Listening Post Privacy Policy

Effective July 26, 2026

This Privacy Policy explains how Listening Post, Inc. collects, uses, discloses, and retains personal information when you use Listening Post, Chip, app.listeningpost.ai, and related websites, applications, APIs, and services that link to this Policy. Together, they are the “Services.” Chip is a Listening Post product.

This Policy applies to personal information that Listening Post controls. If we process information for an organization under a separate written agreement, that agreement may govern the organization’s Customer Content. This Policy does not replace rights provided by applicable law.

The Services are currently offered only to people who are at least 18 years old, located in the United States, and using the Services for business purposes.

1. Information we collect

We may collect the following categories of information, depending on the features you use.

Information you provide

• Account and profile information: Name, business email address, organization, workspace membership, role, and account preferences.
• Customer Content: Instructions, prompts, files, records, website material, messages, reports, approvals, and other information you submit or create through the Services.
• Connected-service information: Data you authorize the Services to retrieve from supported business tools, together with connection status and permission scopes. Authentication tokens are stored in protected form where the integration requires them.
• Billing information: Subscription, plan, credit, invoice, transaction, and payment-status information. Our payment processor handles full payment-card details. Listening Post does not store complete card numbers.
• Communications: Support requests, emails, feedback, survey responses, and other messages you send us.
• Consent records: The versions of the Terms and Privacy Policy you accepted or acknowledged, the date and time, your US-country determination, your age and business-use confirmations, and hashed technical evidence used to protect the integrity of the record.

Information collected when you use the Services

• Device and log information: Internet Protocol address, browser and device type, operating system, user agent, request time, referring page, error details, and security events.
• Approximate location: Country or general region inferred from network information. We use this to enforce the US-only service boundary and protect accounts. We do not require precise GPS location.
• Usage and operational information: Features used, actions requested, schedules, run status, delivery status, credit consumption, performance, failures, approvals, and audit events.
• Cookies and similar technologies: Strictly necessary cookies for authentication, security, session continuity, and preferences. Optional analytics or marketing technologies will not be activated unless the user has made the applicable choice.

Information from other sources

We may receive information from your organization administrator, a person who invites you to a workspace, connected services you authorize, payment and email providers, fraud and security services, and public sources used for a task you request.

2. How we use information

We use personal information to:

• Provide, operate, personalize, and maintain the Services.
• Authenticate users and enforce workspace, role, tenant, and approval boundaries.
• Perform requested jobs, generate Output, and interact with connected services as authorized.
• Process subscriptions, credits, payments, refunds, and billing support.
• Deliver service messages, security notices, lifecycle notifications, and user-requested communications.
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents.
• Diagnose failures, provide support, maintain audit evidence, and improve reliability.
• Enforce the US-only service boundary and other eligibility requirements.
• Comply with law, respond to lawful process, and protect the rights and safety of Listening Post, our users, and others.
• Develop and improve the Services using operational information, feedback, and de-identified or aggregated information.

Listening Post does not use Customer Content to train a generalized model controlled by Listening Post unless the applicable organization expressly agrees in writing. We may send Customer Content to contracted service providers when needed to perform the task you requested. Those providers process the information under our arrangements with them.

We maintain de-identified information in de-identified form and do not attempt to reidentify it except as required to test our de-identification methods or comply with law.

3. How we disclose information

We may disclose personal information to these categories of recipients:

• Service providers: Cloud hosting, storage, authentication, AI processing, payment, email delivery, analytics, customer support, security, monitoring, and other vendors that perform services for Listening Post.
• Your organization: Authorized workspace owners and administrators may manage users, roles, connected services, billing, and organization content.
• Connected services: When you direct the Services to retrieve information from or send an approved action to a connected provider.
• Professional advisers: Lawyers, accountants, auditors, insurers, and consultants who need the information to provide professional services.
• Government authorities and other parties: When required by law or reasonably necessary to protect rights, safety, security, property, users, or the public.
• Transaction participants: A buyer, investor, lender, adviser, or successor involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality protections.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide any legally required notice and choice before the change takes effect.

We do not share mobile opt-in information or text-message consent with third parties for their marketing or promotional purposes.

