Privacy Notice

Last Updated: October 5, 2026

On this page

• 1. Updates to this privacy notice
• 2. Personal information we collect
• 3. How we use personal information
• 4. How we share personal information
• 5. Your privacy choices
• 6. Data security and retention
• 7. Third party websites and materials
• 8. International transfers of personal information
• 9. Children’s personal information
• 10. Contact us

This Privacy Notice applies to the processing of personal information by humans& ai, inc. (“we,” “us,” or “our”) in connection with our AI agent-powered autonomous personal assistant, Boba (the “Agent”), the website at which you access Agent at getboba.ai, and our other online or offline offerings that link to, or are otherwise subject to, this Privacy Notice (collectively, the “Services”).

1. UPDATES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time in our sole discretion. If we do, we’ll let you know by posting the updated Privacy Notice on our website and updating the “Last Updated” date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you and take additional steps as required by applicable law.

2. PERSONAL INFORMATION WE COLLECT

We collect personal information that you provide to us, personal information we collect automatically when you use the Services, and personal information from third-party sources, as described below.

A. Personal Information You Provide to Us Directly

We may collect personal information that you provide to us.

• Contact Information. We may collect personal information, such as your name, phone number, and email address, in connection with the creation of your account and to communicate with you (including to tell you about products or services that may be of interest to you).
• Account Information. We may collect personal information in connection with the creation or administration of your account, such as your username, password, security questions that you select and the answers you provide, account handle and other information you store with your account.
• Payment Information. We may collect payment information, such as your credit or debit card details, billing address, and other payment method information. Your payment card details are encrypted, and we do not store your card security code or PIN.
• Your Communications with Us. We, and our service providers, may collect the information you communicate to us, such as when you communicate with our AI agent directly or via a group chat you and the AI agent are both participants in, via email, or via our web chat tool.
• Surveys. We may contact you to participate in surveys. If you decide to participate, we may collect personal information from you in connection with the surveys.
• Information you choose to input into our AI-powered tools (“Input”). We may collect the content of any queries and any documents you upload to the Service, which we use to generate and output new information or content (“Output”). We use Input and Output to improve our products and technology, including by training or fine-tuning the AI models that power such tools.
• Interactive Features. We and others who use our Services may collect personal information that you submit or make available through our interactive features (e.g., messaging features, commenting functionalities, forums, blogs, and social media pages). Any information you provide using the public sharing features of the Services will be considered “public.”

B. Personal Information Collected Automatically

We may collect personal information automatically when you use the Services.

• Device Information. We may collect personal information about your device, such as your Internet protocol (IP) address, user settings, cookie identifiers, other unique identifiers, browser or device information, Internet service provider, and location information (including, as applicable, an approximate location derived from the IP address, precise geo-location information, or any other location information you may share with us).
• Usage Information. We may collect personal information about your use of the Services, such as the pages that you visit, items that you search for, the types of content you interact with, information about the links you click, the frequency and duration of your activities, and other information about how you use the Services.
• Agent Activity Information. We may collect personal information about what Agent does after you give it an instruction, including the steps and actions it takes, and the information Agent collects on websites and other third-party services that Agent interacts with on your behalf, such as order confirmations, receipts, and account or transaction details.
• Cookie Notice (and Other Technologies). We, as well as third parties, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect personal information through your use of the Services.
  • Cookies. Cookies are small text files stored in device browsers.
  • Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in the Services that collects personal information about use of or engagement with the Services. The use of a pixel tag allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. We may also include web beacons in emails to understand whether messages have been opened, acted on, or forwarded.

See “Your Privacy Choices” below to understand your choices regarding these Technologies.

C. Personal Information Collected from Third Parties

We may collect personal information about you from third parties.

For example, users of the Services may upload or otherwise provide personal information about others. In such case, we may collect any personal information that is submitted to our Services, without limitation, the contents of documents uploaded to Agent.

In addition, if you access the Services using a third-party website, application, service, products, or technology (each a “Third-Party Service”), we may collect personal information about you from that Third-Party Service that you have made available via your privacy settings.

Any information we receive from third parties will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third-Party Websites and Materials.

3. HOW WE USE PERSONAL INFORMATION

We use personal information for a variety of business purposes, including to provide the Services, to improve the Services, to operate our business, and to provide you with marketing materials, as described below.

A. Provide the Services

We use personal information to provide the Services, such as:

• Providing access to certain areas, functionalities, and features of the Services;
• Communicating with you including to tell you about products or services that may be of interest to you, via email, text message, and other methods of communication;
• Creating, maintaining, and securing your account;
• Fulfilling your requests, including by browsing websites, filling in forms, making purchases and reservations, and otherwise interacting with third-party services on your behalf;
• Sharing personal information with third parties as needed to provide the Services; and
• Processing your financial information and other payment methods.

B. Improve the Services and Develop New Products and Services

We use personal information to improve the Services and to develop new products and services, such as:

• Developing, training, and fine-tuning models, algorithms, and artificial intelligence technologies, including using the instructions you provide to Agent and Agent’s activity and outputs; and
• Improving, upgrading, or enhancing the Services.

C. Operate Our Business

We use personal information to operate our business, such as:

• Pursuing our legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
• Carrying out analytics;
• Creating de-identified and/or aggregated information;
• Processing applications if you apply for a job we post on our Services;
• Allowing you to register for events;
• Enforcing our agreements and policies; and
• Carrying out activities that are required to comply with our legal obligations.

