Privacy Policy
GIC Technologies, Inc.

GIC Technologies, Inc. ("GIC," "we," "us," or "our") operates Cofounder, an AI platform that provides tools and agents to help our customers build and operate businesses. This Privacy Policy explains how we collect, use, and disclose personal information when you:

• visit https://cofounder.co/ or our other websites;
• create or use a Cofounder account;
• communicate with us;
• apply for a job; or
• otherwise interact with us.

This Privacy Policy does not describe how we handle information that Cofounder customers submit or connect to Cofounder for processing, or that Cofounder generates for them from that information. Examples include business documents, code, financial records, communications, and other information about their employees, vendors, customers, or other third parties. We process that information on behalf of our customers under our agreements with them, including our Terms of Service at https://cofounder.co/terms. If you have questions, or want to exercise rights, about your data that a Cofounder customer has submitted to Cofounder, please contact that organization directly.

In short:

• We use deidentified information from all Cofounder accounts, including prompts, outputs, and records of agent activity, to train and improve AI models.
• We may license that deidentified information to AI labs and other partners, who must agree not to reidentify it.
• There is no setting to turn this off. See "Deidentified data, model training, and licensing" below.

The information we collect depends on how you interact with us.

Information you provide

• Identity and contact information. We collect information such as your name, business contact details, company, title, and mobile number if you provide one.
• Account and authentication information. We collect information such as your username, login and authentication information, preferences, and role within a customer account.
• Billing information. We collect billing contacts, billing addresses, and information about your subscription, credits, and auto-recharge settings.
• Communications and feedback. We collect information you provide when you contact us. This includes support requests, business inquiries, survey responses, ratings, feedback, and other communications.
• Job application information. If you apply for a job, we collect information such as your résumé, employment and education history, qualifications, work authorization, references, and interview information.

Information we collect automatically when you use Cofounder

When you visit our websites or use Cofounder, we and our service providers may automatically collect:

• Device and connection information. This includes your IP address, approximate location derived from your IP address, browser, device, operating system, language, and referring URL.
• Account activity. This includes login, authentication, session, and access information.
• Usage and performance information. This includes information about how Cofounder is used and performs, such as:
  • the features, agents, models, and tools used;
  • task categories;
  • latency and resource use;
  • errors and task outcomes; and
  • approvals, rejections, and retries.

  It does not include the contents of prompts, files, communications, or other information customers submit or connect to Cofounder.

• Security and fraud information. This includes security, fraud prevention, and audit information.

We may associate the information collected automatically with your Cofounder account or company.

Information we receive from other sources

• Identity providers. If you create or access an account using an identity provider, we may receive your name, business email address, profile image, and similar profile information.
• Your organization. An administrator or another user at your organization may provide your name, work email address, company, account role, and invitation information so that we can create or manage your account.
• Payment, security, and fraud providers. Our payment processors collect complete payment card information directly. We may receive limited payment information, such as payment status, card type, the last four digits of the card, and transaction identifiers. We may also receive authentication, security, and fraud signals.
• Business information providers and public sources. We may obtain business contact and professional information from commercial providers, professional networks, and public sources for sales, marketing, recruiting, and relationship management.

• Essential and functional technologies. We and our providers use cookies, local storage, SDKs, and similar technologies to secure accounts, authenticate users, remember preferences, and operate Cofounder.
• Analytics and advertising. We use Google Analytics and PostHog to understand visits to our websites and use of Cofounder. We use Google Ads and Meta Pixel to measure marketing and advertising. These providers may use cookies, pixels, and similar technologies to collect identifiers and activity information, and to recognize a browser or device across websites and applications.

You can control cookies through your browser and any cookie controls we make available. Blocking some technologies may affect how Cofounder functions. Where applicable law gives you a right to opt out of sale, sharing, or targeted advertising, you may use our cookie controls or opt-out link, or a legally recognized opt-out preference signal such as Global Privacy Control.

