Privacy Policy

Account & Service Control · Procedure

Inference: prompts and model responses are accessed through Playground history and deleted in settings

The table (“Summary Table”) lists, for each Together product, the type of personal data, how to access it and how to request deletion. For Inference, prompts and model responses are the personal data listed. Both are accessed through “User History in Playgrounds” and deletion is requested through the “Delete option in settings”.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion

Inference Prompts User History in Playgrounds Delete option in settings

Inference Model responses User History in Playgrounds Delete option in settings

“Summary Table” refers to the table below which describes the types of data collected and the storage, access, and deletion options available to you.

Content you submit, including texts, images, or prompts

Qualifications & exceptions

• Content you submit, including prompts, is personal data under section 2.1.
• The table describes access through the Playground; it does not describe another route for people who use the Services only through the API.

Not stated here

• The table covers only the products and data types it lists; it does not give an access or deletion route for other data, such as account or contact information.
• The table does not say how long deletion takes or whether backups are also deleted.

Cross-references

• referred to by (model-proposed): Some rights are exercised in account settings; other privacy rights go through privacy@together.ai — The rights paragraph says some rights are exercised through account settings “as described in the Summary Table”, the table in section 2.7 that lists access and deletion routes per product.

Account & Service Control · Procedure

Fine-tuning: training data files and models created are accessed by CLI or Jobs tab and deleted in settings

For Fine-tuning, the table lists two types of personal data: training data files and models created. For both, access is through the CLI or the Jobs tab in the Playground, and deletion is requested through the “Delete option in settings”.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion

Fine-tuning Training data files CLI or Jobs tab in Playground Delete option in settings

Fine-tuning Models created CLI or Jobs tab in Playground Delete option in settings

Not stated here

• The table does not say whether models created from your training data are deleted together with the data files or separately.

Account & Service Control · Procedure

GPU Clusters and Custom Model Builds: customer data is accessed and deleted by emailing privacy@together.ai

For GPU Clusters and for Custom Model Builds, the table lists “customer provided data” as the personal data. For both products, you access the data and request its deletion by emailing privacy@together.ai.

Supporting quotations

Together Product Type of Personal Data How to access How to request deletion

GPU Clusters Customer provided data Email privacy@together.ai Email privacy@together.ai

Custom Model Builds Customer provided data Email privacy@together.ai Email privacy@together.ai

Not stated here

• The table gives no response time for these email requests and does not say what “customer provided data” includes.

Account & Service Control · User right or choice

The rights list after the Europe text includes access, correction, updates and deletion of your personal data

After the paragraphs on legal bases and transfers for the EEA, Switzerland and the UK, the policy says that “additionally, you have the following data protection rights”. The first listed right is that you can request access, correction, updates or deletion of your personal data. The list continues in the next items.

Supporting quotations

Additionally, you have the following data protection rights:

You can request access, correction, updates, or deletion of your Personal Data.

Qualifications & exceptions

• The list appears within the Europe part of the regional supplement and before the California part.
• Data processed under Zero Data Retention cannot be accessed, corrected or deleted later, according to section 2.6.

Not stated here

• The text does not say in the list itself whether people outside the EEA, Switzerland and the UK have the same rights.

Cross-references

• contrast (model-proposed): Zero Data Retention applies only going forward, and Together then cannot access, correct, export or delete the data — Section 2.6 says that under Zero Data Retention Together cannot later access, retrieve, correct, export or delete the data, while the Europe rights list says you can request access, correction, updates or deletion. The policy does not reconcile them; the cards read ZDR as removing the data available for those requests.

Account & Service Control · User right or choice

The Europe rights list continues: object to processing, restrict it, or request portability

The next item in the rights list that follows the Europe text says you can object to the processing of your personal data, ask Together to restrict the processing, or request portability of your personal data.

Supporting quotations

You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data, or request portability of your Personal Data.

6. Supplemental Terms and Conditions for Certain Regions

Qualifications & exceptions

• The list sits under the heading for supplemental terms for certain regions and follows the Europe paragraphs.

