Privacy Policy

Introduction

Prediction Lab, LLC ("Prediction Lab," "we," "us," or "our"), a Delaware limited liability company, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our website at www.predictionlab.ai (the "Website"), our desktop application (the "Desktop Application"), and our cloud-based predictive modeling services (the "Cloud Services," and together with the Website and Desktop Application, the "Services").

For business customers, this Privacy Policy should be read in conjunction with our Data Processing Addendum, which governs our processing of Customer Data on your behalf.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

Definitions

"Customer Data" means data, information, or materials submitted by or on behalf of you or your authorized users to the Services, excluding Feedback. Customer Data is owned by you and processed by us solely to provide the Services.

"Account Data" means information you provide when creating an account, such as name, email address, company name, and billing information.

"Usage Data" means de-identified, aggregated information about how the Services are accessed and used. Usage Data does not include Customer Data or information that identifies you personally.

"Personal Data" means any information that identifies, relates to, or can be reasonably linked to a particular individual, as defined under applicable privacy laws.

Information We Collect

Information You Provide

Account Information: Name, email address, company name, job title, billing and payment information (processed by our payment processor), and account credentials.

Support and Communications: Information you provide when contacting support, feedback, surveys, and correspondence.

Customer Data: Data you upload, create, or process through the Services. We process Customer Data solely to provide the Services as instructed by you.

Information Collected Automatically

Website and Cloud Services: IP address, browser type, operating system, pages visited and features used, date and time of access, referring website addresses, and device identifiers.

Desktop Application (Cloud Mode): Application version, operating system version, feature usage, and error reports (with your consent).

Desktop Application (Local Mode): No information is collected or transmitted. All data remains on your device.

Information from Third Parties

We may receive information from identity providers if you use single sign-on (SSO), business partners or resellers who refer you to us, and publicly available business information.

Cookies and Tracking Technologies

We use cookies and similar technologies on our Website and Cloud Services to maintain your session and preferences, analyze usage patterns, and ensure security.

Types of Cookies: Essential cookies (required for functionality), analytics cookies (to understand usage), and preference cookies (to remember your settings).

Your Choices: You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

How We Use Your Information

To Provide the Services: Create and manage your account, process Customer Data as instructed, provide customer support, and send transactional communications.

To Improve the Services: Analyze usage patterns, develop new features, and conduct research using aggregated, de-identified data.

To Communicate: Respond to inquiries, send important notices, and provide information about updates. We send marketing communications only with your consent where required.

To Ensure Security and Compliance: Protect against unauthorized access and fraud, enforce our terms and policies, and comply with legal obligations.

Artificial Intelligence

Predictive Modeling

The Services include statistical and machine learning capabilities (such as generalized linear models and gradient boosting models) that you use to build predictive models with your data. These models are created exclusively for your use.

AI Assistant Features

Optional AI-powered features help you interact with the product and analyze results. These operate on a Bring Your Own Key (BYOK) model: you may connect your own API key with supported AI providers, run AI locally on your machine using local models with no external data sharing, or use the Services without AI assistant features.

Data Use Commitment

We do not use Customer Data to train, fine-tune, or improve any AI models, large language models, or foundation models. Your data is never shared across customers or used for any purpose beyond delivering the Services to you.

Disclosure of Your Information

We do not sell your Personal Data. We may share your information in the following circumstances:

Service Providers: We engage third-party service providers to perform functions on our behalf. These providers are contractually obligated to use your information only as necessary to provide services to us. Our current subprocessors are listed in our Data Processing Addendum.

Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership.

Legal Requirements: We may disclose information if required by law or to protect our rights, prevent wrongdoing, or protect personal safety.

With Your Consent: We may share information for other purposes with your explicit consent.

International Data Transfers

Prediction Lab is based in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States.

Transfers from the EEA/UK

For transfers of Personal Data to countries without an adequacy decision, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum. We conduct transfer impact assessments and implement supplementary technical measures including encryption.

Data Residency Options

For data residency requirements, see our Shared Responsibility Model for deployment options including Single-Tenant Cloud (selection from available AWS regions) and BYOC (deployment in your AWS account).

Data Retention

Upon termination, you have 90 days to export Customer Data, after which it is deleted within 14 days. Backups are purged within 30 days. Data stored locally via the Desktop Application is not affected.

Your Privacy Rights

All Users

All users may access and update account information through account settings, export Customer Data using built-in export tools, delete your account by contacting support@predictionlab.ai, and opt out of marketing communications.

EEA/UK Residents (GDPR)

You have the right to access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent, and not to be subject to automated decision-making. To exercise these rights, contact privacy@predictionlab.ai. We will respond within one month.

You may lodge a complaint with your supervisory authority: UK residents may contact the Information Commissioner's Office (ico.org.uk); EU residents may contact their local Data Protection Authority.

Legal Bases for Processing: We process Personal Data based on performance of contract (providing the Services, account management), legitimate interests (security, fraud prevention, service improvements), consent (marketing communications), and legal obligation (compliance requirements).

Our Role: For Website and Account Data, we are the Controller. For Customer Data, we are the Processor acting on your instructions as Controller. See our Data Processing Addendum for details.

California Residents (CCPA/CPRA)

Categories Collected: Identifiers, commercial information, internet/network activity, geolocation data, professional information, and inferences.

Your Rights: Right to know, access, delete, correct, opt-out of sale/sharing, limit use of sensitive information, and non-discrimination. We do not sell or share Personal Data for cross-context behavioral advertising.

To exercise rights, email privacy@predictionlab.ai with subject line "California Privacy Request." We will respond within 45 days.

Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS 1.2+) and at rest (AES-256), secure authentication with SSO and MFA support, regular security assessments, access controls based on least privilege, employee security training, and incident response procedures.

We maintain SOC 2 certification. Upon written request and subject to confidentiality, we will provide a summary of our most recent report.

For detailed security responsibilities by deployment type, see our Shared Responsibility Model.

Children's Privacy

Our Services are not intended for children under 18, and we do not knowingly collect Personal Data from children under 18. If you believe a child has provided us with Personal Data, contact privacy@predictionlab.ai.

Third-Party Websites

Our Services may contain links to third-party websites or services. This Privacy Policy does not apply to third-party sites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Revised" date and notify you by email or through the Services. For changes affecting Customer Data processing, we will provide at least 30 days advance notice.

Contact Us

Privacy Inquiries: privacy@predictionlab.ai

General Support: support@predictionlab.ai

Mailing Address: Prediction Lab, LLC Attn: Privacy 323 Lovers Ln Terrell, TX 75160 United States