that your use of our Service will be completely safe. Any transmission of your data to us or our Service is at your own risk, and we can make no guarantees as to the security or privacy of your data.

We May Update This Privacy Policy

We may update this Privacy Policy from time to time and post the updated copy on this page. Please check this page periodically for updates as the revised version will be effective when it is posted.

Contacting Us

If you would like further information on our Privacy Policy or data processing practices, please contact us at privacy@sandboxaq.com.

Last Updated: [insert date]