Privacy Policy
Last updated: August 4, 2026
1. Scope
This Platform Privacy Notice explains how Marly AI Inc., doing business as Inference Capital ("Inference Capital," "IC," "we," "us," or "our"), handles personal information collected through the Inference Capital client-facing platform at app.inferencecapital.ai and Inference Capital-hosted shared-report links (collectively, the "Platform").
The Platform primarily provides authorized users with access to research, portfolio monitoring, dashboards, reports, exports, and other work product produced by IC ("Platform Content"). The Platform is not generally used to collect the customer documents, portfolio data, or other source materials from which IC produces Platform Content. IC collects and processes those materials through its internal systems under the applicable customer agreement, source permission, and confidentiality terms.
This Notice applies to personal information associated with Platform accounts, access, and use. It does not replace a customer agreement, data processing agreement, or other written agreement with IC. Where an agreement governs particular information or provides different or more specific terms, that agreement controls for the information it covers.
This Notice does not apply to IC's internal employee systems or to information collected through websites that do not link to this Notice.
2. Information We Collect Through the Platform
We may collect the following categories of personal information:
Account and organization information: name, business email address, organization, role or title, account identifier, and other information used to create or administer a Platform account.
Authentication and security information: identity-provider information, sign-in and sign-out events, session identifiers and tokens, authentication status, IP address, browser and device information, and records used to detect, investigate, or prevent unauthorized access.
Platform interaction information: pages and reports opened, sections viewed, searches, downloads, export activity, meeting requests, time spent, timestamps, referring pages, and other interactions used to operate, secure, support, and understand use of the Platform.
Shared-report information: name, business email address, shared-link identifier, access status, and activity associated with an Inference Capital-hosted shared report.
Communications: information a user chooses to provide in a meeting request, support request, feedback message, or other communication with IC.
Agreement and acceptance records: the version of applicable Platform terms or notices accepted, acceptance timestamp, IP address, user agent, and related records needed to document the acceptance.
The Platform is not intended for users to submit personal consumer information, sensitive personal information, or underlying customer portfolio materials unless IC has expressly authorized the submission method and the applicable customer agreement permits it.
3. Sources of Information
We collect Platform personal information:
directly from users;
from the organization that authorizes or administers a user's access;
from an identity provider used to authenticate the user;
automatically when a user accesses or interacts with the Platform; and
from IC personnel who administer accounts, access, reports, or customer relationships.
4. How We Use Platform Personal Information
We use Platform personal information to:
provide, maintain, and administer the Platform;
authenticate users and enforce organization, report, and mandate access;
secure the Platform and detect, investigate, and respond to misuse, fraud, and security events;
provide support and respond to requests;
deliver service, account, security, and legal notices;
understand Platform use and improve reliability, performance, usability, and customer service;
document acceptance of Platform terms and enforce our agreements; and
comply with applicable law and protect the rights, safety, and property of IC, our customers, users, and others.
We do not use Platform personal information for advertising, and we do not use it to make solely automated decisions that produce legal or similarly significant effects about Platform users.
5. Legal Bases for Processing
Where the European Economic Area, United Kingdom, or another jurisdiction requires a legal basis, we process Platform personal information as applicable:
to perform a contract with a user or the organization the user represents, or to take requested steps before entering into a contract;
for IC's legitimate interests in providing a business-to-business Platform, administering customer relationships, protecting confidential work product, improving the Platform, and maintaining security, provided those interests are not overridden by the user's rights;
with consent, where we ask for consent for a specific processing activity; and
to comply with legal obligations or establish, exercise, or defend legal claims.
When IC processes personal information contained in customer materials on behalf of a customer, the customer generally determines the purposes of that processing and IC processes the information under the applicable customer agreement and instructions. Requests concerning that information may need to be directed to the relevant customer.
6. Cookies, Local Storage, and Product Analytics
The Platform uses cookies and similar browser storage that are necessary to authenticate users, maintain secure sessions, administer shared-report access, remember user preferences, and operate Platform features.
We also use product analytics to understand how authorized users interact with the Platform. Analytics may associate Platform events with a user and organization and may include report views, section views, downloads, time spent, meeting requests, and similar activity.
The Platform requires the necessary authentication, security, and session technologies described above to provide the affected Platform features.
7. How We Disclose Information
We may disclose Platform personal information:
Within an authorized organization: to the organization that sponsors or administers the account and its authorized administrators, where appropriate for account, access, security, or service administration.
To service providers: to providers that support hosting, storage, authentication, analytics, communications, support, security, and related Platform operations. They may process information only to provide services to IC and are subject to applicable contractual and confidentiality obligations.
For legal and safety purposes: when reasonably necessary to comply with law or legal process; enforce agreements; protect rights, safety, or property; or investigate fraud, misuse, or security events.
For a corporate transaction: in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.
Our current subprocessor and assurance information is available through trust.inferencecapital.ai, subject to any access restrictions shown there.
8. Google User Data
If a user signs in using Google, we request only the basic profile information, such as name and email address, required to authenticate the user and create or match the Platform account. We do not use Google user data for advertising, sell it, or disclose it except as described in this Notice or as necessary to provide and secure the Platform.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
9. Retention
We retain Platform personal information for the period reasonably necessary for the purpose for which it was collected, including to provide and secure the Platform, administer the customer relationship, document acceptance of terms, comply with law, resolve disputes, and enforce agreements.
Retention depends on the category and context. Account and access information is generally retained while the account or customer relationship is active and for an appropriate period afterward. Security, audit, acceptance, shared-link, support, and analytics records are retained according to the applicable operational, contractual, security, and legal requirements. We delete or de-identify personal information when it is no longer required, subject to backups and records that must be retained for legal, security, or contractual purposes.
Retention, return, export, deletion, and archival treatment for Platform Content and underlying customer materials are governed by the applicable customer agreement rather than this Notice.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect Platform personal information. Those safeguards include access controls, authentication, encryption in transit and at rest where appropriate, logging, and service-provider oversight. No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.
Additional information about our security and assurance program is available through trust.inferencecapital.ai.
11. International Processing and Transfers
IC is based in the United States, and the Platform and its service providers may process personal information in the United States and other countries where IC or its providers operate. Those countries may have different data-protection laws from the user's country.
Where required by applicable law, we use recognized safeguards for international transfers, which may include contractual protections, transfer assessments, or transfers to countries recognized as providing an adequate level of protection.
12. Privacy Rights and Choices
Depending on location and applicable law, a user may have the right to request access to, correction of, deletion of, restriction of, or portability of personal information; object to certain processing; or withdraw consent where processing is based on consent. A user may also have the right to lodge a complaint with a data-protection authority.
To make a request, contact us using the information below. We may need to verify the request and may direct the user to the organization that administers the account or controls the relevant information. Rights may be limited by applicable law and by legitimate requirements to preserve security, legal, contractual, or audit records.
13. Business-to-Business Service
The Platform is intended for business and professional users and is not directed to children. We do not knowingly collect personal information through the Platform from anyone under 18.
14. Changes to This Notice
We may update this Notice to reflect changes in the Platform, our practices, or applicable law. If we make a material change, we will take reasonable steps to provide notice through the Platform, by email, or by another appropriate method. The date at the top identifies the latest revision.
15. Contact
For questions about this Notice or requests concerning Platform personal information, contact:
Marly AI Inc. d/b/a Inference Capital