Privacy Policy

Together AI · agreement dated December 17, 2025 · Official agreement

Read the agreement

50 of 50 cards

Legal Rights & Agreement Rules · Context

The policy covers Together's website, AI services and professional support

This Privacy Policy is issued by Together Computer, Inc., which the policy calls “the Company”. It covers personal data the Company collects, uses and discloses through the website (www.together.ai), through its programmatic APIs and web interfaces that host, use, fine-tune and train large AI models (the “Services”), and through training, migration or other professional services it provides to you (“Professional Support”). It also covers data collected from third-party sources. The page is dated “Updated December 17, 2025”. The policy does not apply to personal data about Company employees or certain contractors and agents acting in similar roles.

Supporting quotations

Updated December 17, 2025
This Privacy Policy (the “Policy”) describes the practices of Together Computer, Inc. (the “Company”, “we”, “our”, or “us”) with respect to personal data that is collected when you access www.together.ai (the “Website”), the Company’s developed and available programmatic APIs and web interfaces that host, use, fine-tune, and train large AI models (the “Service(s)”), and training, migration, or other professional services provided to you by the Company (“Professional Support”)
Applicability: This Policy applies to Personal Data that the Company collects, uses, and discloses and which may include: (i) data collected through the Services, (ii) data collected through Professional Support, (iii) data collected through the Website, and (iv) data collected from third-party sources.
This Policy does not apply to Personal Data about the Company employees as well as certain contractors and agents acting in similar roles.

Qualifications & exceptions

  • The list of covered data is introduced with “may include”, so it is not worded as exhaustive.
  • Employees are excluded outright; contractors and agents are excluded only when they act in roles similar to employees.

Not stated here

  • The Terms of Service, which this policy mentions later, is a separate document and is not supplied here.

Data Access & Collection · Company practice

Together may collect data about you from public databases, commercial sources and the public internet

Besides data you provide, the policy says Together collects personal data from third-party sources. It gives public databases, commercial data sources and the public internet as examples, and says the list is not limited to those.

Supporting quotations

Third-party sources may include but are not limited to public databases, commercial data sources, and the public internet.

Qualifications & exceptions

  • “May include but are not limited to” means these are examples, not a complete list.

Not stated here

  • The policy does not name the commercial data sources or say what kinds of data come from them.

Charges & Financial Obligations · Company practice

Card details are collected by third-party payment processors; Together keeps only confirmation of payment

When you make a purchase, Together uses third-party payment processors to collect your credit card or other financial information. Together says it does not store the card or payment information you provide, only confirmation that payment was made.

Supporting quotations

When you make purchases, we use third-party payment processors to collect credit card or other financial information. The Company does not store the credit card or payment information you provide, only confirmation that payment was made.

Not stated here

  • The policy does not name the payment processors or say how their handling of your payment data is governed.

Use & Processing · Company commitment

Together says it will not train its models on data collected from you without your explicit opt-in

The policy states that Together does not use any data collected from you to train its models without your explicit opt-in and consent. It adds that you may revoke that consent at any time and request deletion of information Together has collected.

Supporting quotations

We do not use any data collected from you to train our models without your explicit opt-in and consent. You may revoke that consent at any time and request deletion of information we have collected.

Qualifications & exceptions

  • The sentence is worded as data “collected from you”; the purposes section later words the same limit as data “we collect, including your Personal Data”.

Not stated here

  • This section does not say how the opt-in is requested or recorded; a later section describes a setting for storing prompts and allowing training.
  • The policy does not say what happens to a model that was already trained on data before consent is revoked.

Retention & Deletion · User right or choice

You can change privacy settings so training data, prompts and model responses are not retained

The policy says you may disable some data collection in the settings for your product. It also says Together lets you change privacy settings on its platform so that it does not retain training data, prompts or model responses for any purpose, and points to Settings > Profile.

Supporting quotations

You may also disable some data collection in the settings for your product. We allow you to tweak your privacy settings in our platform so that we do not retain training data, prompts, or model responses for any purpose. You can tweak your privacy settings by going to Settings > Profile.

Qualifications & exceptions

  • Only “some” data collection can be disabled in product settings.
  • The statement says “for any purpose”; section 2.6 later adds an exception for what is needed to provide the Services.

Not stated here

  • Section 2.6 describes a similar choice under Privacy & Security settings rather than Settings > Profile; the policy does not say whether these are the same control.
  • The policy does not list which data collection can be disabled.

