Privacy policy.

• Controller: SableAlpha, Inc., a Delaware corporation, reachable at privacy@sablealpha.com.

• Demo, quote, and support requests you send us, meaning name, work email, company, role, and the message itself.
• The data an organization connects during an engagement, which is processed only to run the system for that organization.
• Questions put to Augustine, SABLE's AI assistant, together with the context SABLE assembles to answer them.
• Metadata-only operational logs that exclude passwords, tokens, payloads, prompts, and content.
• SABLE runs no third-party analytics or advertising trackers and sets one functional cookie.

• Customer data is stored and processed in the United States.
• Supabase hosts the database and file storage on Amazon Web Services in Ohio, United States (us-east-2), encrypted at rest with AES-256 and in transit with TLS.
• Vercel hosts the application on its United States infrastructure and serves the public pages through its content network.
• Resend sends transactional email such as request confirmations and founder notifications.
• Google Workspace hosts the company mailboxes where email to sablealpha.com addresses is delivered and read.
• Cal.com schedules demo calls and receives the name, email, and answers a booker provides.
• Stripe processes any card payment, and SABLE never sees or stores card numbers.
• Where SABLE runs part of Augustine on third-party AI infrastructure, that provider receives only the question and its assembled context, under terms that bar it from training on that content.
• External data providers receive query terms only, never your organization's data.
• A current subprocessor list, including our AI infrastructure provider, is available from privacy@sablealpha.com.

• Requests you send us are kept for as long as needed to respond and to run the engagement they lead to, and export or deletion of anything SABLE holds for you can be requested from the support page.
• Some records are kept longer to meet legal, tax, or accounting obligations, and deletion from backups is not immediate.

• Depending on your jurisdiction you may have rights of access, correction, deletion, and export, and you can exercise them by writing to privacy@sablealpha.com.
• Data is encrypted in transit and at rest.

Questions about this document go to hello@sablealpha.com, and the other policies are linked in the footer.