4. Nevada privacy notice

For purposes of Nevada Revised Statutes Chapter 603A:

• The categories of covered information we collect are listed in Section 1.
• The categories of third parties with whom we may disclose covered information are listed in Section 3.
• You may request access, review, correction, or deletion as described in Section 7.
• We will notify users of material changes as described in Section 11.
• This Policy’s effective date appears at the top of the page.
• We do not permit third parties to collect covered information through the Services to track users across unrelated websites for behavioral advertising. Optional analytics, if enabled by the user, may measure use of the Services but may not be used by Listening Post for cross-context behavioral advertising.

Nevada residents may submit a verified request directing us not to make a sale of covered information by emailing support@listeningpost.ai with the subject “Nevada Privacy Request.” Listening Post does not currently sell covered information as Nevada law defines that term.

5. Cookies and analytics choices

Strictly necessary cookies operate without an optional consent choice because they provide login, security, session, load-balancing, and preference functions requested by the user.

Analytics and marketing technologies are separate from account and policy acceptance. Declining optional analytics or marketing does not prevent account access. Where an optional choice is offered, you may change it through the Services or by contacting support.

Browser settings may block cookies, but blocking strictly necessary cookies can prevent login or other core functions. We honor legally required opt-out signals when they apply to our processing.

6. Retention

We retain personal information only for as long as reasonably necessary for the purpose collected, including providing the Services, maintaining security and audit evidence, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, and regulatory requirements.

Retention depends on the data and context. Active account and Customer Content may remain while the account or applicable workspace is active. We may retain billing records, consent evidence, security logs, and deletion-request records longer when required for compliance, fraud prevention, or dispute resolution. Backups are removed on their normal rotation unless preservation is legally required.

When we no longer need information, we delete it, de-identify it, or isolate it from active use. Information already de-identified and no longer linked to a person may be retained.

7. Your privacy rights

Depending on your state and applicable exceptions, you may have the right to:

• Know whether and how we process your personal information.
• Access or receive a portable copy of personal information.
• Correct inaccurate personal information.
• Delete personal information.
• Opt out of a sale, targeted advertising, or certain profiling if we engage in those activities.
• Limit or withdraw consent where processing depends on consent.
• Appeal a decision on a privacy request.
• Exercise rights without unlawful discrimination or retaliation.

To submit a request, email support@listeningpost.ai with the subject “Privacy Request.” Describe the request and identify the account or organization involved. We may ask you to verify control of the account or provide other information needed to prevent unauthorized access, correction, or deletion.

An authorized agent may submit a request where applicable law permits it. We may require proof of the agent’s authority and direct verification from the person concerned. We will respond within the period required by applicable law and explain any applicable exception.

Marketing email can be declined through the unsubscribe control in the message. Transactional, security, billing, and account messages may continue while necessary to provide the Services.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information. Measures may include encryption, access controls, tenant isolation, least-privilege permissions, audit logging, security monitoring, and incident response. No system is completely secure. You are responsible for protecting your email account, devices, and authorized connections.

If a breach requires notice, we will provide notice as required by applicable law.

9. Children

The Services are not directed to anyone under 18, and people under 18 may not create an account or use the Services. If you believe a minor has provided personal information, contact support@listeningpost.ai.

10. US-only availability and international access

The Services are currently available only to users in the United States. We use country-level network information and account controls to enforce this restriction. We do not offer the Services to users in the European Economic Area, United Kingdom, Switzerland, or other non-US jurisdictions at this time.

Blocking access by country does not eliminate obligations under US federal or state privacy law. We apply this Policy to US users subject to applicable law.

11. Changes to this Policy

We may update this Policy when our practices, Services, or legal obligations change. We will post the updated Policy with a new effective date. If a change materially affects how we use previously collected personal information, we will provide additional notice and obtain consent when required by law.

When a new policy version requires acknowledgment, the Services will ask users to review it before continuing.

12. Contact

Listening Post, Inc. is responsible for the personal information covered by this Policy.

Listening Post, Inc. 5075D S Pecos Rd., #200 Las Vegas, Nevada 89120 support@listeningpost.ai