Cross-references

Legal Rights & Agreement Rules · Permission or license

Together may update the policy; it promises notice of changes only when the law requires it

Together may update this policy from time to time to reflect changes in legal, regulatory or operational requirements, its practices and other factors. It asks you to check the policy periodically and says that if a change is unacceptable to you, you should stop interacting with Together. It will notify you of changes only when applicable law requires notice.

Supporting quotations

We may update this Policy from time to time to reflect changes in legal, regulatory, or operational requirements, our practices, and other factors.
If any of the changes are unacceptable to you, you should cease interacting with us. When required under applicable law, we will notify you of any changes to this Policy.

Qualifications & exceptions

  • The promise to notify is conditional: “When required under applicable law”.
  • Section 5 of the policy separately says how updates are published.

Legal Rights & Agreement Rules · Context

The policy defines Personal Data, “you”, Usage Data and the Summary Table

“Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly. “You” means the individual accessing or using the Services, or “the Company” or another legal entity on whose behalf that individual uses them, as applicable. “Usage Data” means data collected automatically, either generated by using the Services or from the Service infrastructure itself, for example the duration of a page visit. The “Summary Table” is the table the policy says describes the types of data collected and the storage, access and deletion options available to you.

Supporting quotations

As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.
Through this Policy, “you” or “your” means the individual accessing or using the Service, or the Company, or other legal entity on behalf of which such individual is accessing or using the Services, as applicable.
“Usage Data” refers to data collected automatically, either generated by the use of the Services or from the Service infrastructure itself (for example, the duration of a page visit).
“Summary Table” refers to the table below which describes the types of data collected and the storage, access, and deletion options available to you.

Qualifications & exceptions

  • “You” can be an organization, not only an individual, when someone uses the Services on its behalf.

Not stated here

  • The definition of “you” uses the defined term “the Company” (which elsewhere means Together) for the entity on whose behalf someone acts; the wording appears to refer to the user's own organization, but the text does not say so.
  • The policy calls the table below a “Summary Table”, but the table that follows appears under the heading “Specific Data Collection and Deletion Policy”; it is read here as the same table.

Cross-references

Data Access & Collection · Company practice

Personal data collected includes username, IP address, Usage Data, cookies, contact details and submitted content

The policy says that while you interact with the Services you may provide personal data that could be used to contact you. It lists, without limiting itself to them: your username for the Services, your IP address, Usage Data, tracking technologies and cookies, contact information, organizational information such as your company title, your email, cookies, content you submit (texts, images or prompts), and other data you elect to send to the Company.

Supporting quotations

While interacting with the Services, you may provide certain Personal Data that could be used to contact you. Personal Data may include, but is not limited to:
Your username for the Services
Your IP address
Usage Data
Tracking technologies and cookies
Contact information
Organizational information like your company title
Your email
Cookies
Content you submit, including texts, images, or prompts
Other data that you elect to send to the Company
As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

Qualifications & exceptions

  • The list is introduced with “may include, but is not limited to”, so other kinds of personal data are not ruled out.
  • “Personal Data” and “Usage Data” have the meanings the policy gives them in section 1.

Not stated here

  • The list does not say which items are required to use the Services and which are optional.

Data Access & Collection · Company practice

Prompts, images and text you submit are personal data, but choosing “No” enables Zero Data Retention

Content you submit, including texts, images or prompts, is listed among the personal data Together may collect. The policy separately says that if you choose “No” when asked whether to store prompts or allow your data to train models, you enable Zero Data Retention (“ZDR”). Under ZDR, the content you submit and any outputs the Services give you are not stored, retained or used for model training, product improvements or any secondary purposes, except as needed to provide the Services to you.

Supporting quotations

Content you submit, including texts, images, or prompts
By choosing “No”, you are enabling Zero Data Retention (“ZDR”) for your use of the Services. Under ZDR, the content you submit, including texts, images, or prompts and any outputs provided to you by the Services are not stored, retained, or used for model training, product improvements, or any secondary purposes except as needed to provide the Services to you.

Qualifications & exceptions

  • ZDR is a choice you make; the policy does not say it is on by default.
  • Section 2.6 says ZDR applies only from the moment you enable it and does not affect data processed earlier.
  • The exception “except as needed to provide the Services to you” leaves room for processing that is necessary to deliver a response.

