Effective Date: April 5, 2026 | Last Updated: April 5, 2026
Argonis AI, LLC, together with its subsidiaries, affiliates, successors, and assigns (collectively referred to hereinafter as "Argonis," "the Company," "we," "our," or "us"), is the sole operator and proprietor of the Argonis AI platform, encompassing without limitation the website accessible at the domain argonis.ai, all associated subdomains, application programming interfaces ("APIs"), mobile applications distributed through any application marketplace or distribution platform, progressive web applications, browser extensions, and any other software, services, tools, or functionality made available by the Company in connection therewith (collectively, the "Service" or "Platform"). This Privacy Policy (hereinafter, the "Policy") constitutes a legally binding agreement between you, the end user ("User," "you," or "your"), and the Company, and sets forth in comprehensive detail the manner and circumstances under which we collect, receive, aggregate, store, process, use, transfer, transmit, disclose, and otherwise handle your Personal Information (as defined herein) and Non-Personal Information when you access, browse, register for, subscribe to, interact with, or otherwise utilize any aspect of the Service. By accessing or using the Service in any capacity whatsoever, you hereby acknowledge that you have read, understood, and agree to be bound by all terms and conditions set forth in this Policy. In the event that you do not agree with any provision contained herein, you must immediately discontinue all use of and access to the Service.
For purposes of this Policy, the following definitions shall apply throughout and shall be construed in accordance with their ordinary meaning except where context requires otherwise:
In the course of your registration for, subscription to, and ongoing utilization of the Service, the Company may collect, receive, and Process the following categories of Personal Information that you voluntarily provide, submit, upload, transmit, or otherwise make available to us through your interactions with the Platform:
When you access, browse, or interact with the Service, certain information may be collected automatically through the use of server logs, cookies, and similar technologies, without requiring any affirmative action on your part. Such automatically collected information may include, without limitation:
The Service may generate derived information through the automated analysis of your interactions and content submissions, including without limitation contextual memory extractions (factual assertions derived from your conversational inputs for the purpose of enhancing subsequent response relevance and personalization), usage pattern analytics, behavioral inferences, and aggregated statistical metrics. Such derived information is generated solely for the purposes of improving Service functionality and personalizing your experience, and is associated with your account for the duration of its active status unless you affirmatively elect to delete such information through the controls made available in your account settings.
Notwithstanding the foregoing, the Company affirmatively represents that it does not engage in the collection, solicitation, or Processing of the following categories of information: (a) advertising identifiers or third-party tracking pixels, beacons, or similar surveillance technologies deployed for the purpose of behavioral advertising, cross-site tracking, or interest-based profiling; (b) precise geolocation coordinates derived from GPS, Wi-Fi triangulation, cellular tower proximity, or similar location-determination technologies; (c) biometric identifiers or biometric information as defined under applicable biometric privacy legislation; (d) information from consumer reporting agencies or data brokers; or (e) Sensitive Personal Information as defined under CCPA/CPRA, except to the extent that you voluntarily include such information in your user-generated content submissions.
The Company Processes your Personal Information for the following purposes, each of which is supported by one or more lawful bases as required under applicable data protection legislation:
Processing necessary for the performance of the contractual agreement between you and the Company (i.e., the Terms of Service), including without limitation: (a) provisioning, operating, maintaining, and administering the Service and all associated features, functionality, and infrastructure; (b) processing, authenticating, and managing user account registrations, logins, and session management; (c) facilitating and processing subscription transactions, recurring billing cycles, payment authorization, refund processing, and related financial operations through our designated payment processor; (d) generating, delivering, and optimizing artificial intelligence-powered responses, analyses, and outputs in response to your queries, prompts, and interactions; (e) storing, retrieving, and managing your conversational history, agent configurations, knowledge bases, and other user-generated content as necessary to provide continuity of service; and (f) executing data export, account modification, and account deletion requests submitted by you through the Service interface.
