--- title: "Privacy Policy | SOON" description: "How SOON collects, uses, and protects your data. Read the SOON privacy policy covering data handling, security, and your rights." url: "https://soon.com.au/privacy" --- # SOON Futures Insights Hub - Privacy Policy **Effective Date:** February 2026 **Last Updated:** February 2026 **Version:** 1.0 --- ## Our Commitment to Privacy SOON Futures ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SOON Futures Insights Hub platform ("Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the data practices described in this policy. --- ## Table of Contents 1. [Information We Collect](https://soon.com.au/privacy#1-information-we-collect) 2. [How We Use Your Information](https://soon.com.au/privacy#2-how-we-use-your-information) 3. [Information Sharing and Disclosure](https://soon.com.au/privacy#3-information-sharing-and-disclosure) 4. [Third-Party Services and Subprocessors](https://soon.com.au/privacy#4-third-party-services-and-subprocessors) 5. [AI Processing and Generated Content](https://soon.com.au/privacy#5-ai-processing-and-generated-content) 6. [Cookies and Tracking Technologies](https://soon.com.au/privacy#6-cookies-and-tracking-technologies) 7. [Data Retention](https://soon.com.au/privacy#7-data-retention) 8. [Data Security](https://soon.com.au/privacy#8-data-security) 9. [International Data Transfers](https://soon.com.au/privacy#9-international-data-transfers) 10. [Your Privacy Rights](https://soon.com.au/privacy#10-your-privacy-rights) 11. [Children's Privacy](https://soon.com.au/privacy#11-childrens-privacy) 12. [Changes to This Policy](https://soon.com.au/privacy#12-changes-to-this-policy) 13. [Contact Us](https://soon.com.au/privacy#13-contact-us) --- ## 1. Information We Collect We collect information in several ways: ### 1.1 Information You Provide Directly **Account Information:** - Name - Email address - Password (encrypted) - Organization/company name - Job title or role **Business Profile Information:** - Company description and summary - Industry and sector information - Strategic goals and priorities - Products and services - Target audience descriptions - Key competitors - Financial posture information - Distribution channels - Challenges and opportunities **Research Configuration:** - Research context names and descriptions - Industry focus areas - Monitoring priorities - Competitor lists for tracking **Communications:** - Support requests and correspondence - Feedback and suggestions - Chat interactions with the Copilot AI ### 1.2 Information Collected Automatically **Session and Usage Data:** - IP address - Browser type and version - Device type and operating system - Pages visited within the Service - Time and date of visits - Time spent on pages - Clickstream data - Session identifiers **Technical Data:** - User agent strings - Screen resolution - Language preferences - Referring URLs ### 1.3 Information from Third Parties **Authentication Providers:** - If you sign in via third-party authentication, we may receive basic profile information **Payment Processors:** - Subscription status and tier - Payment success/failure status - Customer identifier (we do not receive full payment card details) --- ## 2. How We Use Your Information We use your information for the following purposes: ### 2.1 Providing the Service - Creating and managing your account - Processing subscriptions and payments - Delivering AI-generated strategic intelligence - Personalizing research contexts and outputs - Enabling collaboration features - Providing customer support ### 2.2 AI Processing - Training AI agents with your business context to provide relevant insights - Generating personalized signals, trends, and opportunities - Powering the Copilot chat assistant with context about your organization - Improving the relevance of competitive intelligence **Important:** Your specific business data (company profile, research contexts) is used to personalize AI outputs for your account. We do not use your proprietary business information to train general AI models or provide insights to other customers. ### 2.3 Shared Intelligence Pool **IMPORTANT: The platform operates a collective intelligence model.** Research generated through the Service contributes to a shared intelligence pool. Please understand how this works: #### What Is Shared With Other Users The following AI-generated research outputs are contributed to a shared pool accessible by all platform users: | Shared Data | Description | Contains Your Info? | | --- | --- | --- | | **Sources** | Web sources and data feeds discovered | No | | **Signals** | Early indicators of change | No | | **Trends** | Patterns synthesized from signals | No | **Key Points:** - Shared intelligence is **anonymized** and does not identify you or your organization - Other users cannot see which signals or trends originated from your research activity - You benefit from intelligence discovered by other users' research activity - This collective model enables broader coverage than any single organization could achieve #### What Remains Private The following data is **never shared** with other