Not stated here

  • This section does not say what is stored if you have not chosen “No”, beyond the retention limits in section 2.4 and the training opt-in rule.

Use & Processing · Permission or license

Together may use personal data to run and improve the Services, manage accounts, perform contracts and handle requests

The policy says the Company may use personal data to provide, maintain and improve the Services, including monitoring how they are used; to manage your registration as a user; to carry out the purchase contract or any other contract with Together made through the Services; and to attend to and manage your requests. It places a limit before this list: data the Company collects, including personal data, will not be used to train its models without your explicit opt-in and consent.

Supporting quotations

Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent. The Company may use Personal Data for the following purposes:
To provide, maintain, and improve our Services, including to monitor the usage of our Services.
To manage your registration as a user of the Services; the Personal Data you provide can give you access to different functionalities of the Services that are available to you as a registered user.
For the development, compliance, and undertaking of the purchase contract for the products, items, or services you have purchased or of any other contract with us through the Services.
To attend and manage your requests to us.
We do not use any data collected from you to train our models without your explicit opt-in and consent. You may revoke that consent at any time and request deletion of information we have collected.

Qualifications & exceptions

  • The training limit applies to data the Company collects, “including your Personal Data”, which is broader than the earlier wording about data collected from you.

Not stated here

  • The policy does not say whether “improve our Services” can include model training; it states only that training needs explicit opt-in and consent.

Cross-references

Use & Processing · Permission or license

Together may contact you by email, phone, SMS or push notification about updates and security

The Company may use personal data to contact you by email, telephone calls, SMS or other equivalent electronic communication, such as push notifications from a mobile application, about updates or informative communications on the functionality, products or contracted services, including security updates, when necessary or reasonable for their implementation.

Supporting quotations

To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation.

Qualifications & exceptions

  • The purpose is tied to functionality, products or contracted services, and to what is “necessary or reasonable” to implement them.

Use & Processing · Permission or license

Together may send news and offers about similar goods and services unless you have opted out

The Company may use personal data to give you news, special offers and general information about other goods, services and events it offers that are similar to those you have already purchased or inquired about. This does not apply if you have opted not to receive such information.

Supporting quotations

To provide you with news, special offers, and general information about other goods, services, and events, which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information.

Qualifications & exceptions

  • Limited to goods, services and events similar to what you purchased or inquired about.
  • You can stop it by opting out: “unless you have opted not to receive such information”.

Not stated here

  • This section does not explain how to opt out of these communications.

Use & Processing · Permission or license

Together may use your information to evaluate a merger, sale or other transfer of its assets

The Company may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of its assets, whether as a going concern or in bankruptcy, liquidation or a similar proceeding, where personal data about Service users is among the assets transferred.

Supporting quotations

We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Service users is among the assets transferred.

Qualifications & exceptions

  • Applies where personal data about Service users is among the assets transferred.

Use & Processing · Permission or license

Together may use your information for other purposes such as analysis, usage trends and improving products

In addition to the listed purposes, the Company may use your information for other purposes, such as data analysis, identifying usage trends, determining how effective its promotional campaigns are, and evaluating and improving its Services, products, marketing and your experience.

Supporting quotations

We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.

Qualifications & exceptions

  • “Other purposes, such as” introduces examples; it is not a closed list.

Not stated here

  • The policy does not say what other purposes this wording covers or whether model training is one of them (training is separately limited by the opt-in rule).

Sharing & Disclosure · Permission or license

Together may share personal data with service providers, vendors, consultants and business partners

The policy says Together may share your personal data in several situations. First, it may share it with Service Providers, Third-Party Vendors, Consultants and other Business Partners in order to provide Services on its behalf, to monitor and analyze use of the Services, to contact you, and for the reasons stated in its Terms of Service.

Supporting quotations

We may share your Personal Data in the following situations:
We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf, monitor and analyze the use of our Services, contact you, and for the reasons stated in our Terms of Service.

Qualifications & exceptions

  • “May share” describes permission, not a statement that every item is shared in every case.

Not stated here

  • The Terms of Service reasons are in a separate document that is not supplied here.
  • The policy does not name the providers, vendors, consultants or partners or list the categories of data each receives.

Sharing & Disclosure · Permission or license

Together may share or transfer personal data during a merger, asset sale, financing or acquisition

Together may share or transfer your personal data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or part of its business to another company.

Supporting quotations

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.

