Privacy Policy

1. Introduction

1.1 About This Policy

This Privacy Policy explains how Gray Whale Inc ("Gray Whale," "we," "us," or "our"), a Delaware C corporation, collects, uses, discloses, and safeguards your information when you visit our website or use our services.

We respect your privacy and are committed to protecting your personal information. Please read this policy carefully.

1.2 Changes to This Policy

We reserve the right to change this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where required by law, providing more prominent notice.

1.3 Children's Privacy

We do not knowingly collect personal information from children under 16. If you believe your child has provided us with personal information, contact us at privacy@graywhale.ai and we will delete it promptly.

2. What We Collect

2.1 Information You Provide

We may collect information you voluntarily provide when you:

• Register on our Website or request early access
• Subscribe to our newsletter or communications
• Contact our customer service or provide feedback
• Apply for employment opportunities

This may include your name, email address, and professional information.

2.2 Behavioral Data We Collect Automatically

When you use our services, we collect behavioral signals to power our Large Interaction Model (LIM). This includes:

• Linger time: How long you view specific content items
• Engagement signals: Favorites, likes, skips, and clicks
• Session data: A randomly generated session ID (not linked to your identity by default)
• Search prompts: Text queries you submit within the demo experience

This behavioral data is used exclusively to personalize your experience within the LIM. It is not sold, shared with advertisers, or transmitted to third-party AI providers.

2.3 Technical Information

We may automatically collect technical information such as your IP address, browser type, time zone, and operating system for security and performance purposes.

2.4 Cookies

We use a single persistent cookie ("gw-visitor") to maintain a visitor identifier across sessions. This enables the LIM to remember your preferences across visits. You can clear this cookie at any time through your browser settings.

3. How We Use Your Information

We use collected information to:

• Provide and improve our LIM services
• Personalize your experience based on behavioral signals
• Communicate with you about our services (with your consent)
• Ensure security and prevent fraud
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We do not share your behavioral data or queries with third-party AI providers. All AI inference runs on Gray Whale's own infrastructure.

We may share your information only:

• With service providers who assist in operating our infrastructure (under strict data processing agreements)
• When required by law or to protect Gray Whale's legal rights
• In connection with a merger, acquisition, or sale of assets (with notice to you)

5. Data Retention

We retain behavioral session data for up to 90 days to power the LIM's learning cycle. Account information is retained until you request deletion. You may request deletion of your data at any time by contacting privacy@graywhale.ai.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of certain data uses
• Data portability

To exercise these rights, contact us at privacy@graywhale.ai. We will respond within 30 days.

7. CCPA (California Residents)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To submit a CCPA request, contact privacy@graywhale.ai.

8. Security

We implement industry-standard security measures to protect your information, including HMAC-signed API requests, encrypted data transmission (TLS), and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. International Transfers

Gray Whale is based in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers.

10. Contact Us

For privacy questions or to exercise your rights, contact us at privacy@graywhale.ai or write to:

Gray Whale Inc
Attn: Privacy
San Francisco, CA