users: | Private Data | Description | | --- | --- | | **Client Profile** | Your company information and business context | | **Research Contexts** | Your configured research parameters | | **Opportunities** | Strategic opportunities identified for you | | **Threats** | Risks identified for your organization | | **Competitors** | Companies you track | | **Competitive Intelligence** | Your competitive analysis | | **Projects & Decks** | Your organizational content | | **Copilot Conversations** | Your AI assistant interactions | #### Your Consent to Sharing By using the Service, you consent to: - Contributing anonymized research outputs to the shared intelligence pool - Accessing shared intelligence that includes contributions from other users If you do not consent to this collective intelligence model, please do not use the Service. ### 2.4 Analytics and Improvement - Understanding how users interact with the Service - Identifying usage patterns and popular features - Improving Service functionality and user experience - Developing new features - Troubleshooting technical issues ### 2.5 Communications - Sending service-related notifications - Providing customer support responses - Sending product updates and announcements - Marketing communications (with your consent where required) ### 2.6 Security and Compliance - Detecting and preventing fraud - Enforcing our Terms of Service - Complying with legal obligations - Protecting our rights and property --- ## 3. Information Sharing and Disclosure We do not sell your personal information. We may share information in the following circumstances: ### 3.1 Service Providers We share information with third-party service providers who perform services on our behalf: | Provider Type | Purpose | Data Shared | | --- | --- | --- | | Cloud hosting | Infrastructure | All service data | | Payment processing | Billing | Payment-related data | | AI model providers | Intelligence generation | Business context, queries | | Analytics | Usage analysis | Usage data, anonymized | | Customer support | Support tickets | Account and communication data | ### 3.2 Legal Requirements We may disclose information if required by law or in response to: - Court orders or legal process - Government or regulatory requests - Law enforcement investigations - Protection of our legal rights ### 3.3 Business Transfers In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change. ### 3.4 With Your Consent We may share information for other purposes with your explicit consent. ### 3.5 Aggregated or De-identified Data We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or other purposes. ### 3.6 Shared Intelligence Pool As described in Section 2.3, the Service operates a collective intelligence model: **What We Share (Anonymized):** - Sources, Signals, and Trends are contributed to a shared pool - This shared intelligence does not contain your personal information - Other users cannot identify you as the source of any shared intelligence **What We Never Share:** - Your client profile and business information - Your research context configurations - Opportunities, threats, and competitive intelligence generated for you - Your projects, decks, and Copilot conversations - Any data that could identify you or your organization This sharing is integral to the Service's collective intelligence model and cannot be opted out of while using the Service. --- ## 4. Third-Party Services and Subprocessors The Service integrates with and relies on third-party services: ### 4.1 Core Infrastructure | Service | Provider | Purpose | Privacy Policy | | --- | --- | --- | --- | | Supabase | Supabase Inc. | Database, authentication, edge functions | [supabase.com/privacy](https://supabase.com/privacy) | | Neo4j AuraDB | Neo4j Inc. | Graph database | [neo4j.com/privacy](https://neo4j.com/privacy) | | Stripe | Stripe Inc. | Payment processing | [stripe.com/privacy](https://stripe.com/privacy) | ### 4.2 AI Model Providers | Service | Provider | Purpose | Privacy Policy | | --- | --- | --- | --- | | Gemini | Google LLC | AI intelligence generation | [policies.google.com/privacy](https://policies.google.com/privacy) | | GPT Models | OpenAI LLC | AI intelligence generation, embeddings | [openai.com/privacy](https://openai.com/privacy) | **Note on AI Processing:** When you use the Service, your queries and business context may be processed by third-party AI providers to generate responses. These providers have their own data handling practices. We select providers with appropriate privacy commitments, but we encourage you to review their policies. ### 4.3 Analytics and Monitoring | Service | Provider | Purpose | Privacy Policy | | --- | --- | --- | --- | | IP Geolocation | ipify | IP address detection | [ipify.org](https://www.ipify.org/) | ### 4.4 Subprocessor Updates We maintain a current list of subprocessors. Material changes to subprocessors will be communicated to customers who have requested notification. --- ## 5. AI Processing and Generated Content ### 5.1 How AI Processes Your Data The Service uses AI systems that process: - Your business profile information - Research context