Privacy Policy
Effective and last updated October 26, 2026
Subconscious Systems Technologies, Inc., a Delaware corporation ("Subconscious," "we," "us," or "our"), is committed to protecting the confidentiality of the information entrusted to it. This Privacy Policy describes how Subconscious collects, uses, discloses and protects information in connection with the website located at subconscious.dev (the "Site") and the Subconscious platform, inference API, Team Token Plans and dedicated deployments (collectively, the "Services").
1. Zero Data Retention
Subconscious maintains a zero data retention policy for all Customer Content.
Subconscious does not store, log or retain any input submitted to, or output generated by, the Services. Customer Content is processed solely to fulfill the request in which it is submitted and is not retained once that request is complete.
Under this policy, Subconscious commits to the following:
- No storage. Customer Content is never written to any database, file system, log, analytics system, error report or monitoring system operated by Subconscious or on its behalf.
- No access. Customer Content is not accessible to any Subconscious employee or contractor, either during processing or afterward.
- No training. Customer Content is never used to train, fine-tune or evaluate any model.
- Usage data only. The only record Subconscious keeps of a request is Usage Data: token counts and request metadata, never the content of the request or response.
- Bounded caching. Encoded, non-human-readable cache data used to accelerate repeated context is deleted no later than 24 hours after creation and is not accessible to Subconscious personnel.
Because Subconscious retains no copy of Customer Content, Subconscious cannot retrieve, review, reproduce or disclose it, whether for support, legal process or any other purpose.
2. Scope and Definitions
This Privacy Policy applies to information Subconscious processes through the Site and the Services. For Customer Content, Subconscious acts as a service provider to the customer that holds the account. Where a customer has executed a separate written agreement with Subconscious, the data protection terms of that agreement will govern to the extent they conflict with this Privacy Policy.
- "Customer Content" means prompts, messages, files, images, tool results and any other input submitted to the Services, together with all completions and other output generated by the Services.
- "Usage Data" means counts of input, output and cached tokens and associated request metadata, such as timestamps, model, latency, status codes, API key identifier and organization. Usage Data never includes Customer Content.
- "Personal Information" means information that identifies, relates to or could reasonably be linked to an individual.
3. Customer Content
3.1 Processing Limited to Fulfilling Requests
Customer Content is held in memory only for the duration required to process a request and return the response. Subconscious processes Customer Content for no other purpose.
3.2 No Logging or Personnel Access
Subconscious does not log Customer Content. Customer Content is not accessible to anyone at Subconscious, during processing or after.
3.3 Inference Cache
To reduce the cost and latency of long-running sessions, the Services may retain cache data derived from requests within Subconscious's inference infrastructure for a maximum of 24 hours from creation. Cache data is stored solely in an encoded, non-human-readable format, is used only to accelerate the processing of requests, and is not accessible to Subconscious personnel.
3.4 No Model Training
Subconscious will not use Customer Content or cache data to train, fine-tune, evaluate or otherwise improve any model, whether operated by Subconscious or by a third party.
3.5 Ownership
Customers retain all rights in their Customer Content. Subconscious claims no rights in Customer Content beyond the limited right to process it in order to provide the Services.
3.6 Dedicated and On-Premises Deployments
Where Subconscious operates a deployment within a customer's cloud environment or on customer hardware, Customer Content remains within that environment, subject to the terms of the applicable agreement.
3.7 Customer Responsibilities
Customers are responsible for ensuring they hold all rights, and have provided all notices and obtained all consents, required to submit Customer Content to the Services, including any Personal Information of third parties.
4. Information We Collect
4.1 Information You Provide
- Account information: name, email address, organization and authentication details.
- Billing information: billing contact, plan, invoices and payment status. Payment card details are handled by our payment processor.
- Communications: correspondence submitted by email, contact forms or support channels.
- Employment applications: information submitted in connection with a job application.
4.2 Information Collected Automatically
- Usage Data: as defined in Section 2, used for billing, spend controls and customer usage reporting.
- Security information: IP addresses, authentication events and API key activity.
- Site information: pages viewed, referring pages, browser and device type, and approximate location derived from IP address.
