Privacy Policy

Metaphi, Inc. ("Metaphi AI", "we", "us") builds environments, benchmarks and agents for enterprise work. This policy explains what information we collect when you use our websites, our software and agents, including Hum, our APIs, and the programs through which experts contribute to our datasets (together, the "Services"), how we use it, and the choices you have. It applies alongside our terms. Pages about security and sub-processors go into more detail on the points they cover.

Information we collect

Information you give us. When you create an account we collect your name and email address, through sign-in with Google or GitHub. If you take part as an expert we also collect your country, time zone, areas of expertise, and, when we pay you, the details needed to make the payment. We collect the work you submit: tasks, reviews, solutions, code and files. We collect the content you give our agents, such as prompts, uploaded files, the repositories you connect, and messages in Slack threads and channels where your workspace has installed Hum. When you sign an agreement with us, we keep the signed record. When you write to us, we keep the message.

Information we collect automatically. When you visit our websites we collect the usual device and usage information: IP address, browser and operating system, pages viewed, referring page, and timestamps, through Google Analytics. When you run a session with one of our agents we keep a record of the session: what the agent read, did and said, and the messages and people that reached it.

Information from other sources. When you connect a service such as Slack or GitHub, we receive the profile information that service shares, such as your display name and account id, and the content you authorize it to give us. When we license code or data from a third party to build a benchmark, that agreement governs what we receive.

How we use information

We use information to:

• provide, operate and secure the Services, including signing you in, running sessions, and paying experts;
• build, validate and publish benchmarks and environments from expert contributions and licensed data;
• improve the Services and our agents, including by studying session records;
• respond to you and send notices about your account or the Services;
• detect and prevent fraud, abuse and misuse, and enforce our terms;
• meet legal obligations.

We do not use your content to train models that we make available to anyone other than you. Where your agreement with us includes training on your content, that training serves only your organization.

Where the law of the European Economic Area, the United Kingdom or Switzerland applies, we process information to perform our contract with you, to pursue our legitimate interests in operating and improving the Services and keeping them secure, with your consent where we ask for it, and to comply with the law.

How we share information

Service providers. Companies that host, store, or process information on our behalf, listed with their purpose and location on our sub-processors page. Model providers receive prompts and outputs as stateless API calls and, under their API terms, do not use them to train their models.

Your organization. If you use the Services through your employer or a workspace it administers, that organization's administrators can see the sessions, channels and repositories they connect.

Published results. We publish aggregate results such as benchmark scores and rankings. Published results do not contain personal information. Expert contributions included in a published dataset are published as part of that dataset, without your name unless you ask us to credit you.

Legal and safety. We disclose information when the law requires it, in response to a lawful request, or when we believe disclosure is needed to protect the rights, property or safety of Metaphi AI, our users or others.

Business transfers. If Metaphi AI is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We will tell you before your information becomes subject to a different privacy policy.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Your rights and choices

Account. Write to legal@metaphi.ai to see, correct, export or delete the information in your account. You can withdraw the access you granted to Google or GitHub from those accounts at any time. You can opt out of marketing email through the link in any such email. Service notices about your account continue.

Cookies. We set cookies to keep you signed in and to run Google Analytics. Your browser lets you block or delete cookies, and Google offers an opt-out add-on. Blocking sign-in cookies stops the signed-in parts of the Services from working.

European Economic Area, United Kingdom and Switzerland. You have the right to access, correct, delete, restrict or object to the processing of your personal information, to receive it in a portable form, and to withdraw consent where processing rests on consent. You may also complain to your data protection authority.

California. You have the right to know what personal information we collect, use and disclose, to correct or delete it, and not to be discriminated against for exercising these rights. You may make a request through an authorized agent.

Write to legal@metaphi.ai to exercise any right. We may ask you to verify your identity. We respond within 30 days, or sooner where the law requires.

Retention

We keep information for as long as we need it for the purposes above, then delete or anonymize it. Account information goes within 30 days of a deletion request. Payment and agreement records stay for seven years after the relationship ends, as tax and accounting law require. Expert contributions that form part of a published benchmark stay in the benchmark; we pseudonymize attribution on request. Session records stay as records of the work; write to us to have those that concern you or your workspace deleted. Analytics data is kept for 26 months.

Security

We protect information with encryption in transit and at rest, access limited to the people who need it, and monitoring, on infrastructure that holds SOC 2 Type II reports. The security page describes what our Slack app reads and stores. No system is perfectly secure. If a breach affects your personal information we will tell you and the relevant authorities without undue delay, as the law requires.

International transfers

We are based in the United States and process information there. Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on Standard Contractual Clauses and, where a provider is certified, the EU-US Data Privacy Framework.

Children

The Services are for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, write to us and we will delete it.

Changes

We will post changes to this policy here and update the date below. For material changes we will give notice by email or on the Services at least 30 days before they take effect.

Contact

Questions about privacy: legal@metaphi.ai. Security vulnerabilities: security@metaphi.ai.

Last updated 15 September 2026.