Proba

PROBA PRIVACY POLICY Aurelius Labs, Inc. Version: 2026-08-20 Effective: August 20, 2026 ==================================================================== 1. WHO WE ARE AND WHAT THIS POLICY COVERS Aurelius Labs, Inc., a Delaware corporation ("Aurelius Labs," "we," "us," or "our"), operates Proba. Our business address is Guaynabo, Puerto Rico, United States. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Proba website at https://proba.aureliusaligned.ai, the Proba web application, API, MCP interface, documentation, support channels, and related services (collectively, the "Service"). For privacy questions or requests, email contact@aureliusaligned.ai. ==================================================================== 2. SUMMARY - We collect information needed to provide, secure, support, and bill for the Service. - We do not use Customer Data to train or fine-tune models, and we do not sell personal information. - Payment-card details are collected and processed by a payment service provider rather than stored by us. - You may request access, correction, export, or deletion of your personal information, subject to applicable law and the limited retention obligations described below. ==================================================================== 3. INFORMATION WE COLLECT 3.1 Account and organization information We collect information such as your name, email address, organization name, account role, authentication identifiers, and any other account details you provide. Service records generally belong to the relevant organization and may be visible to authorized members of that organization. 3.2 Customer Data "Customer Data" means datasets, prompts, model references, configuration, files, and other materials submitted to the Service. It may include personal information if you or another user includes personal information in those materials. 3.3 Usage, device, and security information We collect information needed to operate and protect the Service, which may include request timestamps, endpoints used, job and credit activity, latency, errors, IP address, browser and device information, authentication events, audit events, and pages viewed. 3.4 Payment and transaction information When paid features are used, a payment service provider collects the payment-card details entered during checkout. We do not store full card numbers or card security codes. We may retain payment-service customer and payment-method identifiers, checkout and transaction identifiers, amounts, currency, payment and refund status, purchased credit quantities, receipts, order records, and ledger entries needed to fulfill purchases, prevent duplicate transactions, resolve disputes, and comply with accounting and legal obligations. 3.5 Communications We collect support requests, privacy and billing requests, feedback, and other communications you send to us. 3.6 Cookies and similar technologies We use cookies and similar technologies that are necessary for authentication, security, session management, and core operation of the Service. If we introduce non-essential tracking that requires notice or consent, we will provide the choices required by applicable law. 3.7 Information about minors The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. Contact us if you believe a minor has provided personal information through the Service. ==================================================================== 4. HOW AND WHY WE USE INFORMATION We use information to: - provide, maintain, and support the Service; - authenticate users and administer organizations; - process jobs, deliver outputs, meter usage, and manage credits; - process payments, refunds, receipts, and financial records; - secure the Service and detect abuse, fraud, or unauthorized use; - communicate service, billing, security, and policy notices; - respond to support and privacy requests; - understand and improve reliability and usability using operational or aggregated information; - enforce our Terms of Service; and - comply with law and protect our rights and the rights of others. Where applicable law requires a legal basis, we rely on performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the Service, and consent where we specifically request it. You may withdraw consent at any time, without affecting processing that occurred before withdrawal. We do not sell personal information. We also do not share personal information for cross-context behavioral advertising as those terms are defined by applicable California law. ==================================================================== 5. CUSTOMER DATA Customer Data is treated as confidential information under the Terms of Service. We use Customer Data only to provide, maintain, secure, and support the Service, comply with law, and follow your instructions. We do not use Customer Data to train or fine-tune any model, instrument, or product. We do not disclose Customer Data to other customers or to public blockchain or subnet participants. Access to Customer Data is limited to authorized personnel and service providers who need access for the purposes described in this policy. Administrative access is subject to access controls and audit records. Unless a different written agreement applies: - uploaded datasets are retained for 30 days after the related analysis completes and are then deleted; - generated outputs are retained for 12 months so they can be retrieved, unless you delete them sooner; and - deleted Customer Data is removed from active systems and is removed or rendered unrecoverable in backups within 90 days. You may delete eligible datasets or outputs through the Service or by contacting us. Some deletion requests may remain pending while a transaction, security investigation, legal hold, or technical cleanup is completed. Proba is not intended to receive protected health information, payment-card data, government-classified information, or personal information that requires special contractual or regulatory handling. Do not submit that information unless Aurelius Labs has agreed in writing to the required handling terms. ==================================================================== 6. HOW WE DISCLOSE INFORMATION We may disclose information to service providers that support functions such as identity and authentication, hosting, storage, compute, payment processing, communications, customer support, security, analytics, and error monitoring. Those providers may use the information only to provide services to us or as otherwise permitted by their agreements with us and applicable law. We may also disclose information: - when required by law, legal process, or a valid government request; - to protect the rights, property, or safety of Aurelius Labs, our users, or others; - to investigate fraud, abuse, or security incidents; or - in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections. We do not disclose personal information to data brokers or advertisers for their own independent marketing purposes. ==================================================================== 7. INTERNATIONAL DATA TRANSFERS Aurelius Labs is based in the United States. We and our service providers may process information in the United States and other countries. Where applicable law requires a transfer safeguard, we use an approved legal mechanism, which may include standard contractual clauses or another lawful transfer basis. ==================================================================== 8. RETENTION AND ORGANIZATION DELETION The Customer Data retention periods are described in Section 5. We retain other personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide the Service, maintain security and auditability, resolve disputes, and comply with legal obligations. If you request deletion of an organization, we delete or de-identify eligible account and organization information and remove saved payment associations, subject to verification and any pending transaction, security, legal, or technical obligations. We retain order records, receipts, credit ledger entries, tax records, and related transaction evidence for the period required by applicable law and legitimate accounting, fraud-prevention, and dispute-resolution needs. We limit retained records to the information needed for those purposes. ==================================================================== 9. YOUR PRIVACY RIGHTS Depending on where you live, you may have rights to: - access or receive a copy of personal information we hold about you; - correct inaccurate personal information; - delete personal information; - receive certain information in a portable format; - restrict or object to certain processing; - withdraw consent where processing is based on consent; - opt out of marketing communications; and - appeal a refusal or complain to a privacy regulator. To exercise a right, email contact@aureliusaligned.ai from the address associated with your account. We may verify your identity and authority to act for an organization before completing a request. We will respond within the time required by applicable law. Applicable law may permit or require us to decline or limit a request, including where retention is needed for legal compliance, security, fraud prevention, or legal claims. We will not discriminate against you for exercising a privacy right. ==================================================================== 10. SECURITY We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, encryption or equivalent protection for stored Customer Data, access controls, auditability, and measures intended to prevent unauthorized payment or account activity. No system is perfectly secure. If a security incident affects personal information, we will investigate and provide notices required by applicable law. ==================================================================== 11. CHANGES TO THIS POLICY We may update this policy. Each published version identifies its effective date. We will provide at least 30 days' advance notice of a material change by email, through the Service, or by another reasonable method, unless a shorter period is required to address an urgent legal or security issue. ==================================================================== 12. CONTACT Aurelius Labs, Inc. Guaynabo, Puerto Rico, United States contact@aureliusaligned.ai ==================================================================== End of Proba Privacy Policy, version 2026-08-20.

Privacy policy