We may use personal information for the following purposes:

• Provide and support Cofounder. We use personal information to operate, maintain, secure, and support Cofounder, including accounts, workspaces, authentication, and permissions.
• Process billing and payments. We use personal information to administer subscriptions, usage, credits, auto-recharge, and payments.
• Communicate with you. We use personal information to communicate about Cofounder, billing, security, support, and other administrative matters, and to send marketing communications where permitted.
• Improve Cofounder. We use usage and performance information and feedback to understand how Cofounder is used, troubleshoot problems, and improve its performance, features, agents, models, and related systems. Our use of deidentified information, including information derived from what customers submit or connect to Cofounder, is described below.
• Protect Cofounder and others. We use personal information to detect and prevent fraud, abuse, security incidents, and prohibited activity, to enforce our agreements, and to protect GIC, our customers, and others.
• Comply with law. We use personal information to comply with legal obligations and respond to lawful requests.
• Recruit and hire. We use personal information to evaluate job applicants and administer the hiring process.
• Manage business transactions. We may use personal information in connection with a financing, merger, acquisition, reorganization, or sale of our business.

If European or UK data protection law applies, our legal basis for processing depends on why we use the information:

• contract, when we need personal information to provide Cofounder;
• legitimate interests, to operate, secure, improve, and market Cofounder;
• legal obligations, when the law requires processing; and
• consent, when required.

You may withdraw consent at any time.

When Cofounder performs work for a customer, including through connected systems, it generates:

• logs;
• performance measures;
• error information;
• task status;
• user approvals and corrections; and
• usage and billing information.

We use this information to operate, secure, support, and bill for Cofounder.

What we use. We create deidentified information from operational information and from information customers submit to Cofounder. This includes prompts and instructions, outputs, feedback, and records of agent actions and tool use, such as agent trajectories and traces.

How we deidentify it. Before we use this information, we apply measures designed to remove direct identifiers and authentication secrets, so that it cannot reasonably identify an individual or customer. We do not use the following for these purposes:

• raw records or communications retrieved from connected systems;
• personal information about customers' end users, prospects, employees, or other third parties;
• payment, financial, or identity-verification records;
• passwords, tokens, or other secrets; or
• regulated or highly sensitive data.

We maintain the information only in deidentified form, and we maintain safeguards against reidentification. We do not attempt to reidentify it, except to test those safeguards or as permitted by law.

How we use it. We use deidentified information for analytics, research, benchmarking, security, product improvement, and to develop, train, and evaluate AI models and agents.

Licensing to AI labs and partners. We may license or otherwise provide deidentified information, including deidentified agent traces, to AI research labs, model developers, and other partners, for their use in training, evaluating, and improving AI models. Before receiving it, each recipient must agree in writing:

• not to reidentify, or attempt to reidentify, any individual or customer;
• to keep and use the information only in deidentified form; and
• to impose the same restrictions on anyone it shares the information with.

We do not tell recipients which customer the information came from.

Who this applies to. This applies to all Cofounder accounts and plans. There is no setting to opt out of it. If your organization has a signed agreement with us that says otherwise, that agreement controls. Because this information is deidentified, it is not personal information, and providing it to partners is not a sale or sharing of personal information.

Cofounder uses AI models, including models provided by third parties, to perform tasks and generate content for customers. Information customers submit or connect may be sent to those providers as needed to provide the requested feature. We require those providers to process the information only to provide services to us, and not to use it to train their general-purpose models.

To protect customers, recipients, and our providers, we automatically screen outbound communications, published content, and certain agent actions for spam, fraud, prohibited content, and security risks. This screening uses AI models. Where practical, we remove credentials and other sensitive values before screening. Content that is blocked is not sent.

We may share personal information with:

• Service providers. We share information with providers that support hosting, AI functionality, analytics, authentication, security, communications, customer support, billing, and other operations.
• Analytics and advertising providers. We share identifiers and activity information with providers such as Google and Meta for analytics, attribution, conversion measurement, and advertising.
• Customer administrators and connected services. Customer administrators may receive information needed to manage the account or workspace you use. We may also share information with a connected service when you or an administrator authorizes the connection.
• Professional advisers, authorities, and other parties. We may share information with lawyers, accountants, auditors, insurers, consultants, government authorities, or other parties when reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, investigate misconduct, or enforce our agreements.
• Business transaction recipients. We may share information with counterparties and advisers in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of our business.

