Privacy Policy

Your privacy is important to us. It is Malleable's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://www.usemalleable.com/, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

Effective Date: August 28, 2025

1. Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.

Personal Information

We collect personal data through both our website and our AI platform. The types of personal information we collect include:

Website data collection: When you interact with our website, we may collect the following information:

• Name
• Email address
• Password
• Company name
• Company category

AI Platform data collection: When you use our AI services, we may collect the following information:

• User prompts and inputs
• Generated AI outputs and responses
• Workflow descriptions and business process data
• Usage patterns and interaction data
• Account settings and preferences
• Workflow performance and optimization data
• Team collaboration and decision-making patterns

Institutional Knowledge: Our platform learns and captures your organization's specific terminology, preferences, decision patterns, and workflow optimizations to provide increasingly personalized and efficient experiences.

We also collect information you choose to provide in any "free text" boxes in our forms, as well as personal data disclosed by you in communications, including when you contact us with questions, feedback, or engage with us through chat applications.

AI-Specific Data Collection

User Inputs: We collect and process all text, prompts, questions, and other content you submit to our AI services ("User Inputs").

Generated Content: We store AI-generated responses, outputs, and content created through our services ("Generated Content").

Usage Analytics: We collect data about how you interact with our AI services, including feature usage, session duration, and performance metrics.

Log Data

When you visit our website or use our AI services, our servers may automatically log standard data provided by your web browser or application. This may include your device's Internet Protocol (IP) address, browser type and version, pages you visit, time and date of your visit, time spent on each page, and other details about your visit and usage patterns.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

2. How We Use Your Information

Legitimate Reasons for Processing

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

We may collect personal information from you when you do any of the following on our website:

• Register for an account
• Purchase a subscription
• Sign up to receive updates from us via email or social media channels
• Use a mobile device or web browser or integration to access our content
• Contact us via email, social media, or on any similar technologies
• When you mention us on social media
• Marketing and advertising purposes

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to provide you with our platform's core features and services and to deliver the websites
• to enable you to access and use our website, associated applications, and associated social media platforms

We may combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources. For example, if you provide us with your location, we may combine this with general information about currency and language to provide you with an enhanced experience of our site and service.

Further, we may use your personal information to comply with applicable law and legal requests.

Security of your personal information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification. If you wish to request the deletion of your personal data, please contact us at privacy@usemalleable.com.

While we cannot guarantee absolute data security, as no method of electronic transmission or storage is 100% secure, we apply industry-standard security measures and do our best to protect the personal information you provide to us.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring any passwords associated with accessing your personal information and accounts are secure and confidential.

How long we keep your personal information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. For example, if you have provided us with personal information as part of creating an account with us, we may retain this information for the duration your account exists on our system. If your personal information is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Service Improvement and Personalization

We use your usage patterns and workflow data to improve our platform and personalize your experience:

Platform Improvement:

• Fix bugs and optimize performance across our AI services
• Understand common workflow patterns to enhance our product features
• Analyze system usage to improve reliability and speed
• Identify areas where our AI can better understand business processes

Personalization for Your Organization:

• Learn your company's specific terminology and preferences
• Adapt workflows to match your team's decision-making patterns
• Remember your organizational preferences and settings
• Provide more relevant suggestions based on your industry and use cases

Service Delivery:

• Generate workflows and AI responses tailored to your requests
• Maintain your workflow configurations and customizations
• Provide technical support and troubleshooting
• Ensure compliance with your organization's requirements

Important Protections:

• Your data stays private: We don't train AI models on your specific data
• Data isolation: Your organization's patterns and business logic remain separate from other customers
• No cross-customer sharing: Company A's workflow patterns are never visible to Company B
• Enterprise controls: Larger customers can request additional data handling restrictions

Opt-Out: If you prefer to limit data usage for improvement purposes, contact us at privacy@usemalleable.com. Note that opting out may reduce personalization features and our ability to provide optimal service.

