Privacy policy

Effective Date: September 1, 2026

The Intelligence Factory v2, Inc., doing business as The Intelligence Factory (“TIF,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the Personal Data entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Data when you:

• visit www.tif.ai or another TIF website that links to this Privacy Policy;

• create or use a TIF account;

• access or use Derive, Envision, the Derive application programming interface (“Derive API”), or another TIF product or service;

• request a demonstration, evaluation, or information from us;

• subscribe to TIF communications;

• attend an event, participate in a survey, or provide feedback; or

• otherwise interact with TIF.

We refer to these websites, products, services, and interactions collectively as the “Services.”

“Personal Data” means information that identifies, relates to, describes, or could reasonably be linked to an individual. Personal Data does not include information that has been aggregated or de-identified so that it cannot reasonably identify or be linked to an individual.

This Privacy Policy should be read together with any applicable Website Terms of Use, Derive API Services Agreement, Master Services Agreement, Order Form, Data Processing Addendum, or other agreement between you or your organization and TIF.

If an applicable written agreement contains terms that conflict with this Privacy Policy, the written agreement will control with respect to the subject matter of that agreement.

1. Scope and Our Role

This Privacy Policy applies when TIF determines the purposes and means of processing Personal Data, such as when TIF processes:

• website visitor information;

• account registration and authentication information;

• billing and transaction information;

• business contact information;

• product usage and diagnostic information;

• support communications;

• sales and marketing information; and

• information submitted directly to TIF through forms, surveys, events, or other communications.

When a business customer submits or makes Personal Data available through the Derive API, Derive, Envision, or another commercial TIF service, TIF generally processes that Personal Data on behalf of the customer.

In those circumstances:

• the customer generally acts as the data controller or business;

• TIF generally acts as the data processor or service provider;

• the customer determines why and how the Personal Data is processed; and

• TIF’s processing is governed by the applicable customer agreement, Data Processing Addendum, Order Form, and documented customer instructions.

If you interact with a service, application, or system operated by a TIF customer, that customer’s privacy policy governs the customer’s collection and use of your Personal Data. Questions or requests concerning that information should generally be directed to the applicable customer.

This Privacy Policy does not apply to TIF employees or independent contractors acting in those capacities, or to job applicants where a separate workforce or applicant privacy notice applies.

2. Personal Data We Collect

The Personal Data we collect depends on how you interact with TIF and which Services you use.

Information You Provide to Us

We may collect the following Personal Data directly from you:

• Identity and contact information, such as your name, business email address, telephone number, mailing address, username, and other contact details.

• Organization and professional information, such as your employer, job title, department, industry, professional responsibilities, and relationship to a TIF customer or prospective customer.

• Account information, such as your username, password or password hash, authentication information, account preferences, organization membership, account permissions, and API credentials.

• Billing and transaction information, such as billing contacts, billing address, subscription information, purchase history, invoices, payment status, and limited payment-card information received from our payment processor. TIF may use third-party payment processors that collect and process complete payment-card information directly.

• Customer Content, including data, text, files, code, instructions, queries, Inputs, Outputs, configurations, and other materials submitted to or generated through the Services.

• Communications and support information, such as emails, support requests, meeting notes, call information, and the contents of communications you send to us.

• Feedback, such as suggestions, ratings, survey responses, bug reports, comments, and information you voluntarily provide about the Services.

• Marketing and event information, such as newsletter preferences, event registrations, areas of interest, and responses to promotional communications.

• Other information you choose to provide, including information submitted through contact forms, demonstration requests, early-access registrations, evaluations, surveys, or similar features.

Please do not submit Personal Data to TIF unless you have the authority and necessary rights to do so.

Information We Collect Automatically

When you access or use the Services, we may automatically collect:

• Log information, such as your Internet Protocol address, access dates and times, browser type, operating system, referring webpage, pages visited, and actions taken.