Processing necessary for the purposes of the legitimate interests pursued by the Company, except where such interests are overridden by your fundamental rights and freedoms, including without limitation: (a) monitoring, detecting, investigating, and preventing fraudulent activity, unauthorized access, abuse, misuse, and other security threats to the Service, its infrastructure, and its users; (b) analyzing aggregated and de-identified usage patterns, performance metrics, and behavioral trends for the purpose of improving Service functionality, optimizing user experience, identifying and resolving technical deficiencies, and informing product development decisions; (c) maintaining system logs and audit trails as necessary for operational troubleshooting, incident response, and forensic analysis; and (d) enforcing the Company's Terms of Service, Acceptable Use Policy, and other governing agreements.
Processing necessary for compliance with legal obligations to which the Company is subject, including without limitation: (a) responding to lawful requests from governmental authorities, regulatory bodies, law enforcement agencies, and judicial tribunals; (b) maintaining financial, billing, and transaction records as required under applicable tax, accounting, and commercial regulations; (c) implementing and maintaining appropriate technical and organizational measures as required under applicable data protection legislation; and (d) fulfilling data subject access, correction, deletion, and portability requests as mandated under CCPA/CPRA, GDPR, and other applicable privacy frameworks.
In certain limited circumstances, the Company may Process your Personal Information on the basis of your freely given, specific, informed, and unambiguous consent, as indicated through a clear affirmative action. Where Processing is based on consent, you retain the right to withdraw such consent at any time, without affecting the lawfulness of Processing carried out prior to withdrawal. Withdrawal of consent may be effectuated by contacting the Company at the addresses specified in Section 14 of this Policy.
The Company does not sell, rent, lease, barter, exchange, or otherwise transfer your Personal Information to third parties for monetary or other valuable consideration. Notwithstanding the foregoing, the Company may disclose, share, or otherwise make available your Personal Information in the following narrowly defined circumstances:
We engage trusted third-party service providers and data processors who perform functions and provide services on our behalf pursuant to written data processing agreements containing appropriate confidentiality, security, and data protection obligations consistent with the requirements of applicable data protection legislation. Such service providers are contractually prohibited from using your Personal Information for any purpose other than the specific services they perform on our behalf and are required to implement and maintain technical and organizational security measures no less protective than those employed by the Company.
To deliver the artificial intelligence-powered features and functionality constituting the core of the Service, your messages, prompts, conversational context, and associated metadata are transmitted to and processed by our proprietary AI infrastructure. Such processing is performed exclusively for the purpose of generating responsive outputs and is governed by the following principles: (a) your content is not utilized for the training, fine-tuning, or improvement of any third-party artificial intelligence models or systems; (b) your prompts, conversations, and user-generated content are not shared with, disclosed to, or made accessible to any third party for such third party's own independent purposes; and (c) processing occurs in accordance with the data minimization principle, whereby only such data as is strictly necessary for response generation is transmitted and processed.
The Company may disclose your Personal Information without your prior consent where such disclosure is required or permitted by applicable law, regulation, legal process, or enforceable governmental request, including without limitation: (a) in response to a valid subpoena, court order, search warrant, or other lawful process issued by a court of competent jurisdiction or governmental authority; (b) to comply with applicable laws, rules, and regulations, including but not limited to the requirements of the Stored Communications Act (18 U.S.C. §§ 2701-2712), the Electronic Communications Privacy Act, and analogous state legislation; (c) to protect and defend the rights, property, intellectual property, trade secrets, and legitimate business interests of the Company; (d) to prevent, detect, investigate, or respond to actual or suspected fraud, illegal activity, security incidents, or technical vulnerabilities; (e) to protect the personal safety, rights, or property of users of the Service or members of the public; and (f) to protect against potential legal liability or to establish, exercise, or defend legal claims.