5. How We Use Information
| Purpose | Information Used |
|---|---|
| Providing and operating the Services | Customer Content (transiently, under zero data retention), account information, Usage Data |
| Billing, spend controls and usage reporting | Usage Data, billing information |
| Security and prevention of fraud and abuse | Security information, Usage Data |
| Capacity planning and service improvement | Aggregated Usage Data only. Customer Content is never used. |
| Customer support and service notices | Account information, communications |
| Site analytics | Site information |
| Recruiting | Employment applications |
| Compliance with legal obligations | Information we hold, as required by law |
7. Disclosure of Information
7.1 Compute Providers
Model inference runs on GPU infrastructure supplied by Aranya, Baseten, Google Cloud Platform and Moonlite. These providers process Customer Content only as needed to fulfill requests and are bound by the same zero data retention, no-access and no-training restrictions that apply to Subconscious.
7.2 Other Service Providers
Subconscious engages a limited number of vendors for hosting, authentication, databases, monitoring, analytics and email. These vendors process information solely on Subconscious's instructions and do not receive Customer Content except as necessary to deliver the Services. A complete list is maintained on our Subprocessors page.
7.3 Legal Requirements
Subconscious may disclose information it holds where required by law, subpoena or other legal process, or where necessary to protect the rights, property or safety of Subconscious, its customers or the public. Under its zero data retention policy, Subconscious holds no Customer Content that could be disclosed.
7.4 Business Transfers
In connection with a merger, acquisition, financing or sale of assets, information held by Subconscious may be transferred, subject to the commitments in this Privacy Policy.
7.5 No Sale of Personal Information
Subconscious does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising.
8. Data Retention
| Category | Retention Period |
|---|---|
| Customer Content (inputs and outputs) | Zero days. Never stored. |
| Inference cache data | No more than 24 hours from creation |
| Usage Data | For the life of the account and thereafter as required for billing, tax and legal purposes |
| Account and billing information | For the life of the account and thereafter as required by law |
| Security information | As long as necessary to investigate and prevent abuse |
| Communications and employment applications | As long as necessary for the purpose for which they were submitted |
Information that is no longer required is deleted or de-identified.
9. Data Security
Zero data retention is the foundation of Subconscious's security posture: information that is never stored cannot be exposed. For the limited information Subconscious does maintain, safeguards include:
- TLS encryption for all traffic to the Site, the platform and the API.
- Organization-scoped API keys that customers may revoke at any time.
- Least-privilege access to production systems, limited to authorized personnel.
- Infrastructure providers that maintain independent security programs.
In the event of a security incident affecting Personal Information, Subconscious will provide notice as required by applicable law. Additional detail is available on our Security page. Suspected vulnerabilities should be reported to security@subconscious.dev.
10. Your Privacy Rights
10.1 Account Choices
Account holders may update account information within the platform, opt out of marketing communications using the link in any such message, and request deletion of their account.
10.2 State Privacy Rights
Residents of California and other states with consumer privacy laws may have the right to request access to, correction of and deletion of their Personal Information, and to know the categories of Personal Information collected, the purposes for which it is used and the categories of parties to which it is disclosed. Those categories are described in Sections 4 through 7. Subconscious does not sell or share Personal Information and does not use sensitive Personal Information to infer characteristics about individuals. Subconscious will not discriminate against any individual for exercising these rights.
10.3 Submitting a Request
Requests may be submitted to privacy@subconscious.dev. Subconscious will verify the requester's identity and respond within the period required by applicable law. Authorized agents may submit requests on an individual's behalf with written authorization. Requests concerning Customer Content processed for a business customer will be referred to that customer.
11. Children's Privacy
The Services are not directed to individuals under the age of 18, and Subconscious does not knowingly collect Personal Information from them. If Subconscious learns that it has collected such information, it will delete it.
12. Changes to This Policy
Subconscious may amend this Privacy Policy from time to time. Amendments will be posted on this page with a revised effective date. Account holders will be notified by email of material changes before they take effect.
13. Contact Information
- Privacy inquiries and requests: privacy@subconscious.dev
- Security matters: security@subconscious.dev
- Mailing address: Subconscious Systems Technologies, Inc., 1 Broadway, 14th Floor, Cambridge, MA 02142