Ethmos — Privacy Policy.

Effective date: June 26, 2026

Last updated: August 11, 2026

This Privacy Policy explains how Ethmos LLC, a Delaware limited liability company ("Ethmos," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with the Ethmos website, web and mobile applications, email communications, and related services (together, the "Service"). It applies to users worldwide.

This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

For most purposes described here, Ethmos acts as the controller of your personal information. Where we process the content you submit on your behalf and at your direction, we act as a processor of that content, as described in Section 4.

1. Scope

This Privacy Policy covers personal information we process through the Service. It does not cover the practices of third parties that we do not own or control, including any publisher, platform, website, or service you connect to, subscribe to, or visit, each of which is governed by its own privacy policy.

2. Information We Collect

We collect the following categories of information.

2.1. Information you provide directly

Account information, such as your name, email address, and the credentials you use to access your account. If you sign in with a third-party identity provider (such as Google), we receive basic profile information from that provider, such as your name and email address.
User Content, meaning the sources, documents, newsletters, notes, links, and other materials you submit or make available to the Service — most notably email you forward to your private Ethmos inbound address. Forwarded email is ingested in full, including its text, formatting, attachments, and metadata (such as sender and subject), and may include whatever personal information the email itself contains. Mail sent to your inbound address that the Service cannot match to your account or process is reviewed only for operational and abuse-prevention purposes.
Source selections, such as the podcasts you follow, the topics and entities you track, and the accounts you select through the X connection described in Section 5.
Research inputs, such as the topics, theses, and queries you choose to track or ask about, which together form your private, user-specific knowledge base.
Payment information, if you purchase a paid subscription. Payments are handled by our third-party payment processor (Stripe); we do not store full payment-card numbers and receive only limited billing details necessary to administer your subscription.
Communications, such as the information you provide when you contact us for support or otherwise correspond with us.

2.2. Information collected automatically

When you access the Service, we and our service providers may automatically collect certain technical and usage information, such as your IP address, device and browser type, operating system, timestamps, and similar diagnostic data. We also record product usage events — such as opening the app, viewing your feed, and opening or reading an item — which we use to operate, measure, and improve the Service. Emails we send may include standard interaction measurement, such as whether a message was delivered and whether links in it were clicked. We collect this information using cookies and similar technologies, as described in Section 9.

2.3. Information about referral sources

If you arrive at the Service through a partner or referral link or use a promotional code, we may record that attribution — for example, that your signup originated from a particular partner — and use it to administer partner and promotional programs.

3. How We Use Information

We use personal information for the following purposes:

to provide, operate, and maintain the Service, including ingesting and processing your sources, generating Output, and building and maintaining your knowledge base;
to generate and deliver your email Digest and to send you account, security, transactional, and other non-promotional messages relating to the Service;
to authenticate you and to secure and protect your account and the Service;
to process payments, administer subscriptions, and administer promotional and partner programs;
to respond to your support requests and to communicate with you;
to monitor, debug, analyze, and improve the Service, including measuring usage, performance, and reliability;
to detect, investigate, prevent, and address fraud, abuse, security incidents, and violations of our Terms; and
to comply with applicable legal obligations and to establish, exercise, or defend legal claims.

Where the law requires a legal basis for processing (for example, under the laws of the European Economic Area or the United Kingdom), we rely on one or more of the following: performance of our contract with you to provide the Service; our legitimate interests in operating, securing, and improving the Service, balanced against your rights; your consent, where we request it; and compliance with a legal obligation.

4. How We Process the Content You Submit

The content you submit, and the knowledge base built from it, is private to your account. We process it solely to provide the Service to you. We do not sell your User Content. We do not use your User Content to train foundation models for third parties, and we do not authorize our service providers to use your User Content to train their models for the benefit of other customers. Your User Content and knowledge base are maintained on a per-user basis and are not shared with, or made accessible to, other users, except for content you deliberately make public through the sharing features described in Section 6A.

We do not log into, subscribe to, or access your credentialed or paywalled third-party sources on your behalf, and we do not store your third-party subscription credentials. Newsletter and email content enters the Service only when you (or an email rule you configure) forward it to your inbound address. You are responsible for ensuring that your use of any source with the Service is permitted by that source's terms.

5. Connected Sources

5.1. Email forwarding

The Service assigns you a private inbound email address. Content forwarded to that address — by you directly or by forwarding rules you set up with your email provider — is ingested into your account as described in Section 2.1. You control what is forwarded, and you can stop forwarding, remove ingested content, or disable the address by contacting support at any time.

5.2. Podcasts

When you follow a podcast, the Service retrieves that show's publicly available episodes and metadata from the show's public syndication feed and produces transcripts and summaries for your account. This tells us which shows and episodes you follow and engage with; it does not involve any account or credentials of yours with any podcast platform.

