Privacy Policy

Submarine AI, LLC, a Delaware limited liability company (Delaware file number 3356904) ("Submarine", "we") runs the website submarine.ai and the Submarine social intelligence service (the "Service"). This policy says what personal data we collect, why, and what rights you have. It applies to visitors of the website, to users of the Service and to people whose public content the Service analyses.

1. Data we collect

Account data. When you request a demo, sign up or are invited by your company, we collect your name, work email address, company, role and a hashed password. We use it to create and secure your account, to send activation links and service emails and to provide support.

Billing data. Subscriptions are billed by our payment provider, Stripe. We receive your company name, billing address, tax identifiers and the last four digits of the card. Full card numbers never reach our servers.

Usage and technical data. When you visit the website or use the Service we record the pages you open, the filters you set, the searches you run, your IP address, browser and device type, approximate location derived from the IP address, and timestamps. We use this to operate and secure the Service, to apply the usage limits of your plan, to find and fix defects and to understand how the product is used.

Newsletter data. If you subscribe to a newsletter or to alerts we store your email address and the topics you select. Every email carries an unsubscribe link.

Contact data. If you write to us we keep the correspondence for as long as needed to answer and to keep a record.

Public content we analyse. The Service collects and analyses content that brands and creators publish publicly on social platforms such as YouTube, TikTok, Instagram and Pinterest, together with public search demand data. This includes account names, handles, profile pictures, post text, captions, view and engagement counts and, for creators, the public category of their content. We process this under our legitimate interest in providing market intelligence about public commercial communication. We do not collect private accounts, private messages or private contact details. Automated systems, including AI models run by third-party providers, classify this content. A creator who wants a public account excluded from the Service can write to the address in section 12 and we will review the request and respond.

2. Legal bases

If you are in the European Union or the United Kingdom, we rely on these legal bases. Contract: to create and run your account, to bill your subscription and to provide support. Legitimate interests: to secure the Service, to prevent abuse, to understand how the product is used, to contact business users about the Service, and to analyse public content as described in section 1. Consent: for newsletters and alerts, for the Google connections described in section 3, and for cookies where the law requires consent. Legal obligation: to keep tax and accounting records and to answer lawful requests from authorities. Where we rely on legitimate interests you can object, as described in section 8.

3. Google user data

Some of our tools connect to Google services (Google Ads, Google Search Console, Google Slides and Google Sheets) through Google sign-in. When a Submarine staff member or a user authorises such a connection, we access only the data needed to provide the feature requested, for example keyword statistics from a Google Ads account or search statistics from a Search Console property. We do not sell this data and do not use it for advertising. People at Submarine read it only to provide the feature, with the user's consent, for security purposes or to comply with the law. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access at any time at myaccount.google.com/permissions.

4. Cookies and analytics

We use a session cookie to keep you signed in, a cookie set by Cloudflare Turnstile to block bots on forms, cookies set by Stripe on checkout pages, and a product analytics cookie (PostHog) that records page views and feature use so we can improve the product. We do not run advertising trackers and we do not sell browsing data. You can block cookies in your browser; the signed-in parts of the Service then stop working.

5. Who receives data

We share personal data with service providers who process it on our instructions and under contract: hosting, database and network providers (for example Supabase, DigitalOcean and Cloudflare), our payment provider (Stripe), email delivery providers, product analytics (PostHog), AI model providers that process public content, and Google for the connections described in section 3. We do not sell personal data. We disclose data when the law requires it, to enforce our terms, or to protect the rights, property and safety of users, of the public and of Submarine. If Submarine is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction.

6. International transfers

Submarine is based in the United States and data may be processed in the United States and in other countries where our providers operate. Where data of people in the European Union or the United Kingdom leaves those territories we rely on recognised safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

7. Retention

We keep personal data for no longer than needed for the purposes described here. Account and billing data is kept for the life of the account and for the period that tax and accounting law requires after it. Usage and technical data is kept for a limited period for security and product analysis. Newsletter data is kept until you unsubscribe. Public content is kept for as long as it is relevant to the analyses the Service offers. Data may be retained longer where the law requires it or where it is needed to resolve a dispute.

8. Your rights

Depending on where you live you may have the right to access your data, to correct it, to have it deleted, to receive a copy in a portable format, to restrict or object to its processing, and to withdraw consent at any time without affecting processing that took place before. To exercise a right, write to the address in section 12. We may ask you to confirm your identity first. If you are in the European Union or the United Kingdom you can also complain to your data protection authority. If you are a California resident you have the rights given by the CCPA; we do not sell or share personal information as defined there, and we do not discriminate against anyone who exercises their rights.

9. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Service is for professional use and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will review the request and delete data that we find came from a child.

11. Links to other sites

The Service links to posts, profiles and websites run by others, such as YouTube, TikTok, Instagram and Pinterest. Their own privacy policies apply when you follow those links, and we are not responsible for how they handle your data.

12. Contact

Submarine AI, LLC, a Delaware limited liability company (Delaware file number 3356904). Email: [email protected].

13. Changes

We may update this policy. We will post the new version on this page with a new date, and we will tell account holders by email about changes that materially affect them.