Privacy Policy

Last updated: April 8, 2026

System9, Inc. (“SYSTEM9,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website at system9.ai, our platform, and related services (collectively, the “Services”).

1. Information We Collect

1.1 Account Information

When you create an account or inquire about our Services, we may collect your name, email address, job title, organization name, phone number, and billing information.

1.2 Usage Data

We automatically collect information about how you interact with the Services, including IP addresses, browser type and version, operating system, referring URLs, pages visited, features used, access times, and session duration.

1.3 Metering Data

For usage-based billing purposes, we collect metering data related to your consumption of Services, including data volume processed, number of nodes deployed, API call counts, and storage utilization. This data is used solely for billing, capacity planning, and service optimization.

1.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information, please refer to our Cookie Policy.

2. How We Use Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Services.
• To process transactions and send related billing and account information.
• To communicate with you about the Services, including responding to inquiries, providing technical support, and sending service-related notifications.
• To monitor and analyze usage patterns and trends to improve user experience and platform performance.
• To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• To comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, such as hosting, analytics, payment processing, and customer support. These providers are contractually obligated to use your information only as necessary to provide services to us.
• Legal Requirements: We may disclose information if required to do so by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will provide notice before your information is subject to a different privacy policy.
• With Your Consent: We may share information with your explicit consent or at your direction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. We may also retain information as necessary to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes such as audit and compliance.

When your data is no longer required, we will securely delete or anonymize it in accordance with our data retention schedules and applicable data protection laws.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption at rest and in transit, access controls, regular security assessments, and employee security training. For more information, please see our Security Policy.

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.

6. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction. When we transfer personal data internationally, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and other transfer mechanisms as required by applicable law.

7. Your Rights

7.1 GDPR Rights (European Economic Area)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: You have the right to request restriction of processing in certain circumstances.
• Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.

7.2 CCPA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. As noted above, we do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at contact@system9.ai. We will respond to verified requests within the timeframes required by applicable law.

8. Children's Privacy

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete such information.

9. Government and Military Users

SYSTEM9 recognizes that government and military customers may be subject to additional privacy and data handling requirements. Where SYSTEM9 provides Services under government contracts, data handling practices will be governed by the applicable contract terms, which may include provisions related to Controlled Unclassified Information (CUI), the Privacy Act of 1974, and other applicable federal privacy regulations.

For air-gapped and self-managed deployments, the customer is responsible for implementing privacy controls in accordance with their organizational policies and applicable regulations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. For enterprise and government customers, we will provide at least thirty (30) days' advance notice of material changes via email. We encourage you to review this Privacy Policy periodically.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

System9, Inc.
Email: contact@system9.ai
Website: system9.ai