Qualifications & exceptions

  • The permission covers negotiations as well as completed transactions, and includes financing.

Sharing & Disclosure · Permission or license

Together may share data with other parties for legal duties, rights, safety and preventing wrongdoing

Together may share your personal data with “Other Parties” in order to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Services, protect the personal safety of users of the Services or the public, and protect against legal liability.

Supporting quotations

With Other Parties in order to: - Comply with a legal obligation - Protect and defend the rights or property of the Company - Prevent or investigate possible wrongdoing in connection with the Services - Protect the personal safety of Users of the Services or the public - Protect against legal liability

Not stated here

  • The policy does not define “Other Parties” or say who they are.

Retention & Deletion · Company commitment

Together keeps personal data only as long as necessary, including for legal duties, disputes and enforcement

Together says it will keep your personal data only for as long as necessary for the purposes set out in the policy. It will also keep and use personal data to the extent necessary to comply with legal obligations, resolve disputes, and enforce its legal agreements and policies.

Supporting quotations

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Qualifications & exceptions

  • The retention limit is “as long as is necessary”; the legal, dispute and enforcement uses extend what counts as necessary.

Not stated here

  • The policy does not state specific retention periods.

Retention & Deletion · Company practice

Usage Data is kept for internal analysis, generally for a shorter time

Together will also keep Usage Data, meaning data collected automatically from using the Services or from the Service infrastructure, for internal analysis. Usage Data is generally kept for a shorter period, except when it is used to strengthen security or improve the functionality of the Services, or when Together is legally obligated to keep it longer.

Supporting quotations

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Services, or we are legally obligated to retain this data for longer time periods.
“Usage Data” refers to data collected automatically, either generated by the use of the Services or from the Service infrastructure itself (for example, the duration of a page visit).

Qualifications & exceptions

  • “Generally” shorter: the exceptions are security, improving functionality, and legal obligation.

Not stated here

  • The policy does not say how long “a shorter period” is.

Use & Processing · Company practice

Your data may be processed outside your country, and submitting it counts as agreeing to the transfer

The policy says your information, including personal data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It may therefore be transferred to, and kept on, computers outside your state, province, country or other jurisdiction, where data protection laws may differ from those where you live. The policy says that your consent to the policy followed by your submission of the information represents your agreement to that transfer.

Supporting quotations

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
Your consent to this Policy followed by your submission of such information represents your agreement to that transfer.
As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

Qualifications & exceptions

  • Agreement is described as following from accepting the policy and then submitting information; it is not presented as a separate choice.
  • Section 6 adds legal bases and transfer mechanisms for people in the EEA, Switzerland and the UK.

Not stated here

  • The policy does not list the countries or places where data is processed or the parties involved in processing.

Security & Safeguards · Company commitment

Together says it will secure transferred data and transfer only where adequate controls are in place

Together says it will take all steps reasonably necessary to make sure your data is treated securely and in line with the policy. It also says no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including security of the data.

Supporting quotations

The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data.

Qualifications & exceptions

  • The first promise is limited to steps “reasonably necessary”.

Not stated here

  • The policy does not say what counts as “adequate controls” or how they are checked.

Retention & Deletion · User right or choice

Choosing “No” on storing prompts or allowing training, in Privacy & Security settings, turns on Zero Data Retention

The policy says that when you use the Services, in the Privacy & Security settings, you can control how your personal data is handled by choosing “No” when asked whether you want to store prompts or allow your data to train models. Choosing “No” enables Zero Data Retention (“ZDR”) for your use of the Services. This is separate from, and goes further than, the policy's statement that data it collects will not be used to train its models without your explicit opt-in and consent.

Supporting quotations

When using the Services, in the Privacy & Security settings, you have the ability to control how your Personal Data is handled by choosing “No” when asked if you want to store prompts or allow your data to train models. By choosing “No”, you are enabling Zero Data Retention (“ZDR”) for your use of the Services.
We allow you to tweak your privacy settings in our platform so that we do not retain training data, prompts, or model responses for any purpose. You can tweak your privacy settings by going to Settings > Profile.
Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent.

Qualifications & exceptions

  • Section 1 describes a similar privacy-settings control at Settings > Profile; this section names Privacy & Security settings.

Not stated here

  • The policy does not say whether the Settings > Profile control and the Privacy & Security setting are the same, or what the default answer is.

Retention & Deletion · Restriction or exception

Zero Data Retention applies only going forward, and Together then cannot access, correct, export or delete the data

Under ZDR, the content you submit (texts, images or prompts) and any outputs the Services give you are not stored, retained or used for model training, product improvements or any secondary purposes, except as needed to provide the Services to you. ZDR applies only from the moment you enable it and does not affect data processed earlier. The policy says that, because the data is removed from its systems as soon as processing concludes, Together cannot later access, retrieve, correct, export or delete your personal data on your behalf.

Supporting quotations

Under ZDR, the content you submit, including texts, images, or prompts and any outputs provided to you by the Services are not stored, retained, or used for model training, product improvements, or any secondary purposes except as needed to provide the Services to you.
ZDR applies only from the moment you enable it and does not affect any data processed prior. This means we cannot later access, retrieve, correct, export, or delete your Personal Data on your behalf as it is removed from our systems as soon as processing concludes.

Qualifications & exceptions

  • Everything is subject to “except as needed to provide the Services to you”.
  • ZDR is not retroactive: data processed before you enabled it is unaffected.
  • Access, correction, export and deletion rights described elsewhere in the policy cannot be used for data processed under ZDR.

Not stated here

  • The policy does not say how long data exists while it is being processed, or how ZDR affects any copy needed for a legal obligation.

Cross-references

Account & Service Control · Procedure

Inference: prompts and model responses are accessed through Playground history and deleted in settings

The table (“Summary Table”) lists, for each Together product, the type of personal data, how to access it and how to request deletion. For Inference, prompts and model responses are the personal data listed. Both are accessed through “User History in Playgrounds” and deletion is requested through the “Delete option in settings”.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion
Inference Prompts User History in Playgrounds Delete option in settings
Inference Model responses User History in Playgrounds Delete option in settings
“Summary Table” refers to the table below which describes the types of data collected and the storage, access, and deletion options available to you.
Content you submit, including texts, images, or prompts

Qualifications & exceptions

  • Content you submit, including prompts, is personal data under section 2.1.
  • The table describes access through the Playground; it does not describe another route for people who use the Services only through the API.

Not stated here

  • The table covers only the products and data types it lists; it does not give an access or deletion route for other data, such as account or contact information.
  • The table does not say how long deletion takes or whether backups are also deleted.

Account & Service Control · Procedure

Fine-tuning: training data files and models created are accessed by CLI or Jobs tab and deleted in settings

For Fine-tuning, the table lists two types of personal data: training data files and models created. For both, access is through the CLI or the Jobs tab in the Playground, and deletion is requested through the “Delete option in settings”.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion
Fine-tuning Training data files CLI or Jobs tab in Playground Delete option in settings
Fine-tuning Models created CLI or Jobs tab in Playground Delete option in settings

Not stated here

  • The table does not say whether models created from your training data are deleted together with the data files or separately.

Account & Service Control · Procedure

GPU Clusters and Custom Model Builds: customer data is accessed and deleted by emailing privacy@together.ai

For GPU Clusters and for Custom Model Builds, the table lists “customer provided data” as the personal data. For both products, you access the data and request its deletion by emailing privacy@together.ai.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion
GPU Clusters Customer provided data Email privacy@together.ai Email privacy@together.ai
Custom Model Builds Customer provided data Email privacy@together.ai Email privacy@together.ai

Not stated here

  • The table gives no response time for these email requests and does not say what “customer provided data” includes.

Data Access & Collection · Company practice

The Services are not for children under 13, and Together removes data it learns it collected without parental consent

Together says its Services are not directed to or intended for anyone under 13 and that it does not knowingly collect personal data from anyone under 13. It asks parents or guardians who know their child has provided personal data to contact Together. If Together becomes aware it has collected personal data from a child under 13 without verification of parental consent, it says it will take steps to remove that information from its servers.

Supporting quotations

Our Services are not directed to, or intended for anyone under the age of thirteen (13). We do not knowingly collect Personal Data from anyone under the age of thirteen (13). If you are a parent or guardian, and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of thirteen (13) without verification of parental consent, we will take steps to remove that information from our servers.

Qualifications & exceptions

  • The removal commitment applies when data was collected “without verification of parental consent”.

Not stated here

  • The policy does not describe how parental consent is verified or whether collection from a child under 13 with consent is allowed.