• Device information, such as device type, browser configuration, operating system, device identifiers, and network information.

• Usage information, such as the Services and features you use, API endpoints accessed, request timing, request volume, processing or token usage, response status, account activity, feature interactions, and other information about how you use the Services.

• Diagnostic information, such as crash reports, error messages, performance information, troubleshooting data, and the state of a Service when an error occurs.

• Approximate location information, such as country, state, or general geographic area inferred from an Internet Protocol address.

• Cookie and similar-technology information, such as identifiers, preferences, session information, and information collected through cookies, pixels, local storage, software development kits, and similar technologies.

We do not collect precise location information unless a specific feature requires it and we provide appropriate notice or obtain consent when required.

Information We Receive from Other Sources

We may receive Personal Data from:

• your employer, organization, or account administrator;

• TIF customers, business partners, referral sources, and resellers;

• service providers, including payment, authentication, analytics, security, fraud-prevention, and marketing providers;

• third-party services that you connect to or use with the Services;

• publicly available sources, professional directories, company websites, and business-information providers; and

• other individuals or organizations that communicate or transact with TIF.

If your organization creates or manages your TIF account, the organization may provide account information to us and may control your access to the Services.

3. Customer Content and the Derive API

Customer Content submitted to the Derive API or another commercial TIF service may contain Personal Data.

When TIF processes Customer Content on behalf of a customer, TIF will process that Customer Content:

• to provide, operate, maintain, secure, and support the applicable Services;

• according to the customer’s documented instructions;

• as permitted by the applicable customer agreement and Data Processing Addendum;

• to detect or address fraud, abuse, security threats, technical problems, or violations of applicable terms and policies; and

• as required by applicable law.

The customer is responsible for:

• determining whether it has a lawful basis to submit Personal Data to the Services;

• providing all notices and obtaining all permissions or consents required by law;

• responding to requests from individuals concerning Personal Data controlled by the customer;

• configuring the Services appropriately for its use case; and

• ensuring that Customer Content does not include prohibited or unauthorized information.

If TIF receives a privacy request relating to Personal Data that we process on behalf of a customer, we may refer the request to that customer. We will reasonably assist customers with verified requests as required by an applicable Data Processing Addendum or applicable law.

4. How We Use Personal Data

We may use Personal Data to:

• provide, operate, maintain, and administer the Services;

• create, authenticate, secure, and manage accounts;

• process transactions, subscriptions, invoices, and payments;

• measure usage and enforce account, subscription, and usage limits;

• provide technical support and respond to requests;

• diagnose errors, repair problems, and improve reliability;

• personalize settings and account experiences;

• analyze how the Services are used;

• develop and improve features, documentation, security, and performance;

• conduct internal research and statistical analysis;

• communicate about accounts, transactions, security, service changes, and administrative matters;

• send marketing or product communications where permitted by law;

• manage sales, customer, and business relationships;

• prevent, detect, and investigate fraud, abuse, security incidents, unlawful activity, and violations of TIF agreements or policies;

• protect the rights, privacy, safety, systems, and property of TIF, our customers, users, and others;

• establish, exercise, or defend legal claims;

• comply with legal, regulatory, tax, accounting, and reporting obligations;

• evaluate or complete a merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction; and

• carry out another purpose disclosed when the Personal Data is collected or with your direction or consent.

We may aggregate or de-identify Personal Data and use the resulting information for analytics, research, security, product development, benchmarking, and other lawful purposes. Where required by law, we will maintain de-identified information in de-identified form and will not attempt to re-identify it.

5. Use of Customer Content for Training

TIF does not use Customer Content submitted through the Derive API or another commercial TIF service to train, fine-tune, or improve models or services made available to other customers unless the customer provides express written consent.

TIF may use:

• operational metadata and Usage Data that do not disclose the substance of Customer Content;

• aggregated or de-identified information that cannot reasonably identify the customer or an individual;

• information a customer voluntarily submits as feedback; and

• Customer Content the customer expressly authorizes TIF in writing to use for a specified purpose.

