Privacy Policy

1. Our approach to privacy

• Paradime Labs Inc. ("Paradime", "we", "our", or "us") is committed to protecting and respecting your privacy. This privacy policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you ("personal information").
• Before accessing or using our website www.paradime.io (the "Website") or our collaborative data fabric platform (the "Service"), please ensure that you have read and understood our collection, storage, use and disclosure of your personal information as described in this privacy policy.
• If you have any questions about this privacy policy or how we use your personal information, please contact us using the details at the end of this privacy policy.

2. What does this privacy policy cover

• When we collect and use personal information, we do so both on the instructions of our customers, in order to provide them with the Service, and for our own purposes.
• This privacy policy sets out how we use personal information for our own purposes. This privacy notice does not cover our processing of personal information on behalf of a customer of the Service (a "Customer") as a processor.
• If you have been given access to the Service by a Customer, you should ensure that you also read the Customer's privacy notice or policy to understand how your personal information may be used by us on behalf and on the instructions of the Customer.

3. Who is responsible for your personal information

• When we use your personal information for our own purposes, as described in this privacy policy, Paradime is the data controller of the personal information we hold about you. This means that we determine and are responsible for how your personal information is used.
• Where we use personal information in connection with providing the Service on the instructions of the relevant Customer, we do so as a processor on behalf of that Customer, and the Customer will be the controller and responsible for how we use your personal information in those instances.

4. Personal information we collect about you and how we use it

• We collect personal information that you submit directly to us when you use the Paradime Website and Service, or otherwise communicate with us about our services. This can include information you provide to us when you contact us through the Website, by telephone, e-mail or any other means, sign up to receive marketing communications from us, or complete a survey.
• We will collect the following information in this way:
  • Contact information, such as your name, email address, telephone number;
  • Your relationship with a Customer, such as the Customer that employs or otherwise engages you and your role with that Customer;
  • Comments, queries and feedback that you submit to us when you contact us; and
  • Your marketing preferences, such as whether you have signed up to our waitlist or otherwise to receive marketing emails from us.
• We will indicate to you if the provision of certain personal information is mandatory or optional. If you choose not to provide any personal information marked as mandatory, we may not be able to respond to your queries, sign you up for our email alerts or respond to your other requests.
• We will use the information that you provide us to:
  • Communicate with you, including responding to your enquiries or requests for further information about our Service;
  • Communicate with our Customers, where you are listed as the main contact or administrator for that Customer;
  • Improve and promote our Service and Website and develop new features and functionalities of the Service in response to feedback that you have provided to us; and
  • Send you promotional e-mails and newsletters in accordance with your preferences.
• If you are in the UK or European Economic Area, the table at Annex 1 sets out in detail the categories of personal information we collect about you and how we use that information when you use the Paradime Website or Service as well as the legal basis which we rely on to process the personal information and recipients of that personal information.

5. Information we collect about you automatically

• We also automatically collect personal information indirectly about how you access and use the Paradime Website and Service, and information about the device you use to access the Paradime Website and Service or otherwise engage with us. We use this information to provide to you the features and functionality of the Paradime Website and Service, to monitor and improve these and resolve any technical issues. We typically collect this information through cookies or similar technologies (as further detailed below).
• If you are in the UK or European Economic Area, the table at Annex 2 sets out in detail the categories of personal information we collect about you automatically and how we use that information. The table also lists the legal basis which we rely on to process the personal information and recipients of that personal information. For more information on cookies and other tracking technologies we use, please see Section 8 below.
• We may link or combine the personal information we collect about you and the information we collect automatically. This allows us to provide you with a personalised experience regardless of how you interact with us.
• We may anonymise and aggregate any of the personal information we collect (so that it does not directly identify you). We may use anonymised information for purposes that include testing our IT systems, research, data analysis, improving the Paradime Website and Service and developing new services and features. We may also share such anonymised and aggregated information with others.

6. How long we keep your personal information

We will hold your personal information on our systems for the following periods:

• if you access the Service on behalf of a Customer, the period commencing on the date the Customer grants you access and ending 90 days after the Customer withdraws that access;
• otherwise:
  • Improve and promote our Service and Website and develop new features and functionalities of the Service in response to feedback that you have provided to us; and
  • Send you promotional e-mails and newsletters in accordance with your preferences.

In some instances, we may need to retain your personal information for longer, where required to investigate or respond to a complaint or a claim, or where required to comply with applicable laws.

