CubeDelta Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how Industrial Shaman (“Industrial Shaman,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information in connection with CubeDelta websites, account systems, restricted-access areas, verification and communication services, support, and related offerings collectively referred to as the “Services.”

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies when Industrial Shaman determines how and why personal information is handled in connection with the Services.

Certain Services may be provided under a separate customer, account, project, order, or other written agreement. Where such an agreement contains privacy terms that conflict with this Privacy Policy, the separate agreement controls for the information and Services it specifically covers.

When Industrial Shaman handles personal information solely on behalf of an organization or customer, that organization or customer may determine how the information is used. Its privacy notice, policies, and relationship with you may also apply.

2. Personal Information We Collect

The information we collect depends on how you interact with CubeDelta, the Services you use, and the applicable customer, account, or project relationship.

Information you provide

We may collect information you provide directly, including:

• Name, email address, telephone number, organization, title, and other contact information.
• Account registration, administration, and access information.
• Information used to confirm identity, authority, eligibility, or access.
• Requests, instructions, preferences, and form submissions.
• Support requests, feedback, correspondence, and other communications.
• Administrative, commercial, or relationship information associated with an account, customer, organization, or project.
• Files, records, prompts, messages, content, data, and other materials submitted through the Services.
• Any other information you choose to provide.

You should provide only information that is relevant and that you are authorized to submit.

Information collected through use of the Services

We may collect information concerning your connection to and use of the Services, including:

• Internet Protocol address.
• Approximate location derived from network information.
• Device, browser, operating system, and connection information.
• Dates and times of access.
• Pages, features, communications, and Services used.
• Account-access, authentication, session, and security-related activity.
• Referring pages and general interaction information.
• Cookies and similar information, where applicable.
• Records generated when the Services process requests or account activity.

Information received from other sources

We may receive information from:

• Organizations that establish, sponsor, purchase, administer, or manage access to the Services.
• Account administrators and authorized representatives.
• Communications, verification, support, security, and other service providers.
• Business partners or other parties acting at your direction.
• Publicly available sources, where permitted by law.
• Parties involved in an actual or proposed business transaction.

We may combine information received from these sources with other information maintained in connection with the Services.

3. Private Account and Project Materials

Files, data, records, prompts, messages, instructions, content, outputs, and other materials submitted, processed, or made available within restricted-access portions of CubeDelta are treated as private account or project materials.

We may use private account or project materials only as reasonably necessary to:

• Provide and administer the applicable Services.
• Perform requested or authorized work.
• Fulfill authorized requests and instructions.
• Maintain account and service security.
• Provide support and resolve problems.
• Maintain, evaluate, and improve the Services.
• Generate Derived Data and Model Work Product as described in Section 6.
• Enforce applicable agreements.
• Comply with law and valid legal obligations.
• Protect the rights, security, and interests of users, customers, Industrial Shaman, and others.
• Carry out purposes authorized by the applicable customer, account, or project relationship.

Private account or project materials are not made public merely because they are submitted through CubeDelta.

Access may nevertheless be available to authorized account administrators, customer representatives, personnel, contractors, and service providers where reasonably necessary for the applicable relationship or purpose.

We do not disclose private account or project materials to unrelated third parties for their independent advertising or promotional purposes.

The creation of Derived Data, Model Work Product, or Developed Models does not make the original private materials public, transfer ownership of those original materials to Industrial Shaman, or authorize disclosure of those original materials in identifiable or customer-linked form.

4. How We Use Personal Information

We may use personal information to:

• Establish, administer, maintain, and close accounts.
• Confirm identity, authority, eligibility, or permitted access.
• Provide, personalize, maintain, and improve the Services.
• Process requests, instructions, submissions, and authorized activities.
• Perform work requested or authorized by a user, customer, account, or project.
• Communicate about accounts, access, support, security, policy changes, and service matters.
• Respond to questions, requests, complaints, and support inquiries.
• Monitor and protect the security, integrity, availability, and lawful use of the Services.
• Detect, investigate, prevent, and address fraud, misuse, unauthorized access, or other harmful activity.
• Diagnose and resolve errors, interruptions, and service problems.
• Maintain internal administrative, accounting, compliance, and business records.
• Enforce agreements, policies, and legal rights.
• Comply with applicable laws, court orders, regulatory requirements, and legal processes.
• Protect users, customers, Industrial Shaman, CubeDelta, service providers, and others.
• Generate Derived Data and Model Work Product.
• Develop, evaluate, maintain, and improve models, products, services, methods, procedures, and capabilities as described in Section 6.
• Support an actual or proposed financing, restructuring, acquisition, sale, merger, or other corporate transaction.
• Carry out any other purpose disclosed when the information is collected or authorized by you.

