Privacy Policy

For account, billing, marketing, website, support, security, and product operations data, Silicon Group generally acts as a business or controller.

For personal information contained in Customer Data that we process on behalf of a customer, Silicon Group generally acts as a service provider or processor, and the customer acts as the business or controller. In those cases, we process the data according to the customer's instructions, the applicable agreement, and any data processing agreement.

If you use Megacosm through your employer or another organization, that organization controls many aspects of your workspace, including users, permissions, retention settings, integrations, and the contents of the organization's operating representation. Direct privacy questions about that workspace to your organization first.

We collect personal information and Customer Data in the following categories.

We collect information directly from you, from customers and their administrators, from identity providers, from connected third-party services, from payment and billing providers, from analytics and cookie technologies, from service providers, and automatically through operation of the Services.

We use information to:

• provide, operate, maintain, secure, and improve the Services;
• authenticate users and agents;
• provision workspaces, invites, roles, permissions, and integrations;
• process Customer Data according to customer instructions;
• operate organizational representations, workflows, approvals, and audit features;
• provide AI-assisted drafting, interpretation, summarization, recommendations, maintenance proposals, generated copy, and agent functionality;
• meter LLM usage, enforce budgets, administer credits, and bill customers;
• troubleshoot, support, communicate with, and train users and administrators;
• send transactional email such as invites, security notices, product notices, and administrative messages;
• send marketing communications where permitted, with opt-out where required;
• analyze usage, reliability, performance, security, and abuse patterns;
• comply with legal obligations and enforce agreements;
• protect the rights, safety, and security of Silicon Group, customers, users, service providers, and the public; and
• carry out other purposes disclosed at collection or authorized by you or the applicable customer.

Some Services use third-party AI providers. We provide a current list of our sub-processors, including AI providers, to customers and prospective customers on request and under our data processing agreement. Additional or customer-selected providers may be used if enabled for a deployment or agreed in an order form.

We send AI providers the prompts, context, Customer Data, and metadata needed to provide the requested feature. We do not authorize third-party AI providers to train their general models on Customer Data unless the customer has expressly agreed.

Customer should not submit sensitive personal information, regulated data, trade secrets, or confidential information to AI features unless Customer is comfortable with that information being processed as described in this Privacy Policy, the applicable order form, and any data processing or regulated-data terms.

We may disclose information to the following recipients.

Megacosm may use cookies, pixels, local storage, analytics, advertising, and similar technologies to operate and secure Megacosm, remember preferences, understand usage, improve content, measure campaigns, and market the Services.

Megacosm does not use Customer Data for advertising. Where Megacosm uses analytics or advertising technologies, they are described in our Cookie Policy and, where required, controlled by a consent banner or preferences center.

Most browsers allow you to control cookies. Blocking cookies may affect website or product functionality. We do not currently respond to browser "Do Not Track" signals unless required by law.

You can review or change your cookie choices at any time through "Your Privacy Choices" in the site footer.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with law, resolve disputes, enforce agreements, maintain security, preserve backups, and support auditability.

Customer Data retention may be governed by the applicable order form, DPA, customer settings, backup cycles, deployment configuration, and legal requirements. Certain audit, security, billing, and compliance records may be retained after account closure where needed for legitimate business, legal, security, or contractual purposes.

Megacosm maintains audit logs. Where deletion of personal information would conflict with legal, security, or audit obligations, we may retain, restrict, de-identify, or pseudonymize information as permitted by law and the applicable agreement.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. Depending on the deployment, safeguards may include authentication and access controls, encryption in transit and at rest, logging and monitoring, rate limiting, and backups.

No system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization.

Silicon Group is based in the United States, and the Services may be hosted or processed in the United States and other countries where Silicon Group, its customers, service providers, or sub-processors operate. Those countries may have data protection laws different from the laws where you live.

Where required, international transfers will be supported by appropriate legal mechanisms, such as standard contractual clauses or other approved safeguards.

You may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, depending on your location and the context of the processing.

For personal information controlled by a customer, submit your request to that customer. If you submit a request to us about Customer Data, we may refer the request to the customer or process it according to the customer's instructions.

For personal information controlled by Silicon Group, contact us at privacy@megacosm.ai. We may need to verify your identity and may deny or limit requests where permitted by law, including to protect security, prevent fraud, preserve legal claims, comply with legal obligations, or respect another person's rights.

You can opt out of marketing emails by using the unsubscribe link in those emails or contacting us. You may still receive transactional, security, billing, and administrative messages.

We do not sell Customer Data for money. We do not use Customer Data for third-party targeted advertising.

Some analytics or advertising cookies may be considered "sharing" or "targeted advertising" under certain US state privacy laws. Where required, we will provide a way to opt out of those activities.

Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of personal information, and the advertising and analytics categories are turned off automatically. You can also review or change these choices through "Your Privacy Choices" in the site footer.

Depending on your state, you may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing of personal information, including sales, targeted advertising, certain profiling, or certain uses of sensitive personal information. Silicon Group will not discriminate against you for exercising privacy rights, but different Services, prices, or quality levels may be available where permitted by law and reasonably related to the value of the data involved.

California residents may also authorize an agent to submit privacy requests on their behalf. We may ask the authorized agent to provide proof of authorization and may ask you to verify your identity directly with us. California residents may request information about certain disclosures to third parties for direct marketing purposes.

Virginia and other state residents may have the right to appeal a decision we make about a privacy request. If we deny your request and your state provides an appeal right, you may appeal by contacting privacy@megacosm.ai with "Privacy Appeal" in the subject line.

Nevada residents may have the right to opt out of certain sales of covered information. Silicon Group does not currently sell covered information as defined by Nevada law, but Nevada residents may submit an opt-out request to privacy@megacosm.ai.

To exercise rights for information controlled by Silicon Group, contact privacy@megacosm.ai. Your request must provide enough information for us to verify your identity and understand the request. We use verification information only to verify and respond to the request. We may deny or limit a request where permitted by law, including where fulfilling it would conflict with legal, security, audit, fraud-prevention, or other rights and obligations.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact privacy@megacosm.ai.

The Services may link to or integrate with third-party websites, products, and services. This Privacy Policy does not apply to third-party services. Review the privacy policies and terms of those third parties.

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy and update the effective date. If changes materially affect how we process personal information in paid Services, we will use reasonable efforts to notify the applicable customer.