7. Recipients

As required in accordance with how we use your personal information, we may share your personal information with the following:

• Companies in the same group as us. We may share personal information with other entities owned by or under common ownership with Paradime. We do this to coordinate our group-wide strategy for promoting our products and services or to provide customer support.
• Service providers and advisors. We may share your personal information with third party vendors and other service providers that perform services for us or on our behalf, such as providing mailing, email or chat services, authentication or providing analytic services. Please see Annex 3 for further information.
• Purchasers and third parties in connection with a business transaction. Your personal information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a portion of our business.
• Law enforcement, regulators and other parties for legal reasons. We may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property, or personal safety of Paradime, its users or others.

8. Cookies and similar technologies

• The Paradime Website and Service uses cookies and similar tracking technologies to distinguish you from other users of the Paradime Website and Service. Cookies are pieces of code that we transfer to your computer's hard disk to store or collect information. This helps us to provide certain functionalities of the Paradime Website and Service and to monitor and improve these.
• For information about the cookies we use please refer to our Cookie Policy.
• You can access our cookie policy at any time by clicking the floating cookie widget on the Website bottom left or accessing the Privacy section in your profile settings within the Service.
• Other than cookies that are required to operate the Paradime Website or Service, we will only place cookies on your device with your consent. You can also change your preferences in relation to the cookies you consent to receive at any time by clicking the floating cookie widget on the Website bottom left or accessing the Privacy section in your profile settings within the Service.
• You also have the ability to opt out of all cookies by disabling cookies in your browser or mobile settings. Please note that if you choose to refuse all cookies you may not be able to use the full functionality of the Paradime Website or Service. These settings will typically be found in the "options" or "preferences" menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the "Help" option in your browser for more details.
  • Cookie settings in Microsoft Edge
  • Cookie settings in Firefox
  • Cookie settings in Chrome
  • Cookie settings in Safari web and iOS

9. Storing and transferring your personal information

Security

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage. All personal information we collect will be stored on our secure servers. We will never send you unsolicited emails or contact you by phone requesting your credit or debit card information or national identification numbers.

International transfers of your personal information

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third party service providers have operations. If you are located in the UK or European Economic Area ("EEA"), your personal information may be processed outside of the UK or EEA, including in the United States. These international transfers of your personal information will be made pursuant to appropriate safeguards, including:

• Ensuring that the personal data is transferred to countries recognised by the European Commission or the UK Secretary of State (as applicable) as offering an equivalent level of protection; or
• Implementing appropriate contractual safeguards, including Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office.

We will take appropriate steps to ensure that your personal information is treated securely and in accordance with applicable law and this privacy policy regardless of where it is processed.

If you wish to enquire further about the safeguards we use, please contact us using the details set out at the end of this privacy policy.

10. Your rights in respect of your personal information

In accordance with applicable privacy law, you may have the following rights in respect of your personal information that we hold:

Right of access

The right to obtain:

• confirmation of whether, and where, we are processing your personal information;
• information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
• information about the categories of recipients with whom we may share your personal information; and
• a copy of the personal information we hold about you.

Right of portability

The right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.

Right to rectification

The right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.

Right to erasure

The right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.

Right to restriction

The right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.

Right to object and to withdraw consent

You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case.

You may also have the right to withdraw your consent to our processing of your personal information, where our processing is solely based on your consent.

If you wish to exercise one of these rights, please contact us using the contact details at the end of this privacy policy.

You may also have the right to lodge a complaint to your local data protection authority. If you are based in the European Union, information about how to contact your local data protection authority is available here. If you are based in the UK, information about how to contact your local data protection authority is available here.

11. Marketing

• We will only send you promotional e-mails and newsletters if you have signed up to or consented to receive them.
• You can unsubscribe from receiving promotional e-mails and newsletters from us at any time by clicking the "unsubscribe" button at the bottom of each promotional e-mail or newsletter. This will not, however, affect any communications that we need to send to you in relation to the Service, such as emails containing password reset links.

12. Slack

This section applies when a Customer installs the Paradime app for Slack (the "Slack App") in its Slack workspace and when you interact with the Slack App. The Slack App lets you work with DinoAI, Paradime's AI agent, from Slack by mentioning it in a channel or messaging it directly, and delivers notifications and alerts from the Service to the Slack channels a Customer chooses. We process Slack data on the instructions of the Customer that installed the Slack App, as its processor, and in accordance with that Customer's privacy notice.

Slack data we collect

Depending on the permissions the Customer grants when installing the Slack App, we access the following information from Slack:

• Messages and conversation history from channels, direct messages and group direct messages that the Slack App has been added to, including messages that mention the Slack App, replies in threads it participates in, and the surrounding conversation history needed to understand a request;
• Files, canvases, bookmarks and pins shared in those conversations, where you include them in a request to DinoAI;
• Search results when you ask DinoAI to look something up in your Slack workspace;
• Workspace and user profile information, such as workspace, channel and user identifiers, display names, time zones and email addresses, which we use to match Slack users to Paradime accounts and to let Customers invite teammates to Paradime from their Slack user list.