5. Legal Grounds for Processing

Where applicable law requires a legal ground for processing personal information, we rely on one or more of the following:

• Performance of a contract or steps requested before entering a contract.
• Our legitimate interests in operating, supporting, securing, developing, and improving the Services.
• The legitimate interests of an applicable customer or organization.
• Compliance with legal obligations.
• Protection of legal rights, security, property, and the safety of individuals or organizations.
• Your consent.
• Any other lawful basis recognized under applicable law.

Where processing is based on consent, you may withdraw that consent as permitted by law. Withdrawal does not affect processing that was lawful before the withdrawal.

6. Derived Data, Model Work Product, and Developed Models

In providing the Services and performing work for users, customers, accounts, organizations, or projects, Industrial Shaman may create Derived Data, Model Work Product, and Developed Models.

Derived Data

“Derived Data” means information generated from, informed by, or resulting from our authorized processing of private account or project materials, but only to the extent that the information:

• Does not identify and cannot reasonably be linked to or used to infer information about a particular person, household, account, customer, organization, or project.
• Does not reproduce private account or project materials.
• Does not permit a reasonable recipient to reconstruct private account or project materials.
• Does not reveal customer-specific confidential information.

Derived Data may include generalized patterns, trends, statistics, measurements, classifications, evaluations, comparisons, relationships, transformations, and other generalized results.

Information does not become Derived Data merely because it has been summarized, transformed, encoded, labeled, separated from direct identifiers, or assigned a different name. Information that remains reasonably linkable to a person, household, account, customer, organization, or project will continue to be treated as personal information or private account or project material, as applicable.

Model Work Product

“Model Work Product” means generalized knowledge, training results, evaluation results, research results, testing results, procedures, methods, techniques, workflows, specifications, improvements, documentation, concepts, and know-how developed, discovered, or refined through our work.

Model Work Product excludes:

• Private account or project materials.
• Personal information.
• Information reasonably linkable to a particular account, customer, organization, or project.
• Customer-specific confidential information.
• Materials that reproduce or permit reconstruction of private account or project materials.

Developed Models

“Developed Models” means data models and related products, services, capabilities, methods, or systems created, trained, tested, evaluated, validated, adapted, maintained, or improved using Derived Data or Model Work Product.

Subject to applicable law and any controlling written customer agreement, Industrial Shaman may:

• Use, retain, reproduce, combine, analyze, and otherwise process Derived Data.
• Use Derived Data and Model Work Product to create, train, test, evaluate, validate, adapt, maintain, improve, and develop other data models.
• Use training results, testing results, evaluation results, procedures, methods, techniques, and generalized lessons developed through our work to improve or develop other models.
• Develop products, services, methods, procedures, capabilities, and commercial offerings using Derived Data or Model Work Product.
• Combine Derived Data and Model Work Product with information or materials obtained from other projects or sources.
• Use Derived Data and Model Work Product in work performed for other customers.
• Develop models and services that are not exclusive to the customer whose materials contributed to the underlying work.
• License, distribute, provide, and commercialize Model Work Product and Developed Models.
• Make Developed Models available to other customers or third parties.
• Use general knowledge, skills, experience, concepts, methods, procedures, and know-how acquired while providing the Services.

Industrial Shaman owns the Model Work Product and Developed Models, including improvements and intellectual-property rights associated with them. Users and customers retain their respective rights in their original private account or project materials.

No user or customer acquires ownership, exclusivity, attribution rights, approval rights, audit rights, or a right to compensation merely because its materials, instructions, project, account activity, or use of the Services contributed to Derived Data, Model Work Product, or a Developed Model.

Industrial Shaman will not use private account or project materials in identifiable or customer-linked form to develop or operate a model specifically for an unrelated customer unless that use is expressly permitted by:

• An applicable customer or project agreement.
• Separate written authorization.
• A direction from the customer or authorized account administrator.
• Applicable law.

We will take reasonable measures designed to maintain qualifying Derived Data in deidentified form. We will not attempt to reidentify it or associate it with a particular person, household, account, customer, organization, or project except:

• To evaluate whether deidentification safeguards remain effective.
• To investigate security, fraud, misuse, or legal compliance.
• With appropriate authorization.
• As otherwise permitted or required by law.

Where we provide Derived Data to another party, we may require that party to maintain it in deidentified form and not attempt to reidentify it, except as permitted by applicable law.

This section does not authorize the sale, sharing, or disclosure of personal information in conflict with this Privacy Policy, an applicable written agreement, or applicable law.

7. Deidentified and Aggregated Information

We may create and use information that has been aggregated or deidentified so that it cannot reasonably be associated with a particular individual, household, account, customer, organization, or project.