configurations - Your queries to the Copilot - Historical interactions for context This processing generates: - Signals and trend analysis - Strategic opportunities and threats - Competitive intelligence - Chat responses and recommendations ### 5.2 AI Data Handling **What we DO:** - Use your business context to personalize AI outputs - Process queries through AI models to generate responses - Store AI-generated outputs in your account **What we DO NOT do:** - Share your proprietary data with other customers - Use your data to train general-purpose AI models for third parties - Allow AI providers to use your data to improve their general models (where contractually possible) ### 5.3 AI Model Provider Terms Our agreements with AI providers include data protection terms. However, you should be aware that: - Data is transmitted to third-party AI systems for processing - AI providers may have logging and security practices outside our control - AI processing occurs in data centers operated by the providers ### 5.4 Opting Out of AI Processing The core Service depends on AI processing. If you do not consent to AI processing of your data, you should not use the Service. --- ## 6. Cookies and Tracking Technologies ### 6.1 Types of Cookies We Use **Essential Cookies:** - Authentication and session management - Security features - User preferences **Analytics Cookies:** - Usage patterns and feature adoption - Performance monitoring - Error tracking ### 6.2 Session Tracking We track user sessions to: - Maintain logged-in state - Understand usage patterns - Improve user experience - Provide analytics to your organization **Session data collected includes:** - Session start and end times - Pages visited - Time spent on each page - Actions taken ### 6.3 IP Address Collection We collect your IP address when you access the Service for: - Security and fraud prevention - Geographic analytics - Compliance with legal requirements ### 6.4 Managing Cookies Most browsers allow you to control cookies through settings. However, disabling certain cookies may affect Service functionality. --- ## 7. Data Retention ### 7.1 Retention Periods | Data Type | Retention Period | Rationale | | --- | --- | --- | | Account information | Duration of account + 3 years | Legal and business records | | Business profile data | Duration of account + 30 days | Service delivery | | AI-generated content | Duration of account + 30 days | Service delivery | | Session/usage data | 24 months | Analytics and improvement | | Support communications | 5 years | Legal and quality purposes | | Payment records | 7 years | Tax and legal compliance | ### 7.2 Post-Termination When you terminate your account: - Active access is immediately revoked - Most data is deleted within 30 days - Some data may be retained longer for legal compliance - Aggregated/anonymized data may be retained indefinitely ### 7.3 Data Deletion Requests You may request deletion of your data (see Section 10). We will honor such requests except where retention is required for: - Legal compliance - Dispute resolution - Fraud prevention --- ## 8. Data Security ### 8.1 Security Measures We implement technical and organizational measures to protect your data: **Technical Measures:** - Encryption in transit (TLS/HTTPS) - Encryption at rest - Access controls and authentication - Regular security assessments - Intrusion detection systems - Secure development practices **Organizational Measures:** - Employee access restrictions - Security awareness training - Incident response procedures - Vendor security assessments ### 8.2 Data Breach Response In the event of a data breach that may affect your personal information: - We will investigate and contain the breach - We will notify you within 72 hours where required by law - We will notify relevant regulatory authorities as required - We will provide information about steps you can take ### 8.3 Limitations No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. You are responsible for: - Maintaining the security of your account credentials - Using secure networks when accessing the Service - Reporting any suspected security issues promptly --- ## 9. International Data Transfers ### 9.1 Data Locations Your data may be processed in: - United States - European Union - Other locations where our service providers operate ### 9.2 Transfer Mechanisms For transfers from the EEA/UK to other countries, we rely on: - Standard Contractual Clauses (SCCs) - Adequacy decisions where applicable - Binding Corporate Rules where available - Derogations where no other mechanism is available ### 9.3 Your Consent By using the Service, you consent to the transfer of your data to the United States and other countries which may have different data protection laws than your country of residence. --- ## 10. Your Privacy Rights ### 10.1 Rights for All Users Regardless of your location, you have the right to: - **Access**: Request a copy of your personal data - **Correction**: Request correction of inaccurate data - **Deletion**: Request deletion of your data (subject to legal retention requirements) - **Objection**: Object to certain