3. Disclosure of personal information to third parties

We may disclose information collected from and about you as follows:

• to our related companies and service providers, to perform a business, professional or technical support function for us (such as cloud hosting, analytics, and payment processing)
• to our analytics partners who collect and analyze data about how users interact with our website and products to improve functionality and user experience
• to our employees, contractors, and related entities
• to professional advisors including lawyers, accountants, and auditors
• to respond to legal process (such as a search warrant, subpoena or court order) and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law
• in the event that our Company or substantially all of its assets are acquired, or there is a re-structuring, your Personal Information may be one of the transferred assets. We may also disclose your Personal Information with your express consent. We may share aggregate, deidentified, or non-personally identifiable information about Sites’ users with third parties.

AI Service Providers: We work with third-party AI and machine learning service providers to enhance our offerings. These providers are bound by strict confidentiality agreements and data processing terms.

4. Your Privacy Rights

General Rights

Your Choice: By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of our website or services.

Information from Third Parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person's consent to provide the personal information to us.

Your Privacy Rights: Depending on your jurisdiction, you may have the right to:

• Access: Request details of the personal information that we hold about you
• Correction: Update and correct inaccuracies in your personal information
• Deletion: Request deletion of your personal information (subject to legal and operational requirements)
• Restriction: Limit how we process your personal information
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain uses of your personal information
• Marketing Opt-Out: Unsubscribe from marketing communications at any time

Exercising Your Rights: To exercise any of these rights, contact us using the information below. Please indicate which right you'd like to exercise and your jurisdiction. We may ask for additional information to verify your identity before processing your request.

Response Time: We will respond to verified requests within the timeframe required by applicable law (typically 30 days).

Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not deny you services, charge different prices, or provide different levels of service based solely on your exercise of privacy rights.

Data Breaches: We will comply with applicable laws regarding notification of data breaches.

Complaints: If you believe we have breached data protection laws, contact us with details of your concern. We will investigate promptly and respond in writing. You also have the right to lodge a complaint with your local data protection authority.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) provides additional rights:

Right to Know: You may request information about what personal information we have collected, used, disclosed, or sold about you in the past 12 months.

Right to Delete: You may request deletion of personal information we have collected about you.

Right to Correct: You may request correction of inaccurate personal information.

Right to Opt-Out: You may opt out of the sale or sharing of personal information. (Note: We do not currently sell or share personal information as defined by California law.)

Authorized Agents: You may designate an authorized agent to make requests on your behalf.

Contact for California Rights: Send requests to privacy@usemalleable.com

We will verify your identity before processing requests and will not discriminate against you for exercising these rights.

5. Cookies and Tracking Technologies

We use automated tools like cookies, web beacons, and tracking pixels to collect data from our sites and services. This information may be shared with third-party service providers for analytics, security, and service improvement.

What Are Cookies?

Cookies are small files placed on your device when you visit our website or use our services. They help us understand usage patterns, facilitate navigation, remember preferences, and enhance your experience.

Types of Cookies We Use:

• Essential Cookies: Necessary for our services to function, such as authentication and security features
• Functional Cookies: Remember your preferences and settings to personalize your experience
• Analytics Cookies: Collect data to understand service usage and optimize user experience

You are always free to decline or restrict our cookies through your browser setting. But, due to the nature of our essential cookies, some parts of our Sites may not work properly. You can find general information on the Internet about cookies and details on how to delete them from your computer and mobile devices.

6. Children's Privacy

Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If we discover that we have collected personal information from a minor, we will promptly delete that information.

7. International Data Transfers

Our Services is hosted in the United States (“U.S.”) and intended for visitors located within the U.S. If you choose to use our Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the U.S. for storage and processing. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services. By providing any information, including personal information, on or through our Services, you consent to such transfer, storage, and processing.

8. Changes to This Privacy Policy

We will post any updates to this Privacy Policy on this page, and the revised version will be effective when it is posted. If we make a material update, we may notify you of such update by through our Services (including our website), by email, or other means.

Contact Information

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@usemalleable.com
• Address: 2261 Market Street STE 85187, San Francisco CA 94114