Cloud Service Privacy Notice

Last Updated: July 31, 2026

This Cloud Service Privacy Notice explains how MetisLogic, Inc. ("MetisLogic," "we," "our," or "us") handles personal information associated with authorized use of the MetisLogic Cloud Service. It supplements the customer agreement and does not replace the customer's own privacy notices or instructions. This Notice is informational only and does not amend the customer Agreement. The Agreement and any incorporated Data Processing Addendum govern MetisLogic's processing of Customer Content.

1. MetisLogic's Two Roles

Information We Process for Our Own Purposes

MetisLogic determines how and why it uses limited account, security, support, billing, and service-administration information. For this information, MetisLogic acts as a controller, business, or independent organization under applicable law.

Customer Content Processed for a Business Customer

BOMs, receipts, supplier-label images, inventory records, picklists, project information, manufacturing records, and similar Customer Content are generally processed by MetisLogic on behalf of the business customer that controls the account. The customer determines the purpose of that processing and is responsible for its Users, notices, permissions, and lawful instructions. Requests concerning Customer Content should ordinarily be directed to that customer.

2. Information Associated with the Cloud Service

• Authorized-User name, business email address, organization, role, permissions, and account identifiers.
• Authentication, access, device, security, activity, and troubleshooting logs.
• Communications with MetisLogic support and limited information needed to investigate and resolve an issue.
• Customer Content submitted to or created in the Product, including supplier-label images and manufacturing workflow records.
• Usage information used to operate, secure, support, and improve the Product.

3. How We Use Information

• Create and administer authorized accounts and permissions.
• Provide, maintain, secure, support, and troubleshoot the Cloud Service.
• Detect misuse, investigate incidents, and preserve service integrity.
• Communicate with customer administrators and Users about service operation and support.
• Analyze aggregated or de-identified service usage and improve the Product.
• Comply with applicable law and enforce customer agreements.

4. AI-Assisted Supplier-Label Interpretation

When an authorized User invokes label interpretation, MetisLogic may send a supplier-label image or crop and a limited prompt to an approved business or API artificial-intelligence provider. The provider returns suggested fields such as part number or quantity. The User reviews, accepts, or corrects the suggestion. MetisLogic may store the image, AI suggestions, and User-confirmed or corrected information with the Item Receipt.

MetisLogic uses organizational business or API accounts for this processing and does not authorize an external AI provider to use API Customer Content to train or improve its independently offered general-purpose models. Standard provider retention and abuse-monitoring practices may apply.

5. Product Service Providers

MetisLogic uses approved providers to host and support the Cloud Service, including cloud infrastructure, production data services, AI inference, email/support communications, issue tracking, and limited internal collaboration. The current Product Subprocessor List is available at metislogic.io/legal/subprocessors/. MetisLogic personnel and individual consultants acting under direct confidentiality and data-security obligations are authorized personnel, not listed as third-party Product subprocessors.

6. Support and Collaboration Data

Support requests may be recorded in Google Workspace, Linear, or restricted Slack channels. MetisLogic personnel are instructed to use only the minimum Customer Content reasonably necessary to reproduce, investigate, and resolve an issue, and not to place credentials, access tokens, payment-card data, Controlled Data, full customer exports, or unrelated Customer Content in collaboration tools.

7. Retention and Deletion

Retention depends on the record and the customer agreement. During the service relationship, Customer Content is retained as needed to provide the Product. After expiration or termination, a customer may request one standard export during the contractual export period. MetisLogic may then delete the inactive tenant and related Customer Content from active systems. Deleted information may remain in protected backups until overwritten through the ordinary retention cycle, currently not more than 90 days. Personal Data subject to a DPA is returned, deleted, or irreversibly anonymized as required by that DPA and applicable law.

8. Security

MetisLogic uses reasonable measures including encryption in transit and at rest, logical separation between customer instances, responsibility-based access, personnel confidentiality and data-security obligations, protected backups, and incident-response procedures. No system can guarantee absolute security.

9. Individual Rights and Requests

For information controlled by a MetisLogic customer, contact that customer first. MetisLogic will reasonably assist the customer as required by its agreement and applicable law. For MetisLogic-controlled account or business information, contact [email protected]. We may verify a request and apply legal exceptions.

10. International Processing

The Cloud Service is currently hosted in the United States. Authorized personnel may access systems from the United States, the European Economic Area, the United Kingdom, and Switzerland. Product providers may process information in the locations stated in the Product Subprocessor List and their applicable terms.

11. No Sale or Behavioral Advertising

MetisLogic does not sell personal information or share it for cross-context behavioral advertising. The Cloud Service is not used to deliver behavioral advertising.

12. Changes and Contact

We may update this Notice as the Product, providers, or legal requirements change. Questions may be sent to [email protected] or to MetisLogic, Inc., 63 Bovet Road, Suite 252, San Mateo, CA 94402.