processing activities - **Withdraw Consent**: Withdraw previously given consent ### 10.2 Additional Rights for EEA/UK Residents (GDPR) If you are in the European Economic Area or United Kingdom: - **Right to Erasure**: Request deletion of your personal data - **Right to Restriction**: Request restriction of processing - **Right to Portability**: Receive your data in a portable format - **Right to Object to Automated Processing**: Object to decisions based solely on automated processing - **Right to Lodge a Complaint**: File a complaint with your supervisory authority **Legal Basis for Processing:** - Contract performance (providing the Service) - Legitimate interests (analytics, security, improvement) - Legal obligations (compliance, fraud prevention) - Consent (marketing communications) ### 10.3 Additional Rights for California Residents (CCPA) If you are a California resident, you have the right to: - **Know**: What personal information we collect, use, and disclose - **Delete**: Request deletion of your personal information - **Opt-Out of Sale**: We do not sell personal information - **Non-Discrimination**: We will not discriminate against you for exercising your rights **Categories of Personal Information Collected:** - Identifiers (name, email, IP address) - Commercial information (subscription data) - Internet activity (usage data) - Professional information (job title, company) - Inferences (AI-generated insights about your business) ### 10.4 Exercising Your Rights To exercise your rights, contact us at: - Email: [privacy@soonfutures.com](mailto:privacy@soonfutures.com) - Mail: Sydney, NSW, Australia We will respond within: - 30 days for GDPR requests - 45 days for CCPA requests (extendable by 45 days with notice) We may verify your identity before processing requests. ### 10.5 Authorized Agents You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority. --- ## 11. Children's Privacy The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us immediately. --- ## 12. Changes to This Policy We may update this Privacy Policy from time to time. When we make changes: - We will update the "Last Updated" date - For material changes, we will provide notice via email or prominent notice in the Service - Your continued use after changes constitutes acceptance We encourage you to review this Privacy Policy periodically. --- ## 13. Contact Us If you have questions about this Privacy Policy or our data practices: **Privacy Inquiries:** Email: [privacy@soonfutures.com](mailto:privacy@soonfutures.com) **Data Protection Officer (if applicable):** Email: [dpo@soonfutures.com](mailto:dpo@soonfutures.com) **Mailing Address:** SOON Futures Attn: Privacy Team Sydney, NSW, Australia **For EEA/UK Representatives:** Not applicable at this time. --- ## Appendix A: Cookie Details ### Essential Cookies | Cookie Name | Purpose | Duration | Type | | --- | --- | --- | --- | | session\_id | User authentication | Session | First-party | | csrf\_token | Security | Session | First-party | | auth\_token | Persistent login | 30 days | First-party | ### Analytics Cookies | Cookie Name | Purpose | Duration | Type | | --- | --- | --- | --- | | \_analytics | Usage tracking | 24 months | First-party | ### Third-Party Cookies Third-party services may set their own cookies. Please refer to their privacy policies for details. --- ## Appendix B: Data Subject Access Request Form To submit a privacy rights request, please provide: 1. **Your Information:** - Full name - Email address associated with your account - Company name (if applicable) 2. **Request Type:** - Access my data - Correct my data - Delete my data - Restrict processing - Data portability - Object to processing - Other: \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ 3. **Details:** - Specific data or processing you are concerned about - Any additional context 4. **Verification:** - We may contact you to verify your identity before processing Submit to: [privacy@soonfutures.com](mailto:privacy@soonfutures.com) --- ## Appendix C: California Privacy Notice **For California Residents Under CCPA** ### Categories of Information Collected in the Last 12 Months | Category | Examples | Collected | Source | | --- | --- | --- | --- | | Identifiers | Name, email, IP address | Yes | User, automatic | | Commercial Information | Subscription records | Yes | User, Stripe | | Internet Activity | Pages visited, usage | Yes | Automatic | | Geolocation | Approximate location via IP | Yes | Automatic | | Professional Info | Job title, company | Yes | User | | Inferences | Business intelligence | Yes | AI processing | ### Business Purposes for Collection - Providing and maintaining the Service - Processing transactions - Customer support - Analytics and improvement - Security and fraud prevention ### Disclosure and Sale - **Sold**: We do not sell personal information - **Disclosed for Business Purposes**: To service providers listed in Section 4 ### Your Rights See Section 10.3 for details on your California privacy rights. --- *Last Updated: February 2026* *Version: 1.0* --- *End of Privacy Policy* [View this page on SOON](https://soon.com.au/privacy)