Privacy Policy
Last updated: September 28, 2026
This Privacy Policy ("Policy") explains how Meta Protocol Inc. ("Meta Protocol," "Anuma AI," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with https://www.anuma.ai (the "Site") and our APIs, applications, social and discovery features, maps, profiles, messaging, meetups, dashboards, developer tools, documentation, and related services (collectively, the "Service"). This Policy is written to align with our Terms of Service and is intended to be read together with them.
IMPORTANT NOTICE ABOUT AI MODELS AND PROVIDERS. Anuma AI routes certain requests (including any prompts, text, code, data, files, images, or other content you submit to the Service, "Inputs") to third-party model providers ("Providers") and returns content generated or returned in response to Inputs ("Outputs") generated by those Providers. Providers are independent third parties and their handling of Inputs and Outputs is governed by the Provider's terms and policies, not this Policy. You should not submit sensitive personal information through the Service unless you have a lawful basis to do so and you have evaluated whether the applicable Provider's terms and controls are suitable for your use case.
APPLICABILITY OF THIS POLICY. This Policy applies solely to personal information processed by Anuma AI in connection with the Site and Service. Anuma AI acts as an independent service provider offering a routing and aggregation layer for third-party AI models. Except as expressly stated in this Policy or a separate written agreement, Anuma AI does not determine the purposes or means of Providers' processing of Inputs or Outputs and does not assume responsibility for Provider privacy, security, or data retention practices. Provider processing is governed exclusively by Provider terms and policies. The Site may contain links to third-party websites. Any access to and use of such third-party websites is not governed by this Policy, but, instead, is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites. Depending on where you are located or where you are a resident, applicable laws may require additional disclosures or provide you with additional rights to your personal data. Please review this Policy carefully to understand what we do with regards to your personal data and where applicable, the following sections:
- Residents of U.S. States with Consumer Privacy Laws: Please review State-Specific Privacy Information for additional disclosures and information about your privacy rights.
- EU and UK Data Subjects: Please review Additional Information for EU and UK for additional disclosures and information about your privacy rights under the EU GDPR and UK GDPR.
Nothing in this Policy creates any fiduciary, advisory, or trust relationship between you and Anuma AI. Anuma AI acts solely as a technology service provider and does not assume duties beyond those expressly stated.
1. Changes to this policy
We may modify this Policy from time to time. If we make changes, we will post the revised Policy on the Site and update the "Last Updated" date above. If we make material changes to how we collect, use, or disclose personal information, or changes that materially affect your rights, we will provide additional notice that is reasonably designed to inform you (for example, via email to the address associated with your Account or via an in-product notice). Your continued use of the Site or Service after the revised Policy becomes effective means you accept the revised Policy.
In the event of a conflict between this Policy and the Terms of Service, the Terms of Service will control to the extent permitted by law.
2. Personal information collection
The below section details what personal information we collect from or about you, how we collect it, and other related details.
Personal Information We Collect
"Personal information" generally means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with you or your household. The personal information we collect depends on how you interact with the Site and Service.
Depending on how you interact with us, we may collect personal information from or about you. Some of this information is provided by you and some may be collected automatically when you interact with us. This may include information you provide directly or through third-party authentication or single sign-on services, where you authorize the provider to share certain information with us, such as your name, email address, profile information, and account identifiers.
Information Provided Directly. Depending on how you interact with us and the Service you use, you may provide us with information such as:
- Identifiers (including name, email address, contact information, billing contact details, organization name, and account identifiers, and authentication information).
- Profile information (such as username, display name, photographs, age or date of birth, pronouns, profession or occupation, interests, biography, preferences, and links).
- Demographic information, if you choose to provide it (such as gender, ethnicity, political interest, religion, height, etc.).
- Communications you send to us (including support tickets and emails).
- Configuration and preference information (such as user settings, saved preferences, memories, or similar features where enabled).
- Chat history or conversation content where you choose to use features that store such information.