In the event of a proposed or consummated merger, acquisition, consolidation, reorganization, restructuring, sale or transfer of substantially all assets, joint venture, change of control, dissolution, liquidation, bankruptcy, receivership, or similar corporate transaction or proceeding involving the Company, your Personal Information may be among the assets transferred, assigned, or disclosed in connection therewith, subject to any applicable legal requirements. In such circumstances, the Company shall use commercially reasonable efforts to ensure that the acquiring or successor entity assumes the obligations set forth in this Policy with respect to your Personal Information, or shall provide you with notice and, where required by applicable law, an opportunity to opt out of such transfer.
The Company implements and maintains a comprehensive information security program consisting of administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your Personal Information against unauthorized access, acquisition, use, disclosure, alteration, destruction, or other forms of unauthorized Processing. Such measures include, without limitation:
Notwithstanding the foregoing security measures, no method of electronic transmission over the Internet, wireless network, or method of electronic storage is completely secure or impervious to all forms of attack or unauthorized access. While the Company employs commercially reasonable efforts to protect your Personal Information, we cannot and do not warrant or guarantee the absolute security of information transmitted to, from, or stored within the Service, and any transmission of Personal Information is undertaken at your own risk. In the event of a confirmed data breach affecting your Personal Information, the Company shall notify you in accordance with the timeframes and procedures mandated by applicable data breach notification laws.
The Company retains your Personal Information only for so long as is reasonably necessary to fulfill the purposes for which it was collected, as set forth in this Policy, unless a longer retention period is required or permitted by applicable law, regulation, or contractual obligation. The following retention schedules apply:
Irrespective of your geographic location or applicable jurisdiction, the Company provides all users of the Service with the following rights with respect to their Personal Information, which may be exercised through the self-service controls available in your Account Settings or by submitting a verifiable request to the Company at the contact addresses specified in Section 14:
If you are a natural person who is a resident of the State of California, as defined under Cal. Civ. Code § 1798.140(g), you are entitled to the following additional rights under the California Consumer Privacy Act of 2018 (Cal. Civ. Code §§ 1798.100 et seq.), as amended by the California Privacy Rights Act of 2020:
To exercise any of the foregoing rights, you may submit a verifiable consumer request by contacting the Company at [email protected] or [email protected]. The Company shall acknowledge receipt of your request within ten (10) business days and shall provide a substantive response within forty-five (45) calendar days, which period may be extended by an additional forty-five (45) days where reasonably necessary, with notice to you of such extension and the reason therefor.
If you are a natural person located within the European Economic Area ("EEA"), the United Kingdom, or Switzerland, you are entitled to the following additional rights under the General Data Protection Regulation (EU) 2016/679 and its implementing legislation:
The Service employs a limited set of strictly necessary cookies and similar client-side storage mechanisms, as defined under Directive 2002/58/EC (the "ePrivacy Directive") and its national implementing legislation, for the sole purpose of enabling core Service functionality. The categories of cookies and storage mechanisms utilized are as follows:
The Company does not deploy, utilize, or authorize the deployment of analytics cookies, performance cookies, advertising cookies, social media cookies, retargeting pixels, web beacons, clear GIFs, fingerprinting scripts, or any other third-party tracking technologies for the purpose of behavioral advertising, interest-based profiling, cross-site tracking, or surveillance of user activity. Accordingly, no cookie consent mechanism, banner, or preference center is required or implemented, as the Company's use of cookies falls exclusively within the "strictly necessary" exemption under applicable ePrivacy and data protection legislation.
The Service is not directed to, marketed toward, or intended for use by children under the age of thirteen (13) years, as defined under the Children's Online Privacy Protection Act of 1998 (15 U.S.C. §§ 6501-6506) ("COPPA") and its implementing regulations (16 C.F.R. Part 312). The Company does not knowingly collect, solicit, receive, or maintain Personal Information from children under the age of thirteen (13). In the event that the Company obtains actual knowledge that it has collected Personal Information from a child under the age of thirteen (13) without verifiable parental consent as required under COPPA, the Company shall take prompt and reasonable steps to delete such information from its records and systems. If you are a parent, legal guardian, or custodian and you believe that your minor child has provided Personal Information to the Company without your consent, you are urged to contact us immediately at the addresses specified in Section 14, and we shall endeavor to delete such information promptly.
