CCPA Notice at Collection

This Notice at Collection supplements our Privacy Policy and applies solely to California residents as defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). It explains what categories of personal information The Garden in the Machine, Inc. collects, the purposes for which we use that information, and your rights. We do not collect sensitive personal information for the purpose of inferring characteristics.

Last updated: February 14, 2025

Categories Collected

Identifiers

Examples: Name, alias, account ID, online identifier, IP address, email address, device IDs, or other similar identifiers.

Purpose of collection: Create and secure accounts, authenticate users, detect fraud and abuse, provide customer support, personalize experiences, and communicate with you.

Retention: As long as your account is active and for up to 5 years afterwards, unless a longer period is required by law.

Sold or shared: May be shared for cross-context behavioral advertising with analytics or marketing partners when you opt in. You can opt out via the cookie controls or by submitting a request through the emergentic.ai Help Center.

Customer Records

Examples: Billing address, payment token (processed by PCI-compliant vendors), commercial information such as subscription tier, purchase history, or credits.

Purpose of collection: Process transactions, manage subscriptions, provide receipts, comply with tax obligations, and support auditing.

Retention: Seven years or longer where financial regulations require.

Sold or shared: No.

Protected Classification Characteristics

Examples: Only if you voluntarily provide them, such as preferred pronouns or demographic data for research programs.

Purpose of collection: Provide personalized experiences with your consent and support inclusion initiatives.

Retention: Until deleted via account settings or after 24 months of inactivity.

Sold or shared: No.

Commercial Information

Examples: Records of AI agents you create, usage of APIs, content you download, or credits consumed.

Purpose of collection: Provide and improve the Services, generate invoices, detect abuse, and make recommendations.

Retention: Four years from collection or longer if required for trust & safety investigations.

Sold or shared: No.

Internet or Network Activity

Examples: Browsing history, search queries, interaction logs, diagnostic data, crash reports, and telemetry.

Purpose of collection: Maintain platform security, measure performance, debug issues, and enhance features.

Retention: Log-level data is retained for up to 18 months unless a longer period is necessary for investigations.

Sold or shared: May be shared with analytics tools to improve the Services. You can opt out of sharing by using the cookie preferences or contacting us.

Geolocation Data

Examples: Approximate location derived from IP address; we do not collect precise GPS data.

Purpose of collection: Localize content, enforce regional restrictions, detect fraud, and comply with export controls.

Retention: Stored in logs for up to 18 months.

Sold or shared: No.

Audio, Electronic, Visual, or Similar Information

Examples: Audio you upload to build voices, video conference recordings (if you consent), or support call recordings.

Purpose of collection: Provide requested AI features, improve model accuracy, offer support, and meet safety obligations.

Retention: Audio uploaded for model training is stored until you delete it or 3 years after last use, whichever is sooner, unless required by law.

Sold or shared: No.

Professional or Employment-Related Information

Examples: Company name, role, industry, or verification documents when you onboard as an enterprise customer or partner.

Purpose of collection: Provision enterprise accounts, perform due diligence, and manage partnerships.

Retention: Duration of the relationship plus 5 years.

Sold or shared: No.

Inferences

Examples: Derived insights about product usage patterns or model preferences.

Purpose of collection: Improve user experience, recommend workflows, and maintain trust & safety controls.

Retention: As long as relevant for product analytics, typically up to 24 months.

Sold or shared: No.

Your CCPA Rights

  • Right to know the categories and specific pieces of personal information we collect.
  • Right to delete personal information, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information.
  • Right to limit the use of sensitive personal information (not applicable because we do not use it for additional purposes).
  • Right to non-discrimination for exercising any privacy right.

Submit requests using your account settings, the emergentic.ai Help Center, or any in-product workflows. We will verify your identity or the authority of your agent before complying. Metrics about CCPA requests will be published annually if required by law.

Contact

Visit the emergentic.ai Help Center if you have questions about this notice or wish to submit a privacy request.