Legal Rights & Agreement Rules · Company practice

Updated policies take effect when posted on the page, and posting is the notice unless the law requires more

When Together updates the policy it says it will publish the updated policy and the date it was last updated, unless additional notification is required under the law. It says it will notify you of changes by posting the new policy on the page, advises you to review the policy periodically, and says changes are effective when posted.

Supporting quotations

We may update our Policy from time to time. When we do, we will publish an updated Policy and the date it was last updated, unless additional notification is required under the law. We will notify you of any changes by posting the new Policy on this page.
You are advised to review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page.

Qualifications & exceptions

  • Section 1 says it will notify you of changes “when required under applicable law”; this section says notice is by posting, with extra notice only where the law requires it.

Not stated here

  • The policy does not say whether you will receive an email or in-product notice of changes beyond what the law requires.

Cross-references

Sharing & Disclosure · Company practice

Data of people in the EEA, Switzerland or UK shared with third parties is protected by standard contractual clauses

The policy says the Company may share information internally or with third parties as described in the policy. When it shares personal data of individuals in the EEA, Switzerland or the UK with third parties, it says it uses a variety of legal mechanisms to safeguard the transfer, including the European Commission-approved standard contractual clauses, with additional safeguards where appropriate.

Supporting quotations

The Company may share information internally or with third parties as further described in this Policy. When we share Personal Data of individuals in the EEA, Switzerland, or UK with third parties, we make use of a variety of legal mechanisms to safeguard the transfer, including the European Commission-approved standard contractual clauses as well as additional safeguards where appropriate.

Qualifications & exceptions

  • Standard contractual clauses are one example (“including”); “where appropriate” limits the additional safeguards.

Not stated here

  • The policy does not list the other legal mechanisms or the additional safeguards.

Account & Service Control · User right or choice

The rights list after the Europe text includes access, correction, updates and deletion of your personal data

After the paragraphs on legal bases and transfers for the EEA, Switzerland and the UK, the policy says that “additionally, you have the following data protection rights”. The first listed right is that you can request access, correction, updates or deletion of your personal data. The list continues in the next items.

Supporting quotations

Additionally, you have the following data protection rights:
You can request access, correction, updates, or deletion of your Personal Data.

Qualifications & exceptions

  • The list appears within the Europe part of the regional supplement and before the California part.
  • Data processed under Zero Data Retention cannot be accessed, corrected or deleted later, according to section 2.6.

Not stated here

  • The text does not say in the list itself whether people outside the EEA, Switzerland and the UK have the same rights.

Account & Service Control · User right or choice

The Europe rights list continues: object to processing, restrict it, or request portability

The next item in the rights list that follows the Europe text says you can object to the processing of your personal data, ask Together to restrict the processing, or request portability of your personal data.

Supporting quotations

You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data, or request portability of your Personal Data.
6. Supplemental Terms and Conditions for Certain Regions

Qualifications & exceptions

  • The list sits under the heading for supplemental terms for certain regions and follows the Europe paragraphs.

Not stated here

  • The text does not say how a request is made for these rights beyond the contact route in the following item.

Legal Rights & Agreement Rules · User right or choice

You have the right to complain to a data protection authority

The policy lists a right to complain to a data protection authority about Together's collection and use of your personal data.

Supporting quotations

You have the right to complain to a data protection authority about our collection and use of your Personal Data.

Not stated here

  • The policy does not name a specific authority.

Account & Service Control · Procedure

Some rights are exercised in account settings; other privacy rights go through privacy@together.ai

The policy says some of these rights may be exercised through your account settings, as described in the Summary Table. To exercise any other privacy rights that are not specifically listed, it says you can contact privacy@together.ai.

Supporting quotations

Some of these rights may be exercised through your account settings, as described in the Summary Table. In order to exercise any other privacy rights not specifically enumerated here, you may contact privacy@together.ai.
“Summary Table” refers to the table below which describes the types of data collected and the storage, access, and deletion options available to you.

Qualifications & exceptions

  • Applies to the rights listed in this part of the policy; the Summary Table is the table in section 2.7.

Not stated here

  • The text does not give a response time for requests sent to privacy@together.ai outside the California procedure.

Cross-references

Legal Rights & Agreement Rules · Context

The California statement applies to California residents and people whose data was collected in California

The California part of the policy applies solely to residents of California or to individuals whose information was collected in California. Together says it adopted the notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Terms defined in the CCPA have the CCPA meaning when used in this statement. The CCPA gives individuals who live in California, or whose personal data was collected there, specific rights over their personal data.