- Commercial information (including records of funding events, invoices, payments, refunds, credits, and associated confirmations).
- Location Information (such as GPS location when you enable location services through features such as People Nearby and meetups). For additional details, please see Location, Communications, and Safety Information below.
- Content that you publish or share.
- Meetup details, if you choose to participate, including photographs, location of the meetup and attendees.
- Direct messages and message-request metadata.
- Block and report information.
- Visibility settings you apply to memories and other content.
This may include information you provide directly or through third-party authentication or single sign-on services, where you authorize the provider to share certain information with us, such as your name, email address, profile information, and account identifiers. Additionally, depending on how you use the Services, this may include Inputs and Outputs, including Inputs and Outputs through your use of the Providers' tools or your use of certain Social features.
Information We Collect Automatically. We also collect information automatically from your interaction with the Services, including:
- IP address, device and browser identifiers, operating system, time zone, approximate location derived from IP, access times, pages or screens viewed, referring/exit pages, session duration, and diagnostic information such as logs, performance metrics, and error reports.
- Usage telemetry necessary for billing and security, which may include request timestamps, model routing selections, token counts or other metered units, latency measurements, and abuse or fraud signals.
- If you enable location-based features, we may collect precise geolocation from your device, location-sharing status, map interactions, and location-derived information such as distance or nearby status. Precise location is collected only with device or in-product permission, but disabling permission may prevent location-based features from functioning. Some of this information may be collected through cookies and similar technologies.
- Session replay, where enabled, is used solely for debugging and product improvement and is not intended to capture Inputs or sensitive personal information.
We may collect this information through the use of cookies and other online tracking technologies (collectively "cookies"). Cookies and similar technologies may also be used for functionality, security, analytics, and performance. For additional information please review our Cookies Policy.
Information Collected from Third Parties and Processed by Third Parties. We may receive information about you from third parties who are not our ad partners, such as other users, developers, and partners who help us evaluate the safety and quality of content on our platform, our affiliates and other services you link to your account. The Service may allow you to connect third-party applications, services, or data sources that you authorize ("Connectors"). Any content, files, records, or other data accessed through a Connector is treated as information you provide to us, just as if you had submitted it directly through the Service. You are solely responsible for the data you choose to make accessible via a Connector and for ensuring you have the rights and lawful basis to permit such access. The third-party provider's terms and privacy policies govern your relationship with that provider and the provider's initial collection and disclosure of your data.
Personal information contained within Inputs, Outputs, datasets, or files submitted through the Service is processed strictly at your direction and as part of providing the Service. Anuma AI does not independently determine the content of Inputs and does not verify the accuracy, legality, or appropriateness of personal information contained therein.
User Responsibility for Submitted Personal Information
You are solely responsible for determining what personal information, if any, you submit through the Service, including through Inputs, datasets, files, or Connectors. You should not submit sensitive personal information (such as government identifiers, financial account numbers, health data, biometric data, or information about children) unless you have a lawful basis to do so and have evaluated the risks of Provider processing. Anuma AI has no obligation to screen, edit, or remove personal information embedded in Inputs or data you choose to submit.
Social Profiles, Memories, and Inferences
The Service may create or maintain a social profile and a memory profile using information you provide, your selected memories, profile attributes, and activity. You may designate a memory as private, matchable, or public where those controls are offered:
- Private memories remain excluded from social matching and public profiles.
- Matchable memories are represented for compatibility scoring without displaying the underlying memory text to other users.
- Public memories may appear on your profile and may be used to explain a recommendation.
We may generate inferences, embeddings, compatibility scores, profile summaries, and recommendations from information eligible under your settings. Existing memories are not made public solely because social features are introduced. You may change visibility settings prospectively, subject to reasonable time needed to propagate changes and to copies already shared or retained for safety, legal, or integrity purposes.
