SOON Futures Insights Hub - Privacy Policy

Effective Date: February 2026 Last Updated: February 2026 Version: 1.0

---

Our Commitment to Privacy

SOON Futures ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SOON Futures Insights Hub platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the data practices described in this policy.

---

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Information Sharing and Disclosure
4. Third-Party Services and Subprocessors
5. AI Processing and Generated Content
6. Cookies and Tracking Technologies
7. Data Retention
8. Data Security
9. International Data Transfers
10. Your Privacy Rights
11. Children's Privacy
12. Changes to This Policy
13. Contact Us

---

1. Information We Collect

We collect information in several ways:

1.1 Information You Provide Directly

Account Information:

• Name
• Email address
• Password (encrypted)
• Organization/company name
• Job title or role

Business Profile Information:

• Company description and summary
• Industry and sector information
• Strategic goals and priorities
• Products and services
• Target audience descriptions
• Key competitors
• Financial posture information
• Distribution channels
• Challenges and opportunities

Research Configuration:

• Research context names and descriptions
• Industry focus areas
• Monitoring priorities
• Competitor lists for tracking

Communications:

• Support requests and correspondence
• Feedback and suggestions
• Chat interactions with the Copilot AI

1.2 Information Collected Automatically

Session and Usage Data:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited within the Service
• Time and date of visits
• Time spent on pages
• Clickstream data
• Session identifiers

Technical Data:

• User agent strings
• Screen resolution
• Language preferences
• Referring URLs

1.3 Information from Third Parties

Authentication Providers:

• If you sign in via third-party authentication, we may receive basic profile information

Payment Processors:

• Subscription status and tier
• Payment success/failure status
• Customer identifier (we do not receive full payment card details)

---

2. How We Use Your Information

We use your information for the following purposes:

2.1 Providing the Service

• Creating and managing your account
• Processing subscriptions and payments
• Delivering AI-generated strategic intelligence
• Personalizing research contexts and outputs
• Enabling collaboration features
• Providing customer support

2.2 AI Processing

• Training AI agents with your business context to provide relevant insights
• Generating personalized signals, trends, and opportunities
• Powering the Copilot chat assistant with context about your organization
• Improving the relevance of competitive intelligence

Important: Your specific business data (company profile, research contexts) is used to personalize AI outputs for your account. We do not use your proprietary business information to train general AI models or provide insights to other customers.

2.3 Shared Intelligence Pool

IMPORTANT: The platform operates a collective intelligence model.

Research generated through the Service contributes to a shared intelligence pool. Please understand how this works:

What Is Shared With Other Users

The following AI-generated research outputs are contributed to a shared pool accessible by all platform users:

Key Points:

• Shared intelligence is anonymized and does not identify you or your organization
• Other users cannot see which signals or trends originated from your research activity
• You benefit from intelligence discovered by other users' research activity
• This collective model enables broader coverage than any single organization could achieve

What Remains Private

The following data is never shared with other users:

Your Consent to Sharing

By using the Service, you consent to:

• Contributing anonymized research outputs to the shared intelligence pool
• Accessing shared intelligence that includes contributions from other users

If you do not consent to this collective intelligence model, please do not use the Service.

2.4 Analytics and Improvement

• Understanding how users interact with the Service
• Identifying usage patterns and popular features
• Improving Service functionality and user experience
• Developing new features
• Troubleshooting technical issues

2.5 Communications

• Sending service-related notifications
• Providing customer support responses
• Sending product updates and announcements
• Marketing communications (with your consent where required)

2.6 Security and Compliance

• Detecting and preventing fraud
• Enforcing our Terms of Service
• Complying with legal obligations
• Protecting our rights and property

---

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

3.2 Legal Requirements

We may disclose information if required by law or in response to:

• Court orders or legal process
• Government or regulatory requests
• Law enforcement investigations
• Protection of our legal rights

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

3.4 With Your Consent

We may share information for other purposes with your explicit consent.

3.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or other purposes.

3.6 Shared Intelligence Pool

As described in Section 2.3, the Service operates a collective intelligence model:

What We Share (Anonymized):

• Sources, Signals, and Trends are contributed to a shared pool
• This shared intelligence does not contain your personal information
• Other users cannot identify you as the source of any shared intelligence

What We Never Share:

• Your client profile and business information
• Your research context configurations
• Opportunities, threats, and competitive intelligence generated for you
• Your projects, decks, and Copilot conversations
• Any data that could identify you or your organization

This sharing is integral to the Service's collective intelligence model and cannot be opted out of while using the Service.

---

4. Third-Party Services and Subprocessors

The Service integrates with and relies on third-party services:

4.1 Core Infrastructure

4.2 AI Model Providers

Note on AI Processing: When you use the Service, your queries and business context may be processed by third-party AI providers to generate responses. These providers have their own data handling practices. We select providers with appropriate privacy commitments, but we encourage you to review their policies.

4.3 Analytics and Monitoring

4.4 Subprocessor Updates

We maintain a current list of subprocessors. Material changes to subprocessors will be communicated to customers who have requested notification.

---

5. AI Processing and Generated Content

5.1 How AI Processes Your Data

The Service uses AI systems that process:

• Your business profile information
• Research context configurations
• Your queries to the Copilot
• Historical interactions for context

This processing generates:

• Signals and trend analysis
• Strategic opportunities and threats
• Competitive intelligence
• Chat responses and recommendations

5.2 AI Data Handling

What we DO:

• Use your business context to personalize AI outputs
• Process queries through AI models to generate responses
• Store AI-generated outputs in your account

What we DO NOT do:

• Share your proprietary data with other customers
• Use your data to train general-purpose AI models for third parties
• Allow AI providers to use your data to improve their general models (where contractually possible)

5.3 AI Model Provider Terms

Our agreements with AI providers include data protection terms. However, you should be aware that:

• Data is transmitted to third-party AI systems for processing
• AI providers may have logging and security practices outside our control
• AI processing occurs in data centers operated by the providers

5.4 Opting Out of AI Processing

The core Service depends on AI processing. If you do not consent to AI processing of your data, you should not use the Service.

