Legal

Privacy Policy

Effective date: May 1, 2026

This Privacy Policy describes how Golden State Prognostics LLC (“we,” “our,” or “us”) collects, uses, and shares information when you use the PrognostiXon intelligence and analytics platform (the “Service”). This policy is intended to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and, where applicable to individuals in the European Economic Area or United Kingdom, the General Data Protection Regulation (“GDPR”), as well as other relevant U.S. federal and state laws.

1. Information We Collect

We collect the following categories of information:

• Personal identifiers: name, email address, and contact information.
• Usage data: interactions with the Service, log data, and IP addresses.
• Uploaded content: documents, prompts, or files submitted to the platform.

2. How We Use Information

We use information to deliver and improve our Service, personalize your experience, secure and operate the platform, and comply with legal obligations.

3. Legal Basis for Processing (GDPR)

To the extent the GDPR applies, we process personal data on the basis of your consent, the performance of a contract, our legitimate interests in operating and securing the Service, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

4. Sharing of Information

We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We may disclose information to trusted service providers and contractors who process it on our behalf under written terms that limit their use of the information to providing services to us. We may also disclose information where required by law or to protect our rights, users, or the security of the Service.

5. International Transfers

Your data may be stored in the United States and accessed from other jurisdictions. Where we transfer personal data of individuals in the EEA or UK to a country that has not received an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum, where applicable), or another lawful transfer mechanism.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, and restrict or object to the processing of your personal data, and to request data portability. California residents may also request that we not sell or share their personal information (we do neither) and may not be discriminated against for exercising their rights. To exercise any of these rights, contact us at privacy@prognostixon.com; we will verify and respond to requests as required by applicable law. We honor browser-based opt-out preference signals, including the Global Privacy Control (GPC), where required.

Where personal information is submitted to the platform by a customer organization under a Master Services Agreement, that organization is the party responsible for responding to data-subject requests, and we will refer such requests to it (see Section 11).

7. Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards, including encryption, role-based access, and logging of data access. In the event of a confirmed unauthorized access, acquisition, use, or disclosure of personal information, we will notify affected parties without undue delay, consistent with applicable law and any contractual commitments to enterprise customers. For customers under a Master Services Agreement, our breach-notification commitment is set forth in that agreement (currently notice without undue delay and in any event within seventy-two (72) hours of a confirmed incident of which we become aware).

8. Cookies and Analytics

We use cookies and analytics tools to operate and improve the platform. We do not use these tools to sell or share personal information for cross-context behavioral advertising. You may disable cookies in your browser settings; doing so may affect platform functionality.

9. Retention

We retain personal data only as long as necessary for the purposes described in this policy. In practice, we determine retention periods based on the type of data and the purpose for which it was collected, including the duration of the customer relationship, our legitimate operational needs, and any legal, accounting, or contractual recordkeeping requirements. We delete or de-identify personal data when it is no longer needed, unless a longer retention period is required by law.

10. Contact Us

For questions or requests regarding your data, contact us at: Golden State Prognostics LLC, 10265 Rockingham Drive, Suite 100 #6052, Sacramento, CA 95827. Email: privacy@prognostixon.com.

11. Service Provider Relationship (CCPA/CPRA)

When personal information is submitted to the PrognostiXon platform by customer entities (including their employees, contractors, or end users) under a Master Services Agreement, Golden State Prognostics LLC acts as a “service provider” as defined under the CCPA/CPRA. In that capacity, we process such information solely on behalf of and at the direction of the customer entity, in accordance with the terms of the applicable Master Services Agreement. The customer entity is the “business” responsible for responding to data-subject requests regarding such information. For personal information that we collect directly from website visitors, registered users, or others outside the scope of a Master Services Agreement, we act as the “business” under the CCPA/CPRA.