Location, Communications, and Safety Information
If you use People Nearby, maps, or meetups, we process precise location and related status information to display you or content to others according to your settings. We may reduce precision, apply distance thresholds, or otherwise obscure location, but you should not assume another user cannot infer your location from information you choose to share. We process messages, connection requests, blocks, reports, and associated metadata to deliver communications, enforce user choices, investigate misuse, and protect users. Messages are encrypted in transit and at rest; unless we expressly state otherwise for a particular feature, they are not end-to-end encrypted and may be accessible to Anuma and its service providers for operation, safety, and legal compliance.
3. How we use personal information
Depending on how you interact with us and use the Services, we may use personal information for the following purposes:
- Provide and operate the Service, including to create and administer Accounts, route requests to Providers, authenticate users, provide customer support, meter usage, and maintain accurate billing records.
- Process payments, fund prepaid balances, issue invoices and receipts, handle refunds or credits where applicable, and maintain required accounting records.
- Secure the Site and Service.
- Detect, prevent, and investigate fraud, abuse, and malicious activity; to enforce our Terms and policies.
- Protect the rights, property, and safety of Anuma AI, our users, Providers, and the public.
- Administer the social features of the Services including to create and display profiles; provide maps, nearby discovery, messaging, and meetup tools; calculate and explain compatibility; generate recommendations, profile summaries, and embeddings; honor visibility, location, block, and reporting choices; and moderate content and investigate safety incidents.
- Monitor performance, conduct debugging, fix bugs, maintain reliability, and improve the Service.
- Communicate with you, including, where permitted by law, to send marketing communications about Anuma AI; you may opt out of marketing emails, but you may still receive transactional and administrative messages.
- Comply with applicable law, lawful requests, and legal process, and to resolve disputes.
We may use aggregated and de-identified information to understand feature adoption and to generate high-level metrics and analytics reports.
We do not use personal information to make decisions producing legal or similarly significant effects about individuals. Social recommendations, compatibility scoring, and profile ranking involve automated processing and profiling, but are intended for discovery and entertainment and do not determine eligibility for employment, housing, credit, education, insurance, health care, or other legally significant opportunities. You may decline or disable social discovery features where offered, and you should independently evaluate other users and recommendations.
4. AI inputs/outputs, logging defaults, and provider handling
Anuma AI's core function is routing requests to third-party Providers selected based on technical, operational, or user-configured criteria. To provide the Service, we transmit Inputs to Providers and receive Outputs generated by those Providers. Providers act as independent controllers or processors under their own terms and policies, and Anuma AI does not control or assume responsibility for Provider data retention, training practices, security measures, or secondary uses of Inputs or Outputs. Social matching and compatibility processing are performed on Anuma-controlled infrastructure; Anuma does not provide memory profiles to third-party model Providers for matching. If a social feature separately invokes a Provider, the interface or applicable controls will govern which eligible content is sent.
If you opt into features that clearly indicate they store content (such as prompt logging, chat history, traces, or evaluation tooling), we may store Inputs and Outputs related to those features and process them as described in our Terms and any in-product disclosures. Where you opt into such features, we may retain and use those stored Inputs and Outputs to provide, secure, operate, analyze, and improve the Service, consistent with the Terms and any in-product disclosures. We may also process information in aggregated or de-identified form to analyze trends and generate analytics outputs intended not to identify individual users.
4.1 No Training Commitment; No Data Exclusivity. Except as expressly stated in this Policy or a separate written agreement, Anuma AI does not commit to refrain from using aggregated or de-identified information derived from Service usage for analytics, capacity planning, security, or product improvement purposes. Nothing in this Policy grants you exclusivity over Outputs or prevents Providers or other users from generating similar or identical content using the same or similar Inputs.
5. How we disclose personal information
We may disclose personal information to vendors and service providers that help us operate the Site and Service, including hosting and infrastructure providers, observability and error monitoring vendors, customer support tools, analytics providers (including GA and PostHog), payment processors, and fraud prevention vendors. These vendors are authorized to process personal information only as necessary to perform services on our behalf and are contractually obligated to protect it and use it only for the purposes for which we disclose it. These recipients may include mapping and geolocation providers, communications infrastructure providers, trust-and-safety vendors, and advertising and measurement providers, including Google.
