Privacy Policy

Last Updated: August 2, 2026

Introduction

Germinate.ai, Inc. ("Germinate," "we," or "us") values your privacy. This policy explains what information we collect from visitors to germinate.ai (the "Website"), how we use it, and the choices and rights you have.

This policy covers the Website. Data our clients connect to the Germinate platform — the databases, documents, and systems their agents work from ("Client Data") — is governed primarily by the client's Master Services Agreement and any data processing addendum; where those agreements reference this Privacy Policy, we handle Client Data consistent with the commitments described here. Those commitments are simple: Client Data belongs to the client, is isolated in the client's private tenant, is used only to provide the agreed services, and is never used to train AI models for our own use or any other customer's benefit. More in our Responsible AI page.

Information We Collect

Information you provide. When you book a Readiness Conversation, request an AI Audit, or contact us, we collect what you submit — typically your name, company, work email, phone number, and anything you tell us about your business and goals.

Information collected automatically. When you visit the Website, we and our service providers automatically collect standard technical data: IP address, browser and device type, pages viewed, referring pages, and approximate location derived from IP. We collect this through cookies and similar technologies (see Cookies below).

We do not collect payment information through the Website, and the Website has no user accounts.

How We Use Information

We use the information we collect to: respond to your inquiries and schedule conversations you request; operate, secure, and improve the Website; understand how visitors use the Website so we can make it better; send you information about our services if you have inquired or opted in (you can opt out of marketing messages at any time); and comply with legal obligations.

How We Share Information

We do not sell your personal information, and we do not share it with third parties for their own advertising.

We share information only: with service providers who perform services for us (hosting, analytics, scheduling, email, CRM) under obligations to use it only on our behalf; in a business transfer such as a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy; when required by law or to respond to valid legal process; and as necessary to protect rights and safety — ours, our clients', or others'.

Cookies and Analytics

We use cookies and similar technologies to keep the Website working, remember preferences, and measure how the site is used. You can control cookies through your browser settings; disabling them may limit some functionality. Where we use third-party analytics, those providers process technical data on our behalf.

Global Privacy Control. We honor Global Privacy Control (GPC) signals where required by applicable law as an opt-out of targeted advertising or sale of personal information (noting that we do not sell personal information).

Data Retention

We keep personal information only as long as needed for the purposes described above — typically for the life of our relationship with you or your inquiry, plus any period required for legal, accounting, or security purposes — and then delete or de-identify it.

Your Privacy Rights

Depending on where you live, you may have rights under state privacy laws — including the Oregon Consumer Privacy Act, the California Consumer Privacy Act, and similar laws in other states — to: know what personal information we hold about you and access a copy; correct inaccurate information; delete your information; opt out of targeted advertising, sale, or profiling (we do not sell personal information or use it for profiling with significant effects); and not be discriminated against for exercising these rights.

To exercise any of these rights, email privacy@germinate.ai. We will verify your request and respond within the time required by applicable law (generally 45 days). If we decline a request, you may appeal by replying to our response, and we will explain the outcome.

Visitors from the EU, UK, and other regions. The Website is operated from the United States and directed at a U.S. audience. If you access it from a region with different data protection laws, be aware your information will be transferred to and processed in the United States. Where laws such as the GDPR apply, we process personal data on the legal bases of consent, legitimate interests, or performance of a contract, and you may have additional rights — contact us at privacy@germinate.ai.

Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Website is intended for business audiences and is not directed at children. We do not knowingly collect personal information from anyone under 16, and we comply with the U.S. Children's Online Privacy Protection Act. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy as our practices or legal obligations change. The "Last Updated" date above reflects the current version, and we will notify you of material changes by email if we have your address, or by prominent notice on the Website.

Contact

Questions or requests about this policy or your personal information:

privacy@germinate.ai

Germinate.ai, Inc., 525 3rd St Ste 200, Lake Oswego, OR 97034