We may use and disclose such information for lawful business purposes, including:

• Service administration.
• Security.
• Analysis.
• Planning.
• Research.
• Reporting.
• Model development.
• Product and service development.
• Quality evaluation.
• Improvement of methods, procedures, and capabilities.

Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except for lawful purposes such as evaluating whether deidentification measures remain effective.

8. How We Disclose Personal Information

We may disclose personal information in the following circumstances.

Service providers

We may provide information to companies and individuals that perform services on our behalf, such as:

• Hosting.
• Communications.
• Support.
• Account administration.
• Verification.
• Security.
• Analytics.
• Professional services.
• General business operations.

These providers may handle information only as permitted by their agreements with us and applicable law.

Organizations and account administrators

Where an account is established, sponsored, purchased, or administered by an organization, we may disclose account and service-related information to that organization and its authorized administrators.

The organization may be able to administer access, receive service information, manage users, and exercise control over information associated with the organizational account.

Professional advisers

We may disclose information to attorneys, accountants, auditors, insurers, financial advisers, and other professional advisers where reasonably necessary to obtain advice, protect interests, comply with obligations, or conduct legitimate business activities.

Legal, security, and protective purposes

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, subpoena, court order, or other legal process.
• Respond to lawful requests from public authorities.
• Investigate or prevent fraud, abuse, security incidents, or unlawful activity.
• Enforce agreements or protect legal rights.
• Protect the rights, property, security, or safety of users, customers, Industrial Shaman, CubeDelta, service providers, or others.
• Establish, exercise, or defend legal claims.

Business transactions

Information may be disclosed, transferred, or reviewed in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, reorganization, insolvency, or similar business transaction.

Any recipient will remain subject to applicable confidentiality and legal obligations.

At your direction

We may disclose information when you request, direct, authorize, or consent to the disclosure.

9. Sale, Sharing, and Advertising

Industrial Shaman does not sell private account or project materials.

Industrial Shaman does not disclose private account or project materials to third parties for their independent advertising or promotional purposes.

We do not sell personal information for money.

Certain privacy laws may define “sale,” “sharing,” or “targeted advertising” more broadly than ordinary commercial usage. Where applicable law treats a practice as a sale, sharing, or targeted advertising activity, we will provide any notice, consent mechanism, or opt-out method required by law.

We do not use private account or project materials to advertise unrelated third-party products or services.

10. Mobile Information and Messaging Consent

Mobile telephone numbers, messaging opt-in information, and messaging consent records will not be sold, rented, or disclosed to third parties or affiliates for their independent marketing or promotional purposes.

We may provide mobile information to service providers solely as necessary to:

• Deliver requested communications.
• Administer the applicable account or service.
• Provide verification.
• Provide support.
• Protect security.
• Comply with law.

When you provide a telephone number and affirmatively opt in, we may use that number for account verification, account access, support, security, and other service-related SMS or voice communications.

Message frequency varies. Message and data rates may apply.

You may opt out of SMS messages by replying STOP. You may request assistance by replying HELP or contacting us at services@cubedelta.com.

We may send one final message confirming an opt-out request.

You may withdraw consent to voice communications by telling us during a call or contacting us at services@cubedelta.com.

Opting out of one communication method does not necessarily close your CubeDelta account or prevent communications through other permitted channels.

11. Cookies and Similar Technologies

CubeDelta may use cookies and similar technologies for:

• Essential service operation.
• Account continuity.
• Preferences.
• Security.
• Service administration.
• General analysis.

Browser and device controls may permit you to restrict or delete certain stored information. Restricting technologies necessary for account access or service operation may affect the availability or functionality of portions of the Services.

Where applicable law requires consent for nonessential technologies, we will request that consent before using them.

12. Service and Marketing Communications

We may send communications that are reasonably necessary to administer an account or provide requested Services, including:

• Access notices.
• Verification messages.
• Security alerts.
• Support responses.
• Policy notices.
• Service announcements.
• Other service-related communications.

Where we send optional promotional email, you may unsubscribe through the instructions in the message or by contacting us.

Unsubscribing from optional promotional communications does not prevent us from sending necessary account, legal, security, or service communications.

13. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide and administer the Services.
• Maintain account, project, and customer records.
• Fulfill applicable agreements.
• Protect service integrity and security.
• Investigate and prevent fraud or misuse.
• Resolve disputes and enforce rights.
• Meet legal, tax, accounting, insurance, and regulatory obligations.
• Preserve information relevant to actual or reasonably anticipated legal claims.
• Meet other legitimate business needs.