Waitlists and referral programs. If you join a waitlist for a feature that has not launched yet (such as People Nearby), we use Prefinery to operate it. We disclose to Prefinery the email address you submit, the area you indicate an interest in, the referral code that brought you (if any), and the IP address and browser user agent of the device you signed up from — the last two are used by Prefinery to detect fraudulent or automated signups. Prefinery assigns you a referral code and a position on the waitlist, records signups attributed to your code, and sends waitlist and invitation emails on our behalf. See Prefinery's privacy policy. Joining a waitlist is optional and separate from your Anuma account; you can ask us to remove you at any time using the contact details below.
User-initiated integrations and account connections. If you choose to connect your Account with third-party applications or services (such as Google, Notion, or other integrations using OAuth or similar authorization mechanisms), we may disclose personal information to those third parties at your direction in order to enable the integration. The information shared depends on the integration and the permissions you grant. The third party's use of such information is governed by its own terms and privacy policies, and not this Policy.
We disclose Inputs to Providers in order to provide the Service and receive Outputs back from those Providers. Providers' processing of Inputs and Outputs is governed by Provider terms and policies. We may also disclose information in connection with a corporate transaction (such as a merger, acquisition, reorganization, or sale of assets), and we may preserve or disclose information where we believe in good faith that doing so is reasonably necessary to comply with law, respond to lawful requests, protect safety, investigate fraud or abuse, and enforce our Terms. We may disclose information with your consent or at your direction. We also disclose information to other users according to your settings and actions, including profile content, public memories, approximate or precise location-related displays, availability or activity indicators, galleries, meetup information, and content you send or publish. Meetup organizers and participants may receive information necessary to administer a meetup. We may disclose reports and relevant content to law enforcement or other parties when reasonably necessary to address imminent harm, unlawful activity, or platform safety.
Anuma AI is not responsible for the privacy or security practices of Providers, Connectors, or other third parties to whom you choose to disclose information or authorize access. Any disclosure made at your direction or through your configuration choices is at your own risk.
6. Your rights and choices
Depending on your jurisdiction, you may have rights under certain privacy laws. Where applicable, these rights may include:
- Know and Access. Request to know what personal information we have collected about you and how it has been used and disclosed and to request access to description and categories of the personal information.
- Deletion. Request deletion of the personal information collected about you (subject to certain exceptions).
- Correction. Request correction of inaccurate personal information collected about you.
- Object to Processing. Object to the processing of your personal data in certain circumstances, including where we process personal data for direct marketing purposes or where we have processed such data on the basis of our legitimate interests (as detailed in Additional Information for EU and UK Residents below).
- Portability. Request a copy of your personal information to be provided to you, or a third party, in a digital form.
- Withdraw Consent. Withdraw your consent to the processing of your personal data (where applicable).
- Opt-Out of Marketing Emails. You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us.
- Control Cookies. You can control cookies through your browser settings and, where applicable, through any cookie consent tools we may provide.
- Opt-Out of Sale or Processing for Targeted Advertising. If you are a resident of certain US States, you have the right to opt-out of the sale or processing of personal information for targeted advertising, as described in more detail in State-Specific Privacy Information. We process legally recognized browser-based opt-out signals, such as Global Privacy Control, where required by law.
- Appeal. You may have the right to appeal our responses to your consumer rights requests. If you believe you have a basis for such an appeal, please contact us using the information provided in Contact us below.
- Complain to Supervisory Authority. Lodge a complaint with your local supervisory authority.
If you are located in a U.S. state with an applicable consumer privacy law, the EU or the UK please see additional rights information in the State-Specific Privacy Information and Additional Information for EU and UK sections below.
