Privacy Policy

This Policy applies to personal information we collect on or through the Service, when you access, browse, register for, purchase, or otherwise interact with it, and in email, text, and other electronic communications between you and us.

This Policy does not apply to information collected by us offline through unrelated channels, or by any third party (including OpenBB, payment processors, or advertising and analytics providers) that may link to or be accessible from the Service.

The Service is intended only for users who are at least eighteen (18) years of age. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service or provide any information to us.

If we learn that we have collected personal information from a person under 18 without appropriate consent, we will delete it. Contact us at privacy@exponential-tech.ai if you have a concern.

We collect the following categories of personal information:

We do not intentionally collect government identifiers, precise geolocation, health, biometric, or other special-category information.

How we collect information

• Directly from you — when you register, purchase a subscription, fill out forms, contact support, or respond to surveys.
• Automatically — as you navigate the Service, through cookies, server logs, and similar technologies.
• From third parties — such as our payment processor (Stripe), analytics and advertising providers, and our marketing and CRM platforms.

We and our service providers use cookies and similar technologies to operate, secure, analyze, and improve the Service. The categories we use are:

• Strictly necessary — required to operate the Service, authenticate you, and process transactions. These cannot be switched off.
• Analytics/performance — help us understand how the Service is used (e.g. Google Analytics).
• Functional — remember your preferences and settings.
• Advertising/targeting — set by us or advertising partners to measure and deliver relevant ads.

Where required by law, we obtain your consent before placing non-essential cookies. You can also control cookies through your browser settings, though disabling certain cookies may affect Service functionality.

We use personal information to:

• Provide, operate, maintain, and secure the Service and the datasets included in your plan.
• Create and manage your account and authenticate you.
• Process purchases, subscriptions, renewals, and transactions, and prevent fraud and misuse.
• Provide customer support and respond to your inquiries, requests, and feedback.
• Send administrative and transactional messages, including billing, renewal, and security notices.
• Operate marketing, onboarding, nurture, upsell, cross-sell, and newsletter communications (subject to your choices).
• Personalize content and offers, and measure and improve our marketing and the Service.
• Conduct analytics, research, testing, and product development.
• Maintain the safety, security, and integrity of the Service.
• Comply with legal obligations, enforce our Terms of Service, and establish, exercise, or defend legal claims.

5.1 Developing and Improving Our Data Products, Models, and AI Features

We use information about how you interact with the Service — including usage and behavioral data, search queries, dataset and feature usage, your interactions with any AI-powered features, and the feedback you provide — to develop, train, fine-tune, evaluate, and improve our datasets, analytics, models, and AI or machine-learning features.

Wherever practicable, we use de-identified or aggregated information for these purposes. We do not sell your personal information, and we do not disclose the content of your data to third parties to train their own models. You may opt out at any time by contacting privacy@exponential-tech.ai.

Legal bases for processing (EEA / UK)

We and our partners use cookies and similar technologies to collect information about your activity on the Service and across other websites and apps. Partners we use include:

You can opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info) or the Network Advertising Initiative (optout.networkadvertising.org).

We use CRM and email platforms — including HubSpot and Customer.io — to send onboarding, nurture, upsell, cross-sell, newsletter, and other marketing communications. These providers process contact and engagement information on our behalf under contract.

You can opt out of marketing emails at any time by using the “unsubscribe” link in any message or by emailing privacy@exponential-tech.ai. Opting out of marketing does not stop transactional or administrative messages.

We do not sell your personal information for money. We disclose personal information only to:

• Service providers and processors — companies bound by contract to protect your information, including Stripe, HubSpot, Customer.io, and analytics providers.
• Advertising partners — in connection with measurement and interest-based advertising as described in Section 6.
• Professional advisors — lawyers, accountants, and auditors, under duties of confidentiality.
• Legal and safety — to comply with law or legal process, enforce our Terms, and protect rights, property, and safety.
• Business transfers — to a buyer or successor in connection with a merger, acquisition, or sale of assets.
• With your consent — or at your direction.

We retain personal information for as long as needed to provide the Service and fulfill the purposes described in this Policy, and thereafter as necessary to comply with legal, tax, accounting, and regulatory obligations. When information is no longer needed, we delete or de-identify it. Billing and transaction records are generally retained for the period required by applicable law.

We implement technical and organizational measures designed to protect personal information against accidental loss and unauthorized access, use, alteration, and disclosure. No method of transmission over the Internet is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We are based in the United States, and we and our service providers may process and store your personal information in the United States and other countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal information from the EEA, Switzerland, or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may request a copy by contacting privacy@exponential-tech.ai.

Depending on where you live, you may have some or all of the rights described below. We will not discriminate against you for exercising them.

12.1 EEA, Switzerland, and United Kingdom (GDPR / UK GDPR)

You have the right to: access your personal information; correct inaccurate information; erase information; restrict or object to processing (including direct marketing and the development of our AI features); data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

12.2 California (CCPA / CPRA)

California residents have the right to know and access, delete, and correct personal information; to opt out of the “sale” or “sharing” of personal information; and to limit the use of sensitive personal information.

12.3 Other U.S. States

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy laws have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising and the sale of personal information.

12.4 Canada (PIPEDA)

If you are in Canada, you may request access to and correction of your personal information, and withdraw consent subject to legal or contractual restrictions.

12.5 How to Exercise Your Rights

Submit a request by emailing privacy@exponential-tech.ai or through the privacy controls in your account. We will verify your identity before fulfilling a request and will respond within the timeframes required by applicable law.

We do not currently respond to DNT signals as there is no common industry standard. We do, however, recognize the Global Privacy Control (GPC) and treat a valid GPC signal as a request to opt out of the sale and sharing of personal information for the associated browser or device.

The Service is delivered in part through, and may link to, third-party platforms and websites, including OpenBB and our payment, analytics, and advertising providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.

We may update this Policy from time to time. If we make material changes, we will notify you by posting the updated Policy on the Service with a new “Last Updated” date and, where required, by email. Your continued use of the Service after the effective date of an updated Policy constitutes your acceptance of it.

If you have questions, concerns, or requests regarding this Policy or our privacy practices, please contact us:

EEA / UK residents: if you are not satisfied with our response, you may contact your local supervisory authority.