Supporting quotations

California This Statement applies solely to residents of California or individuals whose information has been collected in California. The Company has adopted and included this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms used in this Statement that are defined in the CCPA have the same meaning given therein.
YOUR RIGHTS AND CHOICES
The CCPA provides individuals residing in California or whose Personal Data was collected in California with specific rights regarding their Personal Data. The below describes your rights and how you may exercise them.
As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

Qualifications & exceptions

  • Terms defined in the CCPA take their CCPA meaning in this statement, even where the policy defines the same term differently elsewhere (for example “Personal Data” in section 1).

Not stated here

  • The text of the CCPA is not supplied here; this card explains only what the policy says about it.

Sharing & Disclosure · Company commitment

Together says it does not sell personal data as the CCPA defines a sale, and will notify you if that changes

The policy states that Together does not sell your personal data as defined under the CCPA. If it sells personal data in the future, it says it will notify you and you may have the right to opt out of the sale. Separately, it says you have the right to opt out of any sale of personal data as defined by the CCPA, and that the Company does not sell your information.

Supporting quotations

SELLING INFORMATION
The Company does not sell your Personal Data as defined under CCPA. If, in the future, we do sell your Personal Data, we will notify you, and you may have the right to opt out of such sale.
Do Not Sell Opt-Out Rights
You have the right to opt out of any sales of Personal Data as defined by the CCPA. However, the Company does not sell your information.

Qualifications & exceptions

  • The statement is about “sale” as the CCPA defines it.
  • A future sale is described conditionally: “may have the right to opt out”.

Not stated here

  • The policy does not say what Together counts as a sale, beyond the CCPA definition, and does not describe other kinds of disclosure in this statement.

Account & Service Control · User right or choice

California access right: a report of the data collected, its sources, purposes, recipients and specific data points

You can ask Together to disclose information about its collection and use of your personal data over the past twelve months. Once Together receives and confirms a verifiable request, it must disclose: the categories of personal data collected about you; the categories of sources; the business or commercial purpose for collecting, or if applicable selling, the data; the categories of third parties with whom it shares the data; and the specific pieces of personal data collected about you. If it disclosed your data for a business purpose or sold it, it must also give separate lists of the data categories sold to each category of recipient and the categories provided to each category of recipient for business purposes.

Supporting quotations

Access to Specific Information and Data Portability Rights
You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Data over the past twelve (12) months. Once the Company receives and confirms your verifiable information access request, the Company must disclose to you: (i) the categories of Personal Data we collected about you; (ii) the categories of sources for the Personal Data we collected about you; (iii) our business or commercial purpose for collecting or, if applicable, selling that Personal Data; (iv) the categories of third parties with whom we share that Personal Data; (v) the specific data points or pieces of Personal Data we collected about you. If we disclosed for a business purpose or sold your Personal Data, the Company must also provide separate lists that: (i) identify the personal data categories that were sold to each category of recipient in connection with sales of your Personal Data; and (ii) identify the personal data categories that were provided to each category of recipient in connection with business purposes disclosures of your Personal Data.

Qualifications & exceptions

  • Covers the past twelve months and requires a verifiable request.
  • The separate lists apply only if the data was disclosed for a business purpose or sold.

Account & Service Control · User right or choice

California deletion right: Together will delete your data and direct service providers to, unless an exception applies

You can ask Together to delete personal data it collected from you or retained. Unless a limited exception applies, once it receives and confirms a verifiable deletion request it says it will delete your personal data from its records and direct its service providers to delete it. If it decides it must deny the request, it will notify you promptly.

Supporting quotations

Deletion Request Rights
You have the right to request that the Company delete any of your Personal Data that we collected from you and/or retained. Unless subject to a certain limited exception, once the Company receives and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your Personal Data from our records. The Company will notify you promptly if it determines it must deny your deletion request.

Qualifications & exceptions

  • Subject to a “certain limited exception” and to confirmation of a verifiable request.

Not stated here

  • The policy does not say which exceptions may apply.
  • Data processed under Zero Data Retention cannot be deleted later according to section 2.6.

Account & Service Control · Procedure

California requests are made by emailing privacy@together.ai, with limits on how often you can ask

To exercise the California access, data portability, deletion or do-not-sell opt-out rights, you can submit a verifiable consumer request by emailing privacy@together.ai. You may make a verifiable consumer request for access or data portability only up to two times in a twelve-month period. You may make a verifiable do-not-sell opt-out request at any time.