6.1 How to Exercise Your Rights
You can exercise these rights by contacting us using the information in Contact us below. If you email us, please include "Rights Request" in the subject line. We may need to verify your identity before completing your request. If we are unable to verify your identity, we may deny your requests to know, access, correct or delete.
You also have the following additional controls:
- If the Service offers account-level settings related to logging or history (for example, prompt logging or chat history), you may be able to enable or disable such settings through your dashboard; disabling a feature may prevent new data from being stored going forward but may not automatically delete data previously stored unless you also request deletion where applicable.
- You can use in-product controls to change profile, memory, location, discoverability, and messaging settings; block or report users; and revoke device location permission. Certain changes do not remove content already copied, shared, or lawfully retained.
Where applicable, you can opt-out of the sale or processing of your personal information for targeted advertising using the methods described in State-Specific Privacy Information.
6.2 Identity Verification; Abuse Prevention
To protect the Service and comply with legal obligations, we may require additional information to verify your identity or authority when processing privacy requests, investigating suspected fraud or abuse, or enforcing our Terms. We may deny or limit requests where permitted by law, including where we cannot reasonably verify identity, where requests are excessive or manifestly unfounded, or where compliance would adversely affect the rights of others.
6.3 Deleting your Anuma account and your data
Anuma (published by Meta Protocol Inc.) lets you delete your account yourself, from inside the app. You do not need to contact us. Open Anuma on your phone or at https://chat.anuma.ai, sign in, then go to Settings, choose Account, and select Delete account. You will be asked to confirm, and the deletion begins as soon as you do.
Before you delete: funds held at your wallet. Signing in creates an embedded wallet that belongs to your login. Deleting your account deletes that login, and the wallet goes with it — signing up again creates a new wallet, not the old one. If any balance is held there, move it out first. If you start a deletion while a balance remains, we stop and tell you rather than deleting, so you can decide.
What deleting your account removes. Your account record and the data linked to it, including your usage history and credit balances; the encrypted backups of your conversations held on our servers; your Nearby profile and its related data; your customer record with our payment processor; and your login identity at our authentication provider, which is where your email address is held. Everything Anuma stored on the device itself is erased at the same time. Some of these removals complete in the background, normally within an hour, and are retried until they finish.
What is not removed by deleting your account. If you joined a waitlist or used a referral invitation, your record with our waitlist provider remains. If you gave us an address for product updates, your subscription with our email provider remains, and you can remove it with the unsubscribe link in any of those emails. Product analytics events remain; they are keyed to a wallet identifier and carry no email address. We also keep information we are required to keep by law, for the periods described in Data retention below.
Deleting some of your data without deleting your account. You do not have to delete your account to remove data. Turning off backups in Settings erases the copy of your conversations held on our servers. You can also delete individual conversations or all of them, unpublish anything you have shared by link, disconnect any third-party app you have connected, and turn off analytics. Each of these takes effect on its own and leaves your account in place.
If you cannot reach these settings, or you want confirmation that a deletion completed, contact us using the details in Contact us below.
7. Data retention
We retain personal information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests. Retention periods vary depending on the nature of the information, the purpose for which it was collected, operational and security considerations, and your configuration choices. Social profile content, public posts, matchable-memory representations, messages, location information, and safety records may have different retention periods. We generally retain precise location only as needed to provide the requested feature and for limited security, fraud, and safety purposes; we may retain coarse or de-identified location trends longer. Deleting content or an Account may not immediately remove copies from backups, content previously shared with others, or records retained for legal, safety, fraud-prevention, or dispute-resolution purposes.
8. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no security measure is perfect, and we cannot guarantee absolute security. While we implement reasonable safeguards, no system can guarantee absolute security, and Anuma AI disclaims liability for unauthorized access, loss, or disclosure of personal information resulting from factors beyond our reasonable control, including Provider systems, user misconfiguration, or compromise of user credentials.
