Privacy Policy

This document is a working draft. Questions: hello@cmdt.ai.

This Privacy Policy describes how CMDT AI Inc. (“CMDT,” “we,” or “us”) collects, uses, and protects information in connection with the CMDT Benchmark, the CMDT Visualization platform, and CMDT AI (collectively, the “Services”). This Policy covers information about individual users of the Services. It does not cover the water-related public records CMDT collects to build its data corpus, which is addressed in the CMDT Terms & Conditions and Data Governance materials.

1. Information CMDT Collects

1.1 Account Information

When a User registers for the Services, CMDT collects information such as name, email address, organization, role, and company size, as provided by the User during signup.

1.2 Usage Information

CMDT currently collects usage information about the cmdt.ai website through Google Analytics, as described in the CMDT Cookie Policy. Once trial access to CMDT AI is available, CMDT also collects the content of queries submitted to CMDT AI and the responses generated, as described in Section 4 below. The scope of usage information collected will expand as additional Services become available, and this section will be updated to reflect that.

1.3 Technical Information

CMDT automatically collects certain technical information when the Services are accessed, including IP address, browser type, device information, and cookies or similar technologies as described in the CMDT Cookie Policy.

2. How CMDT Uses Information

CMDT uses the information described above to:

Operate, maintain, and secure the Services;
Verify compliance with applicable license tiers and the Terms & Conditions;
Communicate with Users about their accounts and the Services;
Improve and develop the Services.

CMDT does not sell User account or usage data to third parties.

3. How Information Is Shared

CMDT may share information with service providers who support the operation of the Services, such as cloud hosting and infrastructure providers, under confidentiality obligations consistent with this Policy. CMDT does not share User account or usage information with other customers or with unaffiliated third parties for their own marketing purposes. CMDT currently uses Google Analytics to analyze use of the cmdt.ai website. CMDT is in the process of engaging a customer relationship management (CRM) platform to support sales and account communications; the specific vendor has not yet been selected. CMDT does not currently use a separate customer support platform.

4. CMDT AI Query Data and Product Improvement

Queries submitted to CMDT AI receive different treatment depending on the tier under which a User accesses the Services.

4.1 Trial Tier: Initial Development Period

CMDT is in an early stage of developing the Services. During this Initial Development Period, CMDT reviews the content of queries submitted to CMDT AI by trial tier Users, and the responses CMDT AI generates, in order to refine CMDT's data ontology, identify gaps in CMDT's underlying data corpus, and otherwise improve the Services.

Before any such review, CMDT removes account-identifying information, such as name, email address, and organization, from the query. CMDT does not de-identify or alter the substance of the query itself;
CMDT does not share any User's query content, interaction data, or derived interests with any other User, and no User's use of CMDT AI influences the results, data, or answers provided to any other User;
CMDT intends to transition away from this practice as the Services mature, consistent with common industry practice among established data and AI providers. CMDT will update this Policy when that transition occurs. See Section 5 for how this relates to data retention during the trial period.

4.2 Enterprise Tier

For Users accessing the Services under a Standard Data License Agreement, CMDT does not use queries submitted to CMDT AI to train or improve CMDT AI or any other CMDT product, except with that Customer's prior written consent. This exclusion applies from the outset of Customer's access to the Services and is not affected by the Initial Development Period practices described in Section 4.1.

4.3 Abuse and Security Monitoring

Regardless of tier, CMDT uses automated tools to monitor CMDT AI queries for abuse patterns such as systematic extraction of the underlying data corpus, attempts to reverse-engineer CMDT's methodology or ontology, and attempts to bypass usage restrictions. A query flagged by this monitoring may be reviewed by CMDT personnel and retained for a longer period than an unflagged query, for security and Terms enforcement purposes.

4.4 Personal Information Entered Into Queries

CMDT AI accepts open-ended text queries. A User should not enter personal information about themselves or a third party into a query beyond what is necessary to ask their question. Any personal information a User includes in a query is retained and handled as part of the query content described in this Section 4, and is not separately reviewed, extracted, or used for any purpose beyond those described above.

5. Data Retention

During the current trial period, CMDT retains account information and usage information, including CMDT AI query content, indefinitely. CMDT intends to define specific retention periods for each category of information, and to determine when the Initial Development Period described in Section 4.1 ends, as part of the same transition CMDT makes out of the trial phase and into a defined pricing model.

6. User Rights

Depending on where a User is located, User may have rights to access, correct, or delete their personal information, or to object to certain processing. Requests can be directed to hello@cmdt.ai.

7. Data Security

CMDT maintains reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.

8. Data Processing for Enterprise Customers

Enterprise customers whose personnel access the Services under named user accounts may require a Data Processing Addendum governing CMDT's handling of that personnel's personal information. Where applicable, that addendum is incorporated into the customer's Standard Data License Agreement. CMDT does not currently plan to support single sign-on or other integrations that would pass additional personal information to CMDT beyond basic named-user account details. As with trial tier Users, however, CMDT AI's open-ended query field means enterprise personnel could incidentally include personal information in a query; see Section 4.4.

9. Changes to This Policy

CMDT may update this Policy from time to time. Material changes will be communicated to registered users.

10. Contact

Questions about this Policy may be directed to hello@cmdt.ai.