Retention periods vary according to:

• The nature of the information.
• The applicable relationship.
• Legal requirements.
• Security considerations.
• Whether the information remains necessary for the purpose for which it was collected.

Information may remain in protected archival or backup records for a limited period after deletion from active records.

Derived Data and Model Work Product may be retained for as long as they remain useful for the purposes described in this Privacy Policy, subject to applicable law and any controlling written customer agreement.

Deletion of personal information or private account or project materials does not require deletion of Derived Data or Model Work Product that no longer identifies, is reasonably linkable to, or reveals confidential information about a person, account, customer, organization, or project.

Unless required by applicable law or a controlling written agreement, Industrial Shaman is not required to reverse, retrain, reconstruct, or modify a Developed Model solely to remove the non-identifiable influence of information that was lawfully used before the underlying personal information or private materials were deleted.

We may retain deidentified or aggregated information that no longer identifies an individual, account, customer, organization, or project.

14. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against:

• Unauthorized access.
• Loss.
• Misuse.
• Alteration.
• Destruction.
• Unauthorized disclosure.

No security measure, transmission method, or storage system can be guaranteed to be completely secure.

You are responsible for:

• Maintaining the confidentiality of your account credentials.
• Using reasonable precautions.
• Securing devices used to access the Services.
• Promptly notifying us if you believe an account or information has been compromised.

Where required by law, we will provide notice of qualifying security incidents to affected individuals or appropriate authorities.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Confirm whether we process your personal information.
• Request access to personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Obtain a portable copy of certain personal information.
• Request information about the categories, sources, purposes, and recipients of personal information.
• Opt out of qualifying sales, sharing, targeted advertising, or profiling.
• Limit certain uses or disclosures of sensitive personal information.
• Withdraw consent where processing is based on consent.
• Object to or request restriction of certain processing.
• Appeal a decision concerning a privacy request.
• Lodge a complaint with an appropriate privacy or data-protection authority.

These rights are subject to applicable definitions, exceptions, identity-verification requirements, security requirements, and legal or business retention obligations.

We will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right.

Derived Data and privacy requests

Privacy requests apply to personal information within the scope of applicable law.

We are not required to reidentify deidentified information solely to respond to a request.

A request to delete personal information does not automatically apply to Derived Data, Model Work Product, or Developed Models that do not identify and are not reasonably linkable to the requesting individual.

Unless required by applicable law, a deletion request does not require Industrial Shaman to:

• Delete generalized training results.
• Delete generalized testing or evaluation results.
• Delete procedures, methods, or know-how.
• Reverse completed development work.
• Retrain or reconstruct a Developed Model.
• Remove the non-identifiable influence of lawfully processed information.

Submitting a request

To submit a privacy request, email services@cubedelta.com with the subject line Privacy Request.

Please identify:

• Your name.
• The email address associated with your account or interaction.
• Your state or country of residence.
• The right you wish to exercise.
• Information reasonably necessary to identify the relevant account or records.

Do not include unnecessary passwords, identification numbers, financial information, or other sensitive information in the initial request.

We may request additional information reasonably necessary to verify your identity, authority, or the scope of the request.

We will use verification information only for verification, security, fraud prevention, and legal compliance.

Authorized agents

Where permitted by law, you may designate an authorized agent to make a request on your behalf.

We may require evidence of the agent’s authority and may contact you directly to confirm the request.

Appeals

Where applicable law provides a right to appeal, you may appeal our decision by emailing services@cubedelta.com with the subject line Privacy Appeal and explaining the basis of the appeal.

16. International Processing

Personal information may be processed in countries or jurisdictions in which Industrial Shaman or its service providers operate.

Those locations may have privacy laws that differ from those in your place of residence.

Where applicable law requires safeguards for an international transfer, we will use a legally recognized transfer mechanism or other appropriate protection.

17. Children

CubeDelta is not directed to children under 13, and we do not knowingly collect personal information online from children under 13.

If we learn that personal information was collected from a child under 13 in circumstances requiring parental authorization, we will take reasonable steps to delete or otherwise handle the information as required by law.

A parent or legal guardian who believes a child has provided personal information may contact services@cubedelta.com.

18. Third-Party Services and Links

The Services may refer or link to websites, services, or resources operated by third parties.

Their privacy practices are governed by their own notices and agreements.

Industrial Shaman is not responsible for the privacy, security, content, or conduct of an unaffiliated third party.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Law.
• Business practices.
• The Services.
• Our handling of information.

The revised Privacy Policy will be posted with a new “Last updated” date.

Where required by law, we will provide additional notice or request consent before a material change becomes effective.

20. Contact

Questions, concerns, and privacy requests may be directed to:

Industrial Shaman — CubeDelta

Email: services@cubedelta.com