9. International data transfers
We may process and store information in the United States and other jurisdictions where we or our service providers operate. By using the Service, you understand that your personal information may be transferred to and processed in jurisdictions that may have different data protection laws than your jurisdiction. Where required by law, we implement appropriate safeguards for cross-border transfers.
9.1 Law enforcement and government requests. We may preserve, disclose, or provide access to personal information where we reasonably believe doing so is required or permitted by law, legal process, national security requests, or governmental authority. Where legally permitted, we may attempt to notify affected users of such requests, but we reserve the right to delay or withhold notice where prohibited or where notice would undermine an investigation or legal obligation.
10. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 18 may not use People Nearby, social matching, direct user-to-user messaging, and meetups. If we learn that a user under 13 (or under 18 for People Nearby) has provided personal information or used restricted features, we may suspend the Account and take reasonable steps to delete the information. Contact us if you believe a minor is using the Service in violation of this section.
11. State-specific privacy information
This section supplements the Policy and applies to residents of certain U.S. states with comprehensive privacy laws (such as Nebraska and Texas) to the extent those laws apply to our processing of personal information.
Collection Use and Disclosure of Personal Information
In the preceding 12 months, depending on how you interact with us, we may have collected and disclosed for a business purpose the following categories of Personal Information to the following categories of third parties:
| Category of Personal Information | Purposes for Collection and Disclosure | Categories of Third Parties to Which Personal Information is Disclosed |
|---|---|---|
| Identifiers (e.g., name, mailing address, email address, phone number, payment information, device ID, IP address, online identifiers) |
| Advertising Networks; Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Demographics (e.g., age, sex, race, date of birth, education, occupation, physical characteristics) | See purposes listed above. | Service Providers; Internet Service Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Commercial information (e.g., products or services purchased, registry or list information) | See purposes listed above. | Advertising Networks; Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Internet or other electronic network activity (e.g., browse or search history; device information; online interactions with websites, mobile applications, electronic communications, and advertisements) | See purposes listed above. | Advertising Networks; Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Geolocation data and, if you consent, precise geolocation (e.g., latitude or longitude) | See purposes listed above. | Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Sensory information (e.g., audio, visual, or similar information such as photograph) | See purposes listed above. | Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
| Inferences drawn from any of the above (e.g., preferences or characteristics) | See purposes listed above. | Advertising Networks; Service Providers; Internet Service Providers; Data Analytics Providers; Operating Systems and Platforms; Legal, Risk, and Security; Other users |
Depending on applicable laws, some information within the categories above may be considered protected class information or sensitive personal information, including government identifiers, payment information, race, precise geolocation data, health data, and biometric information. If required, consent will be obtained before collecting sensitive personal information (e.g., before the Service uses precise geolocation). For social features, these categories may also include precise geolocation; profile and demographic information; photographs and audiovisual content; communications; social graph and interaction information; sensitive personal information you choose to disclose; and inferences, embeddings, compatibility scores, and preferences derived from eligible memories, profile information, and activity.
We may have collected the categories of information from the sources listed above in Personal information collection.
Sale of Personal Information and Processing for Targeted Advertising
We do not sell your personal information as that term is traditionally defined. However, we may use certain cookies and online tracking technologies that may be considered a "sale" or processing of your personal information for targeted advertising under applicable state consumer privacy laws. We may have sold your personal information with the following categories of third parties for the following purposes:
| Category of Personal Information | Business or Commercial Purpose for Sale/Sharing | Third Party Which Sold or Disclosed for Targeted Advertising |
|---|---|---|
| Identifiers |
|
|
| Internet or other electronic network activity information |
|
|
| Commercial Information |
|
|
State Privacy Rights
Subject to applicable law and verification, you may have rights to access, correct, delete, or obtain a copy of personal information ("Consumer Rights"), and to opt out of targeted advertising, the sale or sharing of personal information, or certain profiling activities ("Opt-out Rights"). You also have the right to appeal our responses to your Consumer Rights Request. We do not knowingly sell personal information for monetary consideration. However, our use of Google advertising, enhanced conversions, analytics, and similar technologies may constitute processing for targeted advertising, or a "sale" under some state laws even when no money is exchanged. Where required, we provide cookie or privacy controls and honor applicable opt-out preference signals.
