You're on the list! We'll reach out when early access becomes available.
Oops! Something went wrong while submitting the form.
×
Effective date: 22 June 2026
Last updated: 15 September 2026
This policy explains what Metano, Inc. (“Metano,” “we,” “us”) collects when you use our services, why we collect it, who we share it with, and the rights you have over your data. It covers our website at metano.ai, our APIs, and any product or feature we operate under the Metano name (together, the “Service”).
We are a Delaware C-Corporation. For any privacy question, write to legal@metano.ai.
This policy applies to:
If you use the Service on behalf of an organization, that organization is the controller of the data it submits to the Service; we process that data on its behalf under our customer agreement. This policy describes what we do as a controller of our own data.
We collect three categories of information.
Account information. Your name, email address, and the credentials you use to sign in. If your organization signs you up, your employer provides this.
Machine, agent, and endpoint information. Technical data we need to run the Service and keep it secure. Where your organization deploys the Metano Endpoint Sensor or another Metano collector, this includes:
Some of this data can include the content of prompts, outputs, files, and commands.
Communications. Anything you send us by email or through support channels.
We do not knowingly collect special-category data (health, biometric, political, religious, etc.) and we ask you not to send it to us.
The Metano Endpoint Sensor is deployed by an organization onto machines and environments it owns or controls. That organization, not Metano, decides which endpoints, users, environments, and workloads are monitored, and configures what is collected.
Where you use Metano through an employer or team, that organization is the controller of this data and Metano processes it on their instructions. The organization is responsible for giving its workforce the notices, and obtaining the consents and approvals, that local employment and privacy law requires. If you want to know what is monitored on your machine, ask your organization’s administrator.
What the Sensor does not do. It is not a general-purpose employee surveillance tool. It does not perform keystroke logging, screen recording, webcam or microphone capture, or collection of personal communications unrelated to monitored AI activity.
We use the information above to:
We do not sell your personal data. We do not use customer content, including agent prompts, outputs, and endpoint telemetry, to train, fine-tune, or develop machine-learning or AI models, and we do not send it to third-party foundation-model providers for training. We may derive aggregated, de-identified statistics that cannot reasonably be associated with any organization or individual.
Where the GDPR or UK GDPR applies, we rely on:
We share personal data only with:
Sub-processors. We host the Service on Google Cloud Platform and may use a small number of additional vendors for functions such as authentication, email, payments, analytics, and AI model inference. Every sub-processor is bound by a written data-processing agreement. A current list is available on request to legal@metano.ai.
Your organization. If you use Metano through an employer or team, an administrator from that organization can see your account and activity within their tenant.
Authorities or successors. When required by law, valid legal process, or in connection with a merger, acquisition, or sale of assets, in which case we will tell affected users.
We do not share personal data for cross-context behavioral advertising.
Metano is based in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US and in other countries where our sub-processors operate. For transfers out of the EU, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable).
We keep personal data for as long as your account is active and for a reasonable period after to meet legal, accounting, or security needs.
Logs and telemetry from the Platform and Endpoint Sensor are typically kept for up to 12 months. Operational logs for our public Labs services, including Skill Tracer, are kept for 90 days. Public submissions to Labs services are retained indefinitely as part of the public corpus.
When you delete your account or your organization terminates its contract, we delete or anonymize personal data within 90 days, except where law requires us to retain it.
We use access controls, encryption in transit, encryption at rest for production stores, and standard application-security practices. No system is perfectly secure; we encourage you to use a strong password and to report any suspected vulnerability to legal@metano.ai.
Depending on where you live, you have some or all of the following rights:
To exercise any of these rights, email legal@metano.ai. We will verify your identity before acting on a request and respond within the time required by applicable law (generally 30 days under GDPR, 45 days under CCPA).
In the past 12 months we have collected the categories of personal information listed in Section 2: identifiers, internet/network activity, and content you provide. We collect this for the business purposes described in Section 3. We have not sold or shared personal information for cross-context behavioral advertising. You have the right to know, to delete, to correct, and to limit the use of sensitive personal information; we treat all California requests as such requests by default. We do not discriminate against users who exercise these rights.
The controller of your personal data is Metano, Inc. Our legal bases are listed in Section 4. You have the rights listed above and can complain to your supervisory authority, for the UK, the ICO.
You can access, correct, and erase your personal data, and nominate someone to exercise these rights on your behalf in the event of death or incapacity. Contact us at legal@metano.ai to do so or to raise a grievance.
We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. Where required, we will ask for consent through a banner before setting non-essential cookies. You can disable cookies in your browser, but parts of the Service may not work without them.
We do not respond to Do Not Track signals; we treat the Global Privacy Control signal as a valid opt-out where applicable.
The Service is not directed to anyone under 18 and is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to legal@metano.ai and we will delete it.
If we make a material change, we will notify you by email or through the Service before the change takes effect. Smaller updates will be reflected by changing the “Last updated” date above.
Metano, Inc. 1051 Craig Dr, San Jose, CA 95129, USA
Data Protection Officer, Grievance Officer, and Chief Information Security Officer: Varun Anand.
Email: legal@metano.ai