How we use Slack data

• To respond to your requests to DinoAI, including writing and reviewing code, querying the Customer's data warehouse, fixing failed runs and opening pull requests, and to report the outcome back in the same Slack thread;
• To deliver run notifications, system alerts and data quality alerts from the Service to the channels the Customer has chosen;
• To authenticate you and associate your Slack identity with your Paradime account and workspace;
• To operate, secure, troubleshoot and improve the Slack App and the Service.

We do not use Slack data to train large language models, and we do not sell it or use it for advertising.

Large language model providers

DinoAI generates its responses using large language models operated by third-party providers. To fulfil a request, the content of the request, the relevant conversation history, any files you include and the context DinoAI gathers from the Customer's Paradime workspace are sent to the model provider selected for that request. The model providers we use are OpenAI, Anthropic and Google (Gemini); they are also listed in Annex 3. We have zero data retention agreements in place with each of them: they process the content only to return a response to us, do not store it after the response is returned, and do not use it to train their models. Requests to model providers are routed through Portkey, an AI gateway, which keeps a log of each request and response for operational monitoring for 30 days and then deletes it.

Storage and retention

• Slack data we collect, and the transcripts of your DinoAI sessions started from Slack (the messages exchanged, the actions DinoAI took and their results), are stored in Paradime's own databases hosted on Amazon Web Services (Amazon RDS). They are stored in the Customer's Paradime workspace and are visible to that Customer's workspace administrators.
• Session transcripts and Slack data are retained for as long as the Customer's Paradime workspace is active, so that a session can be resumed with its full context, and are deleted in accordance with the retention periods in Section 6 when the Slack App is uninstalled or the Customer's account is closed. A Customer can ask us to delete the Slack data and session transcripts for its workspace at any time using the contact details at the end of this privacy policy.
• Logs of requests to large language model providers are held by Portkey for 30 days and then deleted, as described above.
• Slack user access tokens are stored encrypted and are revoked when the Slack App is uninstalled.

Sharing

Other than with the large language model providers and Portkey as described above, and the infrastructure and service providers listed in Annex 3, we do not share Slack data with third parties except as described in Section 7 (Recipients). Messages DinoAI posts in Slack are visible to everyone with access to that channel or conversation in Slack, in line with the Customer's Slack settings.

Your choices

A Slack workspace administrator can remove the Slack App from individual channels or uninstall it from the workspace at any time, which stops all further collection of Slack data. Customers can manage which channels receive notifications from within Paradime. You can exercise the rights described in Section 10 by contacting us, or through the Customer that installed the Slack App.

13. Links to third party sites

The Paradime Website and Service may, from time to time, contain links to and from third party websites, including those of our partners, advertisers, news publications, social media platforms and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

14. Our policy towards children

The Paradime Website and Service is not directed at persons under 18 and we do not knowingly collect personal information from children under 18. If you become aware that your child has provided us with personal information, without your consent, then please contact us using the details below so that we can take steps to remove such information as quickly as possible.

15. Changes to this policy

We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the "last modified" date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

16. Notice to you

If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on the Paradime Website.

17. Contacting us

• Please contact support@paradime.io.
• This privacy policy was last modified on 6 November, 2026.

Annex 1 - Personal information you provide to us

Contact information

Such as your first name, last name, phone number, and e-mail address and any other personal information you may disclose in the comments box.

Your relationship with a Customer

Such as the Customer that employs or otherwise engages you and your role with that Customer.

Comments, queries and feedback

That you submit to us.

Marketing and newsletter preferences

Such as whether you have signed up to our waitlist, our newsletter or have otherwise agreed to receive promotional e-mails from us.

All personal information set out above

Annex 2 - Personal information collected automatically

Information about how you access and use the Paradime Website and Service

For example, how frequently you access the Paradime Website, the time you access the Paradime Website and how long you use it for, the approximate location that you access the Paradime Website and Service from, the site from which you came and the site to which you are going when you leave the Paradime Website, the pages you visit, the links you click, and other actions you take on the Paradime Website.

Information about your device

We also collect information about the tablet, smartphone or other electronic device you use to connect to the Paradime Website and Service. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to the Paradime Website and Service through the device, your mobile network and your IP address.

Annex 3 - Paradime sub-processors / service providers

Paradime uses the third-party companies below to process personal information when we operate the Website and the Service. We ensure that any service providers that receive personal information from us implement appropriate safeguards to protect that personal information. Further information relating to how these parties safeguard personal information can be found in the Paradime Trust Center.