PRIVACY POLICY Last updated: 20 July 2026 This Privacy Policy explains how [Linegon / legal entity name] ("Company", "we", "us", or "our") collects, uses, discloses, and protects information in connection with the TeraBrain platform, websites, applications, APIs, SDKs, and related services (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, do not use the Services. -------------------------------------------------------------------------------- 1. WHO WE ARE -------------------------------------------------------------------------------- The data controller responsible for your personal data is: Linegon SRL Via Garbini 15 37135, Verona, Italy Contact: info@linegon.com If you are in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data-protection laws, the terms "personal data", "processing", "controller", and "processor" have the meanings given to them by the applicable law (including, where relevant, the EU General Data Protection Regulation ("GDPR")). -------------------------------------------------------------------------------- 2. SCOPE -------------------------------------------------------------------------------- This Privacy Policy applies to information we process when you: - visit our websites or use our applications; - register for, or use, the Services (including as an account owner, administrator, or invited user); - interact with AI agents, workers, chats, or integrations you configure; - contact us for support, sales, or other inquiries. Where you use the Services to process data belonging to your own end users or customers ("Customer Data"), you generally act as the controller of that data and we act as your processor. In those cases, our processing is governed by the agreement between us (including any Data Processing Addendum), and you are responsible for having a lawful basis and appropriate notices and consents in place with your end users. -------------------------------------------------------------------------------- 3. INFORMATION WE COLLECT -------------------------------------------------------------------------------- 3.1 Information you provide to us, such as: - account and profile information (name, email address, organization, credentials); - billing and payment information (processed by our payment provider — see Section 6); - configuration data (workers, skills, duties, prompts, integrations, API keys you supply for third-party services); - content you submit to the Services (messages, files, documents, and other inputs and outputs); - communications you send to us (support requests, feedback). 3.2 Information we collect automatically, such as: - usage data (features used, actions taken, timestamps); - device and connection data (IP address, browser type, operating system, language, and similar technical information); - log data and diagnostics generated by our infrastructure; - cookies and similar technologies (see Section 9). 3.3 Information from third parties, such as: - identity and authentication providers; - integrations you connect (e.g., email, messaging, CRM, storage, or other services you authorize); - payment and fraud-prevention providers. We do not intentionally collect special categories of personal data (e.g., data revealing health, ethnicity, political opinions, or biometric identifiers). You are responsible for not submitting such data to the Services unless you have a lawful basis to do so. -------------------------------------------------------------------------------- 4. HOW WE USE INFORMATION -------------------------------------------------------------------------------- We use information to: - provide, operate, maintain, and secure the Services; - authenticate users and manage accounts; - process transactions and send related information; - route requests to AI models and third-party integrations you enable; - provide customer support and respond to inquiries; - monitor, analyze, and improve the Services, and develop new features; - detect, prevent, and address fraud, abuse, security incidents, and technical issues; - comply with legal obligations and enforce our agreements. Legal bases (where the GDPR or similar laws apply): performance of a contract; our legitimate interests (e.g., securing and improving the Services); compliance with legal obligations; and, where required, your consent. -------------------------------------------------------------------------------- 5. AI PROCESSING AND THIRD-PARTY MODELS -------------------------------------------------------------------------------- The Services rely on third-party artificial-intelligence providers (for example, OpenAI and other model or infrastructure providers) to process inputs and generate outputs. When you use AI features, the content you submit may be transmitted to and processed by those providers in order to perform the requested operation. - Outputs generated by AI models may be inaccurate, incomplete, or otherwise unsuitable for your purposes. You are responsible for reviewing outputs before relying on them. - We do not guarantee that AI outputs are original, non-infringing, or fit for any particular purpose. - Third-party providers process data under their own terms and privacy policies. We encourage you to review them. -------------------------------------------------------------------------------- 6. HOW WE SHARE INFORMATION -------------------------------------------------------------------------------- We do not sell your personal data. We may share information: - with service providers and subprocessors who perform services on our behalf (e.g., cloud hosting, AI model providers, payment processing, analytics, email delivery, customer support), bound by confidentiality and data-protection obligations; - with integrations and third-party services you choose to connect; - in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as part of that transaction; - to comply with applicable law, regulation, legal process, or enforceable governmental request; - to enforce our agreements, protect the rights, property, or safety of the Company, our users, or others, and to detect and prevent fraud or security issues; - with your consent or at your direction. Our infrastructure is hosted on cloud providers (including Amazon Web Services). Payment processing is handled by [Stripe / payment provider], and we do not store full payment-card numbers. -------------------------------------------------------------------------------- 7. INTERNATIONAL DATA TRANSFERS -------------------------------------------------------------------------------- We and our service providers may process and store information in countries other than your own, including the United States and other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where required, we implement appropriate safeguards for such transfers (for example, the European Commission's Standard Contractual Clauses or an equivalent mechanism). -------------------------------------------------------------------------------- 8. DATA RETENTION -------------------------------------------------------------------------------- We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Some data is automatically expired or deleted after a defined period. When personal data is no longer required, we take reasonable steps to delete or anonymize it. -------------------------------------------------------------------------------- 9. COOKIES AND SIMILAR TECHNOLOGIES -------------------------------------------------------------------------------- We use cookies and similar technologies to operate and secure the Services, remember preferences, authenticate sessions, and analyze usage. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services. Where required by law, we obtain consent for non-essential cookies. -------------------------------------------------------------------------------- 10. SECURITY -------------------------------------------------------------------------------- We implement technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential and for the activity that occurs under your account. -------------------------------------------------------------------------------- 11. YOUR RIGHTS -------------------------------------------------------------------------------- Depending on your location and applicable law, you may have the right to: - access the personal data we hold about you; - request correction of inaccurate or incomplete data; - request deletion of your data; - restrict or object to certain processing; - request portability of your data; - withdraw consent where processing is based on consent; - lodge a complaint with a supervisory authority. To exercise these rights, contact us at [privacy@linegon.com]. We may need to verify your identity before responding. Where we act as a processor on behalf of a customer, we will refer your request to the relevant controller. We will respond to requests within the timeframe required by applicable law. -------------------------------------------------------------------------------- 12. CHILDREN'S PRIVACY -------------------------------------------------------------------------------- The Services are not directed to individuals under the age of 18 (or the age of majority in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to delete it. -------------------------------------------------------------------------------- 13. THIRD-PARTY LINKS AND SERVICES -------------------------------------------------------------------------------- The Services may contain links to, or integrate with, third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their content, security, or privacy practices. Please review their terms and policies. -------------------------------------------------------------------------------- 14. CHANGES TO THIS PRIVACY POLICY -------------------------------------------------------------------------------- We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law (for example, by posting the updated policy with a new "Last updated" date or by other reasonable means). Your continued use of the Services after the effective date constitutes acceptance of the updated policy. -------------------------------------------------------------------------------- 15. CONTACT US -------------------------------------------------------------------------------- If you have questions or requests regarding this Privacy Policy or our data practices, contact us at: Linegon SRL Via Garbini 15 37135, Verona, Italy Email: info@linegon.com -------------------------------------------------------------------------------- This document is provided for general informational purposes and is a template. It does not constitute legal advice. You should have it reviewed and adapted by a qualified attorney for your specific business, jurisdiction, and processing activities before relying on it.