D. Marketing

We may use personal information in connection with our marketing activities including to tailor and provide you with marketing communications, promotions, and offers that may interest you.

E. With Your Consent or Direction

We may use personal information: (i) for other purposes that are clearly disclosed to you at the time you provide the personal information, (ii) with your consent, or (iii) as otherwise directed by you.

F. Deidentified Information

We may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

4. HOW WE SHARE PERSONAL INFORMATION

We share personal information with third parties for a variety of business purposes, including to provide the Services, to protect us or others, or in connection with a major business transaction such as a merger, sale, or asset transfer, as described below.

A. Disclosures Regarding Phone Numbers We Collect

Unless we enter into a corporate transaction as described below in Section 4D (Disclosure in the Event of Merger, Sale, or Other Asset Transfers), no phone numbers we collect will be sold or shared by us with third parties for their promotional or marketing purposes.

B. Disclosures to Provide the Services

We may share any of the personal information we collect with the categories of third parties described below.

• Service Providers. We may share personal information with service providers that assist us with the provision of the Services. This may include, but is not limited to, service providers that provide us with hosting services, customer service, AI or machine learning services (including third-party AI model providers), payment processing, analytics, marketing services, IT support, and related services. In addition, personal information and communications with Agent may be shared with service providers that help provide Agent’s features and services.
• Other Users You Share or Interact With. The Services may allow our users to share personal information or interact with other users of the Services.
• Third-Party Services You Share or Interact With. The Services may link to or allow you to interface with, interact with, share information with, direct us to share information with, access, and/or use a Third-Party Service.
• Third Parties Agent Interacts With for You. When you ask Agent to complete a task, it may provide your personal information to the websites, merchants, and other third parties as needed to complete that task. For example, entering your name, contact details, and payment information on a checkout page.

Any personal information shared with a Third-Party Service will be subject to the Third-Party Service’s privacy policy. We are not responsible for the processing of personal information by Third-Party Services.

• Business Partners. We may share your personal information with business partners we work with to provide you with a product or service you have requested. We may also share your personal information with business partners with whom we jointly offer products or services.
• Professional advisors. We may share your personal information with professional advisors, such as auditors, law firms or accounting firms for legitimate, standard business reasons.

Once your personal information is shared with our business partner, it will also be subject to our business partner’s privacy policy. We are not responsible for the processing of personal information by our business partners.

• Affiliates. We may share your personal information with our corporate affiliates.

C. Disclosures to Protect Us or Others

We may share your personal information and related information with external parties if we, in good faith, believe doing so is required or appropriate to comply with law enforcement requests, national security requests, or other government requests; comply with legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; exercise or defend legal claims and to ensure the safety and security of our business; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual unauthorized or illegal activity.

D. Disclosure in the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets, transition of service to another provider, or other similar corporate transaction, your personal information may be shared, sold, or transferred as part of such a transaction.

5. YOUR PRIVACY CHOICES

The privacy choices you may have about your personal information are described below.

• Email Communications. If you receive an unwanted email from us, you can use the unsubscribe functionality found at the bottom of the email to opt out of receiving future emails. Note that you will not be able to opt out of certain communications (e.g., communications regarding the Services or updates to this Privacy Notice).
• Text Messages. If you receive an unwanted text message from us (marketing or otherwise), you may opt out of receiving future text messages from us by following the instructions in the text message you have received from us or by otherwise contacting us as set forth in “Contact Us” below.
• “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
• Cookies. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, the Services may not work properly. Please note you must separately opt out in each browser and on each device.
• Google. “Google User Data” means information we obtain from your Google account through Google APIs using permissions you grant Boba. It excludes information we obtain independently of those APIs. We use Google User Data to provide or improve disclosed, user-facing Boba features. We share it only with service providers, including AI service providers, if any, as necessary for those features with your consent; for security or legal compliance; or in a merger, acquisition, or asset sale with your explicit prior consent. Human review is limited to specific content you affirmatively authorize, necessary security or legal purposes, or internal operations using aggregated and anonymized data. We do not use Google User Data for advertising or to train or improve AI models beyond your personalized model for those features. These restrictions also apply to our service providers and to information derived from Google User Data, and control over conflicting provisions of this Privacy Notice. We encrypt Google User Data in transit and at rest and retain it only as necessary for these purposes. You may revoke access in Settings or through your Google account permissions, and request deletion by contacting hello@getboba.ai. We delete Google User Data within 60 days of a deletion request, unless retention is required by law.

6. DATA SECURITY AND RETENTION

We take commercially reasonable steps to protect your personal information from unauthorized access, use or disclosure, but despite our efforts to protect your information, we cannot promise that your information will always be secure. Information you send us electronically may not be secure while in transit, so we recommend that you don’t use unsecured channels to send us sensitive or confidential information.

7. THIRD-PARTY WEBSITES AND MATERIALS

We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation. Our inclusion of such links does not, by itself, imply that we endorse the content of the platforms, owners, or operators.

8. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.

9. CHILDREN’S PERSONAL INFORMATION

The Services are not directed to children under 18, and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe that your child has uploaded personal information to the Services in violation of applicable law, you may contact us as described in “Contact Us” below.

10. CONTACT US

If you have any questions about our privacy practices or this Privacy Notice, please contact us at: hello@getboba.ai.