If feedback includes Customer Content, TIF’s use of that Customer Content remains subject to the applicable customer agreement and any permissions provided by the customer.

6. How We Disclose Personal Data

We may disclose Personal Data to the following categories of recipients:

• Service providers and subprocessors. We may disclose Personal Data to providers of cloud hosting, infrastructure, data storage, authentication, cybersecurity, fraud prevention, customer support, communications, analytics, payment processing, accounting, auditing, and other services that help us operate our business.

• Your organization and account administrators. If you use the Services through an organization, its authorized administrators may be able to create or manage accounts, control permissions, access usage information, manage billing, configure retention, access or export Customer Content, suspend access, or take other administrative actions.

• Third-party services and integrations. If you connect or direct the Services to interact with a third-party service, we may transmit information to or receive information from that service as necessary to complete the requested interaction.

• Business and channel partners. We may disclose appropriate business contact and transaction information to a partner involved in providing, supporting, reselling, or implementing the Services.

• Professional advisers. We may disclose Personal Data to attorneys, accountants, auditors, insurers, financial advisers, and other professional advisers where reasonably necessary.

• Government authorities and other third parties. We may disclose Personal Data when we reasonably believe disclosure is necessary to comply with law, regulation, legal process, or an enforceable governmental request; protect a person from serious harm; detect or prevent fraud or unlawful activity; enforce our agreements or policies; or protect the rights, property, security, or safety of TIF, our customers, users, or others.

• Parties to corporate transactions. We may disclose or transfer Personal Data in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, including during related due diligence.

• Recipients you direct or authorize. We may disclose Personal Data when you direct us to do so, consent to the disclosure, or intentionally use a feature that requires disclosure.

Service providers and subprocessors are permitted to process Personal Data only for authorized purposes and are subject to contractual obligations appropriate to the nature of the processing.

7. Cookies and Similar Technologies

TIF and its service providers may use cookies and similar technologies to:

• operate and secure the Services;

• authenticate users and maintain sessions;

• remember settings and preferences;

• understand how visitors and users interact with the Services;

• diagnose technical problems;

• measure website and product performance; and

• evaluate the effectiveness of communications and campaigns.

Cookies may include:

• Strictly necessary cookies, which are required for security, authentication, network management, and core functionality.

• Functional cookies, which remember preferences and improve functionality.

• Analytics cookies, which help us understand usage, performance, and visitor interactions.

• Marketing cookies, which may help measure campaigns or present information about TIF on other services, where used and permitted by law.

You may be able to manage nonessential cookies through TIF’s cookie settings or your browser settings. Blocking certain cookies may affect the availability or operation of some Services.

TIF does not sell Personal Data for monetary consideration. TIF does not use or disclose Personal Data for cross-context behavioral advertising or targeted advertising as those terms are defined under applicable U.S. state privacy laws.

Where required by applicable law, TIF will recognize legally valid browser-based opt-out preference signals, such as the Global Privacy Control.

Because there is not currently a uniform industry standard for responding to “Do Not Track” signals, the Services may not respond to those signals except where required by law.

8. Communications and Marketing Choices

We may send administrative, transactional, relationship, support, and security communications when necessary to provide the Services or manage our relationship with you. These communications are not marketing communications and may not include an unsubscribe option.

We will send marketing or promotional communications only as permitted by applicable law. You may unsubscribe from marketing emails at any time using the unsubscribe link included in those communications or by contacting us.

Unsubscribing from marketing communications will not prevent TIF from sending necessary account, billing, security, support, or service-related communications.

Consent to receive marketing communications is separate from acceptance of the Derive API Services Agreement or another customer agreement. TIF does not require marketing consent as a condition of creating a Derive API account or purchasing the Services.

9. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain legitimate business records, comply with legal obligations, resolve disputes, enforce agreements, and protect the Services and their users.

Retention periods depend on factors such as:

• the type, amount, and sensitivity of the Personal Data;

• the purposes for which the Personal Data was collected;

• the duration of an account or customer relationship;

• customer configurations and instructions;

• contractual commitments;

• security, fraud-prevention, and abuse-prevention needs;

• applicable limitation periods; and

• legal, regulatory, tax, accounting, and reporting requirements.

Customer Content is retained according to the applicable customer agreement, Order Form, Data Processing Addendum, Documentation, customer configuration, or documented instructions.

Unless otherwise stated in an applicable agreement, TIF will delete or de-identify Customer Content within 30 days following termination or expiration of the applicable Services, subject to reasonable technical limitations and the following exceptions:

• retention is required by law;

• retention is necessary to investigate fraud, abuse, security incidents, or policy violations;

• retention is necessary to establish, exercise, or defend legal claims;

• the information has been aggregated or de-identified;

• the customer requests or authorizes longer retention; or

• the information remains temporarily in encrypted backups maintained through TIF’s ordinary backup and disaster-recovery processes.

Information stored in backups will be protected from further routine use and deleted or overwritten according to TIF’s backup lifecycle.

TIF may retain transaction records, contracts, consent records, security logs, and records of privacy requests for longer periods when reasonably necessary for legal, accounting, security, compliance, or evidentiary purposes.

10. Data Security

TIF uses commercially reasonable technical, administrative, and organizational safeguards designed to protect Personal Data against accidental or unlawful loss, misuse, alteration, destruction, unauthorized access, and unauthorized disclosure.

These safeguards may include, as appropriate:

• access controls and least-privilege permissions;

• authentication and credential-management controls;

• encryption in transit and at rest;

• network and system monitoring;

• vulnerability management;

• logging and incident-response procedures;

• employee and contractor confidentiality obligations;

• vendor and subprocessor review; and

• backup, recovery, and continuity measures.

No security measure or method of electronic transmission or storage is completely secure. TIF cannot guarantee absolute security.

You are responsible for protecting your account credentials and API keys, using appropriate security controls in Customer Applications, restricting access to authorized users, and promptly notifying TIF if you suspect unauthorized access or a security incident.

11. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• know whether TIF processes your Personal Data;

• access the Personal Data TIF maintains about you;

• obtain information about the categories, sources, purposes, and recipients of Personal Data;

• correct inaccurate Personal Data;

• delete Personal Data;

• obtain a portable copy of certain Personal Data;

• restrict or object to certain processing;

• withdraw consent where processing is based on consent;

• opt out of targeted advertising, the sale or sharing of Personal Data, or certain profiling;

• appeal a decision TIF makes concerning a privacy request; and

• receive equal service and not be discriminated against for exercising a privacy right.

You may also:

• update certain account information through your account;

• unsubscribe from marketing emails using the link in the message;

• manage cookies through available cookie controls or browser settings; and

• request closure of your account, subject to contractual and legal restrictions.

To exercise a privacy right, contact TIF using the information in Section 18.

TIF may request information reasonably necessary to verify your identity and authority before completing a request. The verification process may vary depending on the nature and sensitivity of the Personal Data involved.

You may designate an authorized agent to submit a request where permitted by law. We may require evidence of the agent’s authority and may ask you to verify your identity directly.

If we deny a request, you may appeal the decision by contacting us and identifying the request you wish to appeal.

TIF will not discriminate against you for exercising a privacy right provided by applicable law.

If your request concerns Personal Data that TIF processes on behalf of a customer, please submit the request directly to that customer. TIF will assist the customer as required by applicable law and the applicable Data Processing Addendum.

12. Additional U.S. State Privacy Disclosures

Certain U.S. state privacy laws require additional disclosures about Personal Data.

Depending on your interaction with the Services, TIF may collect the following categories of Personal Data: