Welcome to the Privacy Notice of Mentat Forge Research Pte. Ltd, registered address: 9 Raffles Place, #26-01 Republic Plaza, 048619, Singapore (together with its affiliates "ai.com", "we", "us", or "our", as the context dictates). At ai.com, we value and respect your privacy. We are committed to keeping secure any information we obtain from you or about you. This Privacy Notice describes our practices with respect to information we collect from or about you when you use our websites, applications, AI‑powered agents, related features and any integrations, skills, or marketplace offerings we make available from time to time (collectively "Services").
Please note that our Services are not intended for minors below the age of 18 years and we do not knowingly collect data relating to minors.
We have appointed a Data Protection Officer (DPO) to oversee our privacy framework. If you have questions about how we handle your data, wish to exercise your rights under the Singapore PDPA or EU/UK GDPR or another applicable privacy law or make a complaint, please contact our DPO at dpo@ai.com
Personal data we collect
We collect personal data relating to you ("Personal Data") if you create an account to use our Services or communicate with us. To provide clarity, we distinguish between information collected to manage your relationship with us as a company and information collected to power your specific AI agent.
A. Account and Administrative Information
This is information we collect to provide, secure, and manage your account and our business relationship:
- Account Information: Your name, email address, profile image, and credentials.
- Payment Information: Billing details and transaction history if you purchase Services.
- Communication & Marketing: Content of your messages to us (e.g., support requests) and your preferences for promotional updates.
- Social Media & Events: Information you provide when interacting with our social pages or attending events.
B. Agent Interaction and Integration Data
This includes information processed by your personal AI agent to perform tasks on your behalf:
- Active Inputs: Any messages, images, voice notes, or files you explicitly send in the chat. Your Inputs may include information you authorize other applications, accounts, or services to share with the Services, as well as any personal data you choose to include. We do not control what you share in your Inputs and do not use automated or other measures to restrict, censor, or filter personal data from them.
- Passive Integration Data: If you choose to connect third-party applications (e.g., Gmail, Calendar, or other integrations), your agent may access and "passively" ingest information from those services to fulfill your requests, such as summarizing emails or scheduling events.
- Outputs: The information generated by the agent in response to your Inputs.
Personal Data We Receive Automatically from Your Use of the Services
When you visit, use, or interact with the Services, in addition to the Personal Data described above, we also may receive the following information about your visit, use, or interactions ("Technical Information"):
Log Data
Information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, time zone setting, location data, web page referrers, mobile network, mobile operator or internet service provider, connection information, probabilistic identifiers, and how you interact with our Services.
Usage Data
We may collect information about your use of the Services, such as the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
Device Information
Includes name of the device, operating system, device type, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
Cookies
A "cookie" is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website. You may find more information about how we use cookies and make adjustments to certain preferences through the Cookie Preferences section available on the Site.
How we use personal data
We use the categories of information defined above for distinct purposes to ensure your administrative data remains separate from your AI agent interactions.
A. For Administrative and Business Operations
We use Account, Payment, and Communication Information to:
- Provide and Manage Services: To administer and maintain your account and our business relationship.
- Communication: To send you information about our Services, updates, and events.
- Safety and Compliance: To prevent fraud, protect the security of our IT systems, and comply with legal obligations.
- Business Development: To carry out business transfers and develop new programs.
B. Processing to Facilitate Agent Functionality
To provide the core features of your AI agent, we process Inputs and Outputs through an automated pipeline. This processing is focused on technical execution rather than content investigation:
- Automated Task Execution: We process your messages and data from authorized third-party integrations (e.g., Gmail) to enable your agent to fulfill specific requests and provide accurate Outputs.
- Technical Performance & Reliability: We analyze anonymized metadata and system-level telemetry to ensure the technical stability and reliability of the Services.
- Functional Improvements: We monitor aggregate usage patterns to optimize the speed, efficiency, and overall user experience of our service delivery.
Crucially, we maintain a strict policy regarding the use of your interaction data:
- No Internal Model Training: We do not use your personal data, prompts, or agent outputs to train our internal models.
- Data Isolation: Your data is used solely to provide and maintain your isolated environment through our architectural sandbox model.
- Secure Layering: We act as a secure layer; while your Inputs are shared with third-party Large Language Model providers to generate responses, they are subject to those providers' respective terms.
Automated Decision-Making Logic
- Logic: Our Services use algorithms and third-party LLM models to identify patterns and probabilistic connections in your data to generate responses or perform requested tasks.
- Impact: While primarily assistant-oriented, these processes may impact on your access to certain features or determine eligibility for specific service tiers.
Legal Bases for Processing
Where applicable, we process your Personal Data under the following legal bases:
- Contractual Necessity: To provide the Services you requested, including account management and payment processing.
- Legitimate Interests: To improve our Services, ensure IT security, and prevent fraud, provided these interests are not overridden by your data protection rights.
- Legal Obligation: To comply with applicable laws and regulatory requirements in relevant jurisdictions.
- Consent: Where you have provided consent, such as for specific marketing activities or the processing of sensitive data, if applicable.