---

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

Essential Cookies:

• Authentication and session management
• Security features
• User preferences

Analytics Cookies:

• Usage patterns and feature adoption
• Performance monitoring
• Error tracking

6.2 Session Tracking

We track user sessions to:

• Maintain logged-in state
• Understand usage patterns
• Improve user experience
• Provide analytics to your organization

Session data collected includes:

• Session start and end times
• Pages visited
• Time spent on each page
• Actions taken

6.3 IP Address Collection

We collect your IP address when you access the Service for:

• Security and fraud prevention
• Geographic analytics
• Compliance with legal requirements

6.4 Managing Cookies

Most browsers allow you to control cookies through settings. However, disabling certain cookies may affect Service functionality.

---

7. Data Retention

7.1 Retention Periods

7.2 Post-Termination

When you terminate your account:

• Active access is immediately revoked
• Most data is deleted within 30 days
• Some data may be retained longer for legal compliance
• Aggregated/anonymized data may be retained indefinitely

7.3 Data Deletion Requests

You may request deletion of your data (see Section 10). We will honor such requests except where retention is required for:

• Legal compliance
• Dispute resolution
• Fraud prevention

---

8. Data Security

8.1 Security Measures

We implement technical and organizational measures to protect your data:

Technical Measures:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest
• Access controls and authentication
• Regular security assessments
• Intrusion detection systems
• Secure development practices

Organizational Measures:

• Employee access restrictions
• Security awareness training
• Incident response procedures
• Vendor security assessments

8.2 Data Breach Response

In the event of a data breach that may affect your personal information:

• We will investigate and contain the breach
• We will notify you within 72 hours where required by law
• We will notify relevant regulatory authorities as required
• We will provide information about steps you can take

8.3 Limitations

No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. You are responsible for:

• Maintaining the security of your account credentials
• Using secure networks when accessing the Service
• Reporting any suspected security issues promptly

---

9. International Data Transfers

9.1 Data Locations

Your data may be processed in:

• United States
• European Union
• Other locations where our service providers operate

9.2 Transfer Mechanisms

For transfers from the EEA/UK to other countries, we rely on:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Binding Corporate Rules where available
• Derogations where no other mechanism is available

9.3 Your Consent

By using the Service, you consent to the transfer of your data to the United States and other countries which may have different data protection laws than your country of residence.

---

10. Your Privacy Rights

10.1 Rights for All Users

Regardless of your location, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw previously given consent

10.2 Additional Rights for EEA/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom:

• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request restriction of processing
• Right to Portability: Receive your data in a portable format
• Right to Object to Automated Processing: Object to decisions based solely on automated processing
• Right to Lodge a Complaint: File a complaint with your supervisory authority

Legal Basis for Processing:

• Contract performance (providing the Service)
• Legitimate interests (analytics, security, improvement)
• Legal obligations (compliance, fraud prevention)
• Consent (marketing communications)

10.3 Additional Rights for California Residents (CCPA)

If you are a California resident, you have the right to:

• Know: What personal information we collect, use, and disclose
• Delete: Request deletion of your personal information
• Opt-Out of Sale: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Personal Information Collected:

• Identifiers (name, email, IP address)
• Commercial information (subscription data)
• Internet activity (usage data)
• Professional information (job title, company)
• Inferences (AI-generated insights about your business)

10.4 Exercising Your Rights

To exercise your rights, contact us at:

• Email: privacy@soonfutures.com
• Mail: Sydney, NSW, Australia

We will respond within:

• 30 days for GDPR requests
• 45 days for CCPA requests (extendable by 45 days with notice)

We may verify your identity before processing requests.

10.5 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority.

---

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date
• For material changes, we will provide notice via email or prominent notice in the Service
• Your continued use after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically.

---

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

Privacy Inquiries: Email: privacy@soonfutures.com

Data Protection Officer (if applicable): Email: dpo@soonfutures.com

Mailing Address: SOON Futures Attn: Privacy Team Sydney, NSW, Australia

For EEA/UK Representatives: Not applicable at this time.

---

Appendix A: Cookie Details

Essential Cookies

Analytics Cookies

Third-Party Cookies

Third-party services may set their own cookies. Please refer to their privacy policies for details.

---

Appendix B: Data Subject Access Request Form

To submit a privacy rights request, please provide:

1. Your Information:

   • Full name
   • Email address associated with your account
   • Company name (if applicable)

2. Request Type:

   • Access my data
   • Correct my data
   • Delete my data
   • Restrict processing
   • Data portability
   • Object to processing
   • Other: _______________

3. Details:

   • Specific data or processing you are concerned about
   • Any additional context

4. Verification:

   • We may contact you to verify your identity before processing

Submit to: privacy@soonfutures.com

---

Appendix C: California Privacy Notice

For California Residents Under CCPA

Categories of Information Collected in the Last 12 Months

Business Purposes for Collection

• Providing and maintaining the Service
• Processing transactions
• Customer support
• Analytics and improvement
• Security and fraud prevention

Disclosure and Sale

• Sold: We do not sell personal information
• Disclosed for Business Purposes: To service providers listed in Section 4

Your Rights

See Section 10.3 for details on your California privacy rights.

---

Last Updated: February 2026 Version: 1.0

---

End of Privacy Policy