5.3. X (Twitter) connection

If you choose to connect an X handle, the Service uses X's public interfaces to retrieve publicly available data only: the public profile associated with the handle you provide, that account's public following list, and public posts of the accounts you select to follow within the Service. We never ask for or receive your X password or login credentials, and we have no access to your private X data (such as direct messages or protected posts). We store the handle you provide, the retrieved public profile data, and your in-product selections (such as which accounts you star or mute). You can disconnect at any time in the Service, after which we stop retrieving data for that handle.

6. The Email Digest

If enabled, we send you a recurring email Digest summarizing your feed, including agent findings and summaries of your connected sources. The Digest reflects your private research activity and is intended for you alone. You can stop receiving the Digest at any time using the unsubscribe mechanism in the email or your account settings; even after you opt out, we may continue to send you non-promotional account, security, and transactional messages necessary to operate the Service. Because the Digest is delivered by email, it will reside in your email account, which is outside our control, and you are responsible for the security of that account.

6A. Public Share Links and Exports

Some features let you deliberately share content from your account — for example, creating a public share link to a summary or exporting a document or image. Content you share through a share link becomes accessible to anyone who has the link, without an Ethmos account, and is displayed with Ethmos attribution. We do not publish your content ourselves; sharing happens only when you use a sharing feature. If you want a share link you created disabled, contact support@ethmos.ai.

7. How We Share Information

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. We share personal information only in the following circumstances:

Service providers. We share personal information with third-party providers that process it on our behalf to operate the Service. As of August 11, 2026, these are — AI model providers: Anthropic (AI processing of your content); transcription: Deepgram and other audio-transcription providers; podcast search and metadata: Listen Notes; authentication: Clerk; payments: Stripe; email delivery: Resend; email routing and storage: Cloudflare; cloud hosting, computing, and databases: Vercel, Railway, and Neon. These providers are permitted to use the information only to provide services to us and are bound by confidentiality and data-protection obligations. We may change providers within these categories over time and will keep this list current.
At your direction. We share information with recipients you choose or as needed to provide a feature you request, including content you make public through share links.
Legal and safety. We may disclose information where we believe in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Ethmos, our users, or others, or to enforce our Terms.
Business transfers. We may disclose or transfer information in connection with, or during negotiations of, a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, subject to this Privacy Policy.

8. International Data Transfers

Ethmos is based in the United States, and we and our service providers may process and store your personal information in the United States and in other countries that may have data-protection laws different from those in your country. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and equivalent mechanisms, to protect that information. You may contact us using the details in Section 13 for more information about these safeguards.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate and secure the Service, to remember your preferences and keep you signed in, and to understand and measure how the Service is used. Some of these technologies are essential for the Service to function, while others help us analyze and improve it. You can manage cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Service. Where required by law, we will obtain your consent before using non-essential cookies.

10. Data Retention

We retain personal information for as long as your account is active and for as long as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and maintain the security and integrity of the Service. When you delete User Content or your account, we delete or de-identify the associated personal information within a reasonable period, except for residual copies retained in routine backups for a limited time or as required by law.

11. Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for the security of your email account.

12. Your Rights and Choices

12.1. All users

You can access and update your account information, delete your User Content, turn the Digest on or off, disconnect connected sources, and request deletion of your account. You may also contact us using the details in Section 13 to make a privacy request. If you believe AI-generated content in the Service contains materially inaccurate statements about you or another identifiable person, you can report it to support@ethmos.ai and we will review and, where appropriate, correct or remove it.

12.2. European Economic Area, United Kingdom, and similar jurisdictions

Subject to applicable law, you have the right to: request access to the personal information we hold about you; request that we correct inaccurate personal information; request that we delete your personal information; restrict or object to certain processing; request portability of your personal information; and, where processing is based on consent, withdraw that consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data-protection supervisory authority.

12.3. California and other U.S. states

Subject to applicable law, residents of California and certain other U.S. states have the right to: know and access the categories and specific pieces of personal information we collect, use, and disclose; request deletion of personal information; request correction of inaccurate personal information; and opt out of the sale or sharing of personal information and certain uses of sensitive personal information. We do not sell or share personal information as those terms are defined under applicable U.S. state privacy laws. You will not be discriminated against for exercising any of these rights.

12.4. Exercising your rights

To exercise any of these rights, contact us using the details in Section 13. We will verify your request as required by applicable law and respond within the timeframes the law requires. You may use an authorized agent to submit a request where the law permits.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

Ethmos LLC 1202 Lexington Ave # 127 New York, NY 10028 support@ethmos.ai

14. Children's Privacy

The Service is not directed to, and is not intended for use by, individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at support@ethmos.ai and we will take appropriate steps to delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by email or through the Service, and we will update the "Last updated" date above. Your continued use of the Service after the changes become effective constitutes your acknowledgment of the revised Privacy Policy.

Ethmos LLC — 1202 Lexington Ave # 127, New York, NY 10028