We may also share information at your direction or with your consent. We may share aggregated or deidentified information that does not reasonably identify an individual or customer, including with AI labs and partners as described above.

We do not sell personal information for money. We may disclose identifiers and activity information to analytics and advertising providers. Depending on applicable law, these disclosures may be considered a sale, sharing, or targeted advertising. Where required, we provide a way to opt out, and we honor legally recognized opt-out preference signals.

If you provide a mobile number and opt in, we may send you text messages about your account and Cofounder. Message frequency varies, and message and data rates may apply. Reply STOP to opt out, or HELP for help.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We share text-messaging opt-in data and consent only with service providers that deliver messages for us.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. Retention varies by the type of information:

• Account and customer relationship information. We generally keep this information while the account or relationship remains active.
  • If you or your administrator ask us to delete an account or workspace, we delete it from our active systems within 7 days of the request.
  • Otherwise, after an account ends, we keep it for a 30-day export period and then delete it within 7 days. We keep limited records longer for security, legal, and audit purposes.
• Usage, security, fraud, and audit logs. We keep these logs for up to 2 years to operate and secure Cofounder, investigate incidents, prevent fraud, troubleshoot problems, and improve performance. We then delete or deidentify them.
• Billing, tax, and legal records. We keep these records for the periods required by law, and as reasonably necessary for accounting, disputes, and enforcement.
• Sales and marketing information. We keep this information while it remains relevant to our business relationship, or until you ask us to remove it or opt out, subject to applicable legal and suppression-list requirements.
• Support and other communications. We keep these communications for the duration of the matter and for a reasonable period afterward.
• Job application information. We keep this information during the hiring process and for the period permitted or required by applicable employment law.
• Backup copies. Our backups run on a rolling 7-day cycle. Deleted information is overwritten or deleted from backups within 7 days after it is deleted from our active systems.

We may retain deidentified information, and models or other artifacts derived from it, for as long as they are useful for analytics, research, security, product improvement, model training, and licensing as described above, provided the information cannot reasonably be linked to an individual or customer. Deleting an account does not delete deidentified information that has already been created.

Retention of information we process on behalf of customers is governed by our agreements with those customers.

We use administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, encryption, logging, credential management, service provider review, and incident response procedures.

No service is completely secure. You are responsible for protecting your credentials and following the security practices required by your company or account administrator.

• Account information. You may be able to review or update account information through Cofounder. Customer administrators may manage user access, roles, and workspace information.
• Deletion. You or your administrator can delete an account or workspace through account settings, or by emailing support@generalintelligencecompany.com. Deletion is completed within 7 days, as described above.
• Communications. You may opt out of marketing emails using the unsubscribe link or by contacting us. You may still receive transactional, security, billing, and service messages. You may withdraw consent to text messages by replying STOP, or by using the method described in the message or applicable settings.

Depending on where you live, and subject to legal exceptions, you may have the right to:

• know about and access the personal information we hold about you;
• correct inaccurate personal information;
• delete personal information;
• receive certain personal information in a portable format;
• restrict or object to certain processing, or withdraw consent;
• opt out of certain sale, sharing, targeted advertising, or profiling; and
• appeal a decision about a privacy request.

To exercise a right concerning information covered by this policy, contact us using the information below. We may verify your identity and authority before completing a request. We will not discriminate against you for exercising an applicable privacy right.

If your request concerns information submitted or connected to Cofounder by your employer or another organization, contact that organization directly. We may refer the request to that organization and assist it as required. You may also have the right to complain to a data protection authority where you live or work.

GIC is based in the United States. We and our service providers may process personal information in the United States and other countries, which may have different data protection laws. Where required, we use recognized transfer safeguards, such as standard contractual clauses.

Cofounder is not directed to children under 18, and we do not knowingly collect personal information from children through account registration.

Cofounder may link to or integrate with third-party websites, applications, and services. Those third parties process personal information under their own privacy notices.

We may update this policy to reflect changes in Cofounder, the law, or our practices. We will post the updated policy and revise the "Last Updated" date. If a change is material, we will provide additional notice as appropriate.

Questions or requests about this policy may be directed to:

GIC Technologies, Inc.
169 Madison Avenue, STE 15499
New York, NY 10016 USA
support@generalintelligencecompany.com