Natural persons between the ages of thirteen (13) and eighteen (18) years may utilize the Service only with the affirmative consent and under the active supervision of a parent or legal guardian who has reviewed and accepted this Policy and the Terms of Service on such minor's behalf.
The Service is operated, hosted, and administered from facilities and infrastructure located within the United States of America. If you access or utilize the Service from a jurisdiction outside the United States, including without limitation from the European Economic Area, the United Kingdom, Switzerland, Canada, Australia, or any other jurisdiction with data protection laws that differ from those of the United States, you hereby acknowledge and consent to the transfer, transmission, storage, and Processing of your Personal Information in and to the United States and other jurisdictions in which the Company or its service providers maintain facilities. You further acknowledge that the data protection and privacy laws of the United States and such other jurisdictions may differ materially from, and may not afford the same level of protection as, the laws of your jurisdiction of residence, and you expressly consent to such transfer notwithstanding any such differences. The Company shall implement appropriate safeguards, consistent with applicable legal requirements, to ensure that your Personal Information receives an adequate level of protection in the jurisdictions in which it is Processed.
The Service may contain hyperlinks, references, integrations, or connections to third-party websites, applications, platforms, or services that are not owned, operated, controlled, or maintained by the Company. The inclusion of any such link or reference does not imply endorsement, affiliation, sponsorship, or approval of, or any responsibility for, the content, products, services, privacy practices, terms of use, or security measures of any such third-party website or service. The Company exercises no control over, and expressly disclaims any and all responsibility and liability for, the information collection and Processing practices, privacy policies, terms of service, content, accuracy, opinions expressed, security measures, or other aspects of any third-party website or service. You are solely responsible for reviewing the applicable privacy policies and terms of service of any third-party website or service that you access through or in connection with the Service, and your interactions with such third-party websites and services are governed exclusively by such third party's own policies and terms.
The Company reserves the right, in its sole and absolute discretion, to amend, modify, supplement, or replace this Policy at any time and from time to time, with or without prior notice to you, by posting the revised Policy on this page with an updated "Last Updated" date. For amendments that constitute material changes to the scope, nature, or purposes of Processing, or that materially diminish your rights under this Policy, the Company shall use commercially reasonable efforts to provide you with prior notice of such changes through one or more of the following methods: (a) posting a prominent notice within the Service interface; (b) sending an electronic mail notification to the email address associated with your account; or (c) displaying an in-application notification or banner. Your continued access to or use of the Service following the posting of any revised Policy, or following the effective date of any material changes of which you have been notified, shall constitute your binding acceptance of and agreement to such revised Policy. If you do not agree with any amendment or modification, your sole and exclusive remedy is to discontinue use of and access to the Service and to delete your account. It is your responsibility to review this Policy periodically for any changes or updates.
This Policy, and any dispute, claim, or controversy arising out of or relating to this Policy or the Processing of your Personal Information by the Company, shall be governed by and construed in accordance with the substantive and procedural laws of the State of Oklahoma, United States of America, without regard to its conflict of laws principles. Any legal action, suit, or proceeding arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in the State of Oklahoma, and you hereby irrevocably consent to the personal jurisdiction of such courts and waive any objection to venue therein.
If you have any questions, concerns, comments, complaints, or requests regarding this Privacy Policy, the Company's data protection practices, or the exercise of your rights as described herein, you may contact the Company through the following channels:
The Company shall acknowledge receipt of all data protection inquiries within ten (10) business days and shall provide a substantive response within the timeframes required by applicable law.