How to Exercise Your State Privacy Rights
You may exercise your Consumer Rights by contacting us using the information provided in Contact us below. Please include "State Privacy Rights Request" in the email subject line. You can exercise your Opt-Out right by clicking the "Your Privacy Choices" link on the footer of the page or through an opt-out preference signal. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or sharing of personal information, we will opt you out of any further selling or sharing of personal information. You will not be discriminated against for exercising privacy rights, but certain features require personal information to function.
Authorized agents may submit requests on your behalf where permitted by law. We may require proof of authorization and will separately verify your identity.
12. Additional information for EU and UK residents
This section applies to individuals in the European Economic Area ("EEA"), the United Kingdom ("UK"), and Switzerland where the General Data Protection Regulation ("GDPR") or similar laws apply and supplements our Privacy Policy. For purposes of this section, Meta Protocol Inc. is the "controller" of personal information processed in connection with the Site and our direct relationship with you (for example, account administration, billing, security, and analytics).
We process personal information under the following lawful bases: (a) performance of a contract, including providing the Service, administering Accounts, and processing transactions; (b) our legitimate interests, such as securing the Service, preventing fraud and abuse, maintaining reliability, improving performance, and understanding usage trends, provided those interests are not overridden by your rights; (c) compliance with legal obligations, such as recordkeeping and responding to lawful requests; and (d) consent, where required by law, such as for certain cookies or marketing communications. Where we rely on consent, you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. Where consent is required, we rely on consent for precise geolocation, advertising technologies, certain marketing measurement, and other optional processing, and you may withdraw consent prospectively. We conduct legitimate-interest balancing and data-protection assessments where required for social profiling, targeted advertising, precise location, and other higher-risk processing.
GDPR Rights
Subject to applicable law, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred. If you object to processing based on legitimate interests, we will evaluate the objection consistent with GDPR requirements.
How to Exercise Your Rights and Questions
For GDPR-related inquiries, you may contact us at privacy@anuma.ai with "GDPR" or "UK GDPR" in the subject line.
International Transfers
Where we transfer personal information outside the EEA/UK/Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses ("SCCs") and (where applicable) the UK International Data Transfer Addendum, or other lawful transfer mechanisms.
13. Marketing communications
Anuma will only send you marketing communications where permitted by applicable law and where you have provided your consent, where required. You may withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting us. Anuma uses third-party email service providers (such as Mailchimp, and Prefinery for waitlist and invitation emails) to deliver communications on our behalf. Anuma shares only the minimum information necessary (such as your email address) for this purpose. Anuma does not sell your personal information.
14. Google API Services user data — Limited Use
Anuma AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where you authorize a Google Connector (such as Gmail, Google Calendar, Google Drive, or Google Photos), we access that data solely to provide and improve the user-facing features you request, and only in the ways described in this Policy and disclosed to you at the time of authorization. We do not use raw or derived Google user data — including data that is aggregated or anonymized — to develop, train, or improve any generalized or foundational artificial intelligence or machine learning models. We do not transfer or sell Google user data for the purpose of developing, training, or improving such models, and we do not use it for serving advertisements. Any transfer of Google user data occurs only as necessary to provide or improve the requested features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with prior notice to affected users.
Anuma AI routes requests to third-party AI/ML model providers to deliver these features. Those providers are contractually or by policy restricted from using Google user data transmitted through the Service to train or improve their own generalized or foundational models. You may review or revoke Anuma AI's access to your Google data at any time via your Google Account permissions or by disconnecting the Connector within the Service.
15. Contact us
If you have questions or requests regarding this Policy, please contact us at:
Email: privacy@anuma.ai
Mail: Meta Protocol Inc., 548 Market St #13700, San Francisco, CA 94104