Privacy Policy

Actionable ML Inc.
Effective Date: May 1, 2026

1. Introduction

Actionable ML Inc. (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website actionableml.com, purchase consulting or subscription services, or use our hosted artificial intelligence (AI) chatbot and agentic workflow services (collectively, the “Services”). By using our Site or Services, you agree to the terms of this Privacy Policy.

2. Scope

This Privacy Policy applies to all personal data collected by Actionable ML Inc. from users in the United States and Canada. It covers individual and business users of our Agentic AI as a Service platform, Smart Agentic Assistants, and Strategic AI Consulting services.

For Strategic AI Consulting engagements, data handling, confidentiality, and processing obligations specific to that engagement are governed by the applicable Statement of Work (SOW) or Master Services Agreement (MSA). This Privacy Policy applies as a baseline; the individual contract governs in the event of any conflict regarding consulting-specific data.

3. Data Roles

Actionable ML Inc. acts as a Data Processor for hosted AI workflows and chatbots. Customers who deploy these services act as Data Controllers and are responsible for ensuring their data collection and use complies with all applicable privacy laws, including obtaining any required end-user consents.

For Agentic AI as a Service customers specifically, the nature and content of data processed through customer-configured flows is determined entirely by the customer. Actionable ML processes that data solely to operate and maintain the service and exercises no control over what data the customer chooses to route through their flows.

4. Personal Data We Collect

We collect only the information necessary to provide and improve our Services. This may include:

• Account and contact details: name, email address, phone number, billing address.
• Payment information: processed securely through third-party payment processors; we do not store full payment card data.
• Hosted service operational data: for Agentic AI as a Service and Smart Agentic Assistants, data that passes through customer-configured flows or chatbot interactions, including prompts, responses, and associated logs, as directed by and on behalf of the customer.
• Log and usage data: device information, IP address, browser type, and usage activity on our Site.
• Optional integration data: information received from third-party systems you connect to our Services.

We do not intentionally collect sensitive personal information (such as health, financial account, or government ID data) through our platform or website. Customers who route sensitive data through agentic flows do so as Data Controllers and are responsible for ensuring lawful basis for that processing.

5. How We Collect Personal Data

We collect data in the following ways:

• Directly from you when you create an account, contact us, or subscribe to a service.
• Automatically through your use of the Site or hosted services (such as through cookies or analytics tools).
• From customers who use our hosted platform and route their own datasets, inputs, or integrations through our infrastructure.

6. How We Use Personal Data

We use the data we collect for the following purposes:

• To provide, operate, and improve our Services.
• To manage user accounts and process payments.
• To host, process, and transmit agentic flows and chatbot interactions on behalf of customers.
• To maintain security, detect fraud, and ensure compliance with legal obligations.
• To analyze usage and performance of our Services.
• To communicate with you regarding updates, maintenance, or policy changes.

We do not sell your personal data to third parties. We do not use Customer Data to train AI models or for purposes unrelated to service delivery without explicit consent.

7. AI-Generated Content Disclaimer

Our AI-enabled chatbots and agentic flows generate outputs automatically based on user input and existing data patterns. While we strive for accuracy, outputs may be incomplete, outdated, or incorrect. These services are provided for operational and informational purposes only and should not be relied upon for decision-making in legal, medical, financial, or other professional contexts. Users are encouraged to verify information independently.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience and analyze site usage. Cookies may store user preferences or session details. You may disable cookies in your browser settings, but this may limit certain features of the Site.

We may use third-party analytics tools to help understand usage patterns in aggregate, without identifying individual users. Our Site does not track users across third-party websites and does not respond to Do Not Track (DNT) signals from browsers.

9. Sharing and Disclosure of Data

We may share personal data only as necessary to provide our Services or comply with the law. Recipients may include:

• Employees and contractors who require access for operational purposes.
• Third-party service providers in the following categories: cloud infrastructure and hosting providers; large language model (LLM) and AI model providers; payment processors; security and monitoring tools; and business operations software. These providers are contractually required to handle data securely and only for the purposes of service delivery.
• Legal authorities when required by law, legal process, or to protect our rights or safety.

Because the technology landscape for agentic AI evolves rapidly, the specific providers we rely on may change. A current list of material sub-processors is available upon written request. We do not sell or rent user data to third parties.

10. Data Storage and Cross-Border Transfers

All data is stored on secure servers located in the United States and may be accessed by authorized personnel or service providers in other jurisdictions. By using our Services, you consent to the transfer, storage, and processing of your data in the United States and other locations as necessary to operate the Services. We ensure appropriate contractual and technical safeguards are in place for such transfers.

11. Data Retention

We retain personal and hosted service data for as long as necessary to fulfill contractual obligations and provide the Services. Specifically:

• Customer data from hosted agentic flows and chatbots is retained for the duration of the subscription and deleted within 30 days after termination, unless longer retention is required by law or requested by the customer.
• Technical and security logs may be retained for up to 90 days for security and optimization purposes.
• Account and billing data is retained for the period required by applicable tax and financial record-keeping laws.

12. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, loss, or alteration. These include encryption for data at rest and in transit, access controls, and secure data storage. Because agentic flows integrate with external third-party APIs, users acknowledge that data security beyond our internal infrastructure is a shared responsibility. While we take strong precautions, no system is completely secure.

13. User Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent where processing is based on consent.
• Request a portable copy of your data.
• Object to or restrict processing in certain circumstances.

To exercise any of these rights, please contact our Privacy Officer at the address provided in Section 17. We will respond within applicable legal timeframes. Note that some rights may be subject to limitations under applicable law.

14. Children’s Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child without appropriate parental consent, we will delete it promptly. If you believe we may have collected data from a child, please contact us at privacy@actionableml.com.

15. Updates to This Policy

We may modify this Privacy Policy periodically to reflect legal, technical, or business changes. For material changes — those that meaningfully affect how data is used or your rights — we will notify registered users by email at least 30 days before the change takes effect. Non-material updates will be reflected by a revised Effective Date at the top of this page. Continued use of the Services after the effective date of any update constitutes acceptance of the revised Policy.

16. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact our Privacy Officer:

Actionable ML Inc.
Email: privacy@actionableml.com
Phone: (206) 457-3144
Mailing Address: 12819 SE 38th Street, #399, Bellevue, WA 98006