Disclosure of personal data
We distinguish how we share information based on whether the data is used for business administration or to facilitate your AI agent's performance. In certain circumstances, we may provide your Personal Information to third parties without further notice to you, unless required by the law:
A. Business & Administrative Disclosures
To maintain our operations and legal standing, we may share Account, Payment, and Communication information with:
- Service Providers: We use trusted vendors (e.g., payment processors, hosting, and IT analytics) who process data strictly under our instructions to support our operations.
- Business Transfers: During a merger, sale, or reorganization, your administrative data may be shared as a business asset with successors or counterparts.
- Legal & Safety: We may disclose data to authorities to comply with laws, enforce our terms, prevent liability, or protect the safety and rights of our users and the public.
B. Functional AI Agent Disclosures
To enable the AI agent to process your specific requests and integrations, different disclosure rules apply:
- Integrated Third-Party Tools: Sharing information with integrated tools (e.g., Gmail, Calendar) is entirely at your discretion and subject to their respective privacy terms.
- Third-Party LLM Providers: We act as a secure layer between you and third-party Large Language Model providers. To generate a response, your Inputs are shared with such third-party services and are separately subject to their terms and conditions.
- No Training Disclosure: We do not disclose or use your prompts or agent outputs to train our internal models.
International Data Transfers
As a global service managed by a Singaporean entity, your Personal Data may be transferred to and processed in countries other than where you reside, including Singapore and the United States.
From Singapore: We ensure that any recipient of personal data outside Singapore provides a standard of protection comparable to the PDPA.
From the EEA/UK: For transfers to countries not deemed "adequate" by the European Commission or the UK Government, we utilize Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) to ensure your data remains protected.
For other countries which have transfer requirements the relevant transfer mechanisms are applied where applicable.
Your rights
You have rights we need to make you aware of. The rights available to you depend on the applicable local law and our reason for processing your personal data.
You may:
- Access: Request access to your personal data, which enables you to obtain confirmation of whether we are processing your personal data, to receive a copy of the personal data we hold about you and information regarding how your personal data is being used by us;
- Rectification: Request rectification of your personal data by asking us to rectify information you think is inaccurate and to complete information you think is incomplete, though we may need to verify the accuracy of the new data you provide to us;
- Erasure: Request erasure of your personal data by asking us to delete or remove personal data we hold about you; note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you;
- Object to processing: Object to the processing of your personal data, where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms; in some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms; you also have the right to object where we are processing your personal data for direct marketing purposes;
- Automated decisions: Require that decisions be reconsidered if they are made solely by automated means, without human intervention, where applicable;
- Restriction: Request restriction of processing your personal data, which enables you to ask us to suspend the processing of your personal data, if you want us to establish the data accuracy; where our use of the data is unlawful, but you do not want us to erase it; where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims, or if you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it;
- Portability: Request the transfer of your personal data to you or to a third party, and we will provide to you, or a third party you have chosen (where technically feasible), your personal data in a structured, commonly used, machine-readable format; note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you, where applicable;
- Withdraw consent: Withdraw consent at any time where we are relying on consent to process your personal data; however, this will not affect the lawfulness of any processing carried out before you withdraw your consent; if you withdraw your consent, we may not be able to provide certain products or services to you, but we will advise you if this is the case at the time you withdraw your consent;
- Complain: Complain to the Personal Data Protection Commission, Singapore or any relevant data protection authority about any perceived violation and to seek compensation for damages in the courts.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is manifestly unfounded or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
Period for replying to a legitimate request
We respond to legitimate requests to exercise rights relating to personal data within the timeframes required by applicable data protection laws. In certain circumstances — such as when requests are complex or numerous — our response time may be extended as permitted by law.
To protect your personal data, we may ask you to provide additional information to verify your identity before processing your request.
Marketing & Opt-Out
We use your account details and usage data to send service updates and promotional communications. To stop receiving marketing or to limit data sharing, you may contact us directly through the contact details below.
Exercising Your Rights
To the extent applicable under local law, you can exercise privacy rights described in this section by submitting a request via email to: dpo@ai.com
Links to other websites
Our Service may link to or facilitate sharing with third-party sites we do not control. Their specific privacy policies and terms govern any information you share with them. Providing these links does not imply our endorsement; please contact those third parties directly regarding their privacy practices.
Security and Retention
We use reasonable technical and physical safeguards to protect your data, but no electronic transmission is guaranteed to be immune from risk. You are responsible for the information you choose to send and for managing your privacy settings. We retain data only as long as necessary for our services, security, or legal obligations, based on its sensitivity and the nature of our business needs.
We utilize an architectural sandbox model to ensure user isolation. Upon account closure, your dedicated infrastructure and associated data are securely decommissioned and permanently erased.
Changes to this Privacy Notice
We continuously improve our Services and may update this Privacy Notice. We will provide any legally required notice for material changes via email or in-product notifications. All other updates are effective upon posting. If you disagree with any changes, you must immediately stop using our Services.