Not stated here

• The text does not say how a request is made for these rights beyond the contact route in the following item.

Account & Service Control · User right or choice

Where Together relied on your consent, you can withdraw it at any time, but earlier processing stays lawful

If Together collected and processed your personal data with your consent, you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing done before the withdrawal, and does not affect processing based on lawful grounds other than consent.

Supporting quotations

If we have collected and processed your Personal Data with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.

we will normally collect personal data from you only where we have your consent to do so, where we need the personal data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

Qualifications & exceptions

• Applies only to processing that relied on consent; other legal grounds, such as a contract or legitimate interests, continue.
• Prior processing is unaffected.

Account & Service Control · Procedure

Some rights are exercised in account settings; other privacy rights go through privacy@together.ai

The policy says some of these rights may be exercised through your account settings, as described in the Summary Table. To exercise any other privacy rights that are not specifically listed, it says you can contact privacy@together.ai.

Supporting quotations

Some of these rights may be exercised through your account settings, as described in the Summary Table. In order to exercise any other privacy rights not specifically enumerated here, you may contact privacy@together.ai.

“Summary Table” refers to the table below which describes the types of data collected and the storage, access, and deletion options available to you.

Qualifications & exceptions

• Applies to the rights listed in this part of the policy; the Summary Table is the table in section 2.7.

Not stated here

• The text does not give a response time for requests sent to privacy@together.ai outside the California procedure.

Cross-references

• refers to (model-proposed): Inference: prompts and model responses are accessed through Playground history and deleted in settings — The rights paragraph says some rights are exercised through account settings “as described in the Summary Table”, the table in section 2.7 that lists access and deletion routes per product.

Account & Service Control · User right or choice

California access right: a report of the data collected, its sources, purposes, recipients and specific data points

You can ask Together to disclose information about its collection and use of your personal data over the past twelve months. Once Together receives and confirms a verifiable request, it must disclose: the categories of personal data collected about you; the categories of sources; the business or commercial purpose for collecting, or if applicable selling, the data; the categories of third parties with whom it shares the data; and the specific pieces of personal data collected about you. If it disclosed your data for a business purpose or sold it, it must also give separate lists of the data categories sold to each category of recipient and the categories provided to each category of recipient for business purposes.

Supporting quotations

Access to Specific Information and Data Portability Rights

You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Data over the past twelve (12) months. Once the Company receives and confirms your verifiable information access request, the Company must disclose to you: (i) the categories of Personal Data we collected about you; (ii) the categories of sources for the Personal Data we collected about you; (iii) our business or commercial purpose for collecting or, if applicable, selling that Personal Data; (iv) the categories of third parties with whom we share that Personal Data; (v) the specific data points or pieces of Personal Data we collected about you. If we disclosed for a business purpose or sold your Personal Data, the Company must also provide separate lists that: (i) identify the personal data categories that were sold to each category of recipient in connection with sales of your Personal Data; and (ii) identify the personal data categories that were provided to each category of recipient in connection with business purposes disclosures of your Personal Data.

Qualifications & exceptions

• Covers the past twelve months and requires a verifiable request.
• The separate lists apply only if the data was disclosed for a business purpose or sold.

Account & Service Control · User right or choice

California deletion right: Together will delete your data and direct service providers to, unless an exception applies

You can ask Together to delete personal data it collected from you or retained. Unless a limited exception applies, once it receives and confirms a verifiable deletion request it says it will delete your personal data from its records and direct its service providers to delete it. If it decides it must deny the request, it will notify you promptly.

Supporting quotations

Deletion Request Rights

You have the right to request that the Company delete any of your Personal Data that we collected from you and/or retained. Unless subject to a certain limited exception, once the Company receives and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your Personal Data from our records. The Company will notify you promptly if it determines it must deny your deletion request.

Qualifications & exceptions

• Subject to a “certain limited exception” and to confirmation of a verifiable request.

Not stated here

• The policy does not say which exceptions may apply.
• Data processed under Zero Data Retention cannot be deleted later according to section 2.6.