Supporting quotations

EXERCISING YOUR RIGHTS
To exercise your access, data portability, and deletion rights or do not sell opt-out rights described above, you may submit a verifiable consumer request by sending an email to privacy@together.ai.
You may only make a verifiable consumer request for access or data portability up to two times within a twelve-month period. You may make a verifiable do not sell opt-out request at any time.

Qualifications & exceptions

  • Two requests in twelve months applies to access and data portability requests; it is not stated for deletion requests.

Account & Service Control · Restriction or exception

California requests must be verifiable; only you or a registered authorized person may make them

A request must give enough information for Together to reasonably verify that you are the person whose data it collected, or an authorized representative, and must describe the request in enough detail for Together to understand and respond. Together cannot respond or provide data if it cannot verify your identity or authority and confirm the data relates to you. You do not need to create an account to make a request, and Together says it will use information in a request only to verify the requestor's identity or authority. Only you, or a person registered with the California Secretary of State whom you authorize, may make a request about your data. You may also make a request on behalf of your minor child.

Supporting quotations

Any such request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Data or an authorized representative thereof; and (ii) describe your request with sufficient detail such that we may understand, evaluate, and respond to it. The Company cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.
Making a verifiable consumer request does not require you to create an account with the Company. The Company will only use Personal Data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Data.
You may also make a verifiable consumer request on behalf of your minor child.

Qualifications & exceptions

  • An authorized person must be registered with the California Secretary of State.

Not stated here

  • The policy does not say what information is considered sufficient for verification.

Account & Service Control · Company commitment

California requests: Together aims to respond within 45 days, extendable to 90 days with written notice

Together says it endeavors to respond to a verifiable consumer request within 45 days of receiving it. If it needs more time, up to 90 days, it will tell you in writing the length of the extension and the reason. Responses and other communications will be delivered to you in writing by email.

Supporting quotations

Response Timing and Format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. The Company will deliver any required or requested responses or other communications in writing to you by email.

Qualifications & exceptions

  • “Endeavor” expresses an aim rather than a guaranteed deadline.
  • Applies to verifiable consumer requests under the California statement.

Account & Service Control · Company commitment

California responses cover the prior twelve months, explain any refusal, and give portable data in a usable format

Disclosures Together provides will cover only the twelve-month period before it received the verifiable request. If applicable, the response will explain any reasons it cannot comply. For data portability requests, it will provide your personal data in a format that is readily usable and transferable.

Supporting quotations

Any disclosures we provide will only cover the twelve-month period preceding the verifiable consumer request’s receipt. If applicable, the response we provide will also explain any reasons we cannot comply with a request. For data portability requests, the Company will provide your Personal Data in a format that is readily usable and transferable.
As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

Qualifications & exceptions

  • Disclosures are limited to the twelve months preceding receipt of the request.

Charges & Financial Obligations · Company commitment

California requests are free unless excessive, repetitive or manifestly unfounded, with a cost estimate first

Together says it does not charge a fee to process or respond to a verifiable consumer request unless requests become excessive, repetitive or manifestly unfounded, or as otherwise permitted by the CCPA. If it decides a request warrants a fee, it will tell you and give you a cost estimate before completing the request. Separately, access or data portability requests are limited to two in a twelve-month period.

Supporting quotations

The Company does not charge a fee to process or respond to your verifiable consumer request unless such requests become excessive, repetitive, or manifestly unfounded or as otherwise permitted by the CCPA. If we determine that a request warrants charging a fee, we will notify you and provide you with a cost estimate before completing your request.
You may only make a verifiable consumer request for access or data portability up to two times within a twelve-month period.

Qualifications & exceptions

  • “Or as otherwise permitted by the CCPA” leaves room for fees the policy does not describe.

Not stated here

  • The policy does not state how much a fee could be or how it is calculated.

Account & Service Control · Procedure

Questions and requests to exercise rights can be sent to privacy@together.ai

If you have questions about the policy, or want to exercise your rights under the policy or applicable law, you can contact Together at privacy@together.ai.

Supporting quotations

7. Contact Us
If you have any questions about this Policy or would otherwise like to exercise your rights under this Policy or applicable law, you can contact us at privacy@together.ai.

Not stated here

  • The policy gives an email address only; it does not list a postal address or response time in this section.