Cross-references

• contrast (model-proposed): Zero Data Retention applies only going forward, and Together then cannot access, correct, export or delete the data — The California deletion right lets you ask Together to delete data it collected or retained, while section 2.6 says data processed under Zero Data Retention is removed after processing and cannot later be deleted on your behalf. The policy does not say how the two interact.

Account & Service Control · Procedure

California requests are made by emailing privacy@together.ai, with limits on how often you can ask

To exercise the California access, data portability, deletion or do-not-sell opt-out rights, you can submit a verifiable consumer request by emailing privacy@together.ai. You may make a verifiable consumer request for access or data portability only up to two times in a twelve-month period. You may make a verifiable do-not-sell opt-out request at any time.

Supporting quotations

EXERCISING YOUR RIGHTS

To exercise your access, data portability, and deletion rights or do not sell opt-out rights described above, you may submit a verifiable consumer request by sending an email to privacy@together.ai.

You may only make a verifiable consumer request for access or data portability up to two times within a twelve-month period. You may make a verifiable do not sell opt-out request at any time.

Qualifications & exceptions

• Two requests in twelve months applies to access and data portability requests; it is not stated for deletion requests.

Account & Service Control · Restriction or exception

California requests must be verifiable; only you or a registered authorized person may make them

A request must give enough information for Together to reasonably verify that you are the person whose data it collected, or an authorized representative, and must describe the request in enough detail for Together to understand and respond. Together cannot respond or provide data if it cannot verify your identity or authority and confirm the data relates to you. You do not need to create an account to make a request, and Together says it will use information in a request only to verify the requestor's identity or authority. Only you, or a person registered with the California Secretary of State whom you authorize, may make a request about your data. You may also make a request on behalf of your minor child.

Supporting quotations

Any such request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Data or an authorized representative thereof; and (ii) describe your request with sufficient detail such that we may understand, evaluate, and respond to it. The Company cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.

Making a verifiable consumer request does not require you to create an account with the Company. The Company will only use Personal Data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Data.

You may also make a verifiable consumer request on behalf of your minor child.

Qualifications & exceptions

• An authorized person must be registered with the California Secretary of State.

Not stated here

• The policy does not say what information is considered sufficient for verification.

Account & Service Control · Company commitment

California requests: Together aims to respond within 45 days, extendable to 90 days with written notice

Together says it endeavors to respond to a verifiable consumer request within 45 days of receiving it. If it needs more time, up to 90 days, it will tell you in writing the length of the extension and the reason. Responses and other communications will be delivered to you in writing by email.

Supporting quotations

Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. The Company will deliver any required or requested responses or other communications in writing to you by email.

Qualifications & exceptions

• “Endeavor” expresses an aim rather than a guaranteed deadline.
• Applies to verifiable consumer requests under the California statement.

Account & Service Control · Company commitment

California responses cover the prior twelve months, explain any refusal, and give portable data in a usable format

Disclosures Together provides will cover only the twelve-month period before it received the verifiable request. If applicable, the response will explain any reasons it cannot comply. For data portability requests, it will provide your personal data in a format that is readily usable and transferable.

Supporting quotations

Any disclosures we provide will only cover the twelve-month period preceding the verifiable consumer request’s receipt. If applicable, the response we provide will also explain any reasons we cannot comply with a request. For data portability requests, the Company will provide your Personal Data in a format that is readily usable and transferable.

As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

Qualifications & exceptions

• Disclosures are limited to the twelve months preceding receipt of the request.

Account & Service Control · Procedure

Questions and requests to exercise rights can be sent to privacy@together.ai

If you have questions about the policy, or want to exercise your rights under the policy or applicable law, you can contact Together at privacy@together.ai.

Supporting quotations

7. Contact Us

If you have any questions about this Policy or would otherwise like to exercise your rights under this Policy or applicable law, you can contact us at privacy@together.ai.

Not stated here

• The policy gives an email address only; it does not list a postal address or response time in this section.