Anticlock Privacy Policy

1Overview

Effective date: October 14, 2026. Last updated: October 14, 2026. This policy covers www.anticlock.ai and the Anticlock AI-native software delivery platform and services.

Anticlock is an AI-native software delivery platform that helps teams turn business requirements into reviewed specifications, code and pull requests, with human approval at defined checkpoints. This policy explains what information we collect when you visit our website, request a demo or trial, or use the platform, why we collect it, how we use and protect it, and the choices you have.

We act in two roles. For account, billing and website information, Ideas2IT Technologies LLC ("Anticlock," "we," "us") decides how the information is used. For Customer Content, meaning what your team puts into or generates with the platform, we act as your service provider (processor) and handle it on your instructions under our Terms of Service and, where signed, a data processing addendum. If you use Anticlock through your employer or another organization, that organization controls your workspace, and you should ask its administrator about access, correction or deletion of Customer Content.

By using our website or services, you acknowledge this policy. If you do not agree, please do not use our website or the Anticlock platform.

2Information We Collect

2.1 Information you provide to us

• Account and contact information: name, work email, company name, job title, and phone number when you request a demo, start a trial or create an account.
• Billing information: billing address and payment details, processed through our third-party payment processor. We do not store full payment card numbers on our own servers.
• Customer Content: requirements, specifications, prompts, uploaded documents, source code and repository content, tickets and comments, review decisions, and the plans, code, tests and pull requests the platform generates.
• Communications: messages you send us by email, chat or contact forms, and during onboarding and support calls.

2.2 Information collected automatically

• Usage data: pages visited, features used, agent run and task events, session duration, referring URLs, and interactions with the platform and dashboard.
• Device and log data: IP address, approximate location from IP, browser type, operating system, device identifiers, and error and performance logs.
• Cookies and similar technologies: see Section 6.

2.3 Information from third parties

• Data from development tools you connect, such as GitHub, GitLab and Jira: repository and project metadata, issues, pull requests, and the access tokens you authorize.
• Information from your organization's single sign-on or identity provider, and from partners or resellers who refer you to Anticlock, where permitted.

2.4 Sensitive and regulated information

We do not ask for, and our Terms of Service prohibit you from submitting, regulated data such as protected health information, payment card data or government identification numbers, unless we have agreed otherwise in writing. Account sign-in credentials count as sensitive personal information under some state laws. We use them only to authenticate you, and we do not use sensitive personal information to infer characteristics about you. Customer Content may include information about other people, such as names in a ticket or a commit author. You are responsible for having the right to provide it, and we process it only on your behalf.

3How We Use Information

We use the information we collect to:

• Provide, operate and maintain the Anticlock platform, including running agents, building and checking Outputs, and syncing with the tools you connect.
• Process trials, orders and payments, and manage your account.
• Communicate with you about your account, service updates, security alerts and support requests.
• Improve and develop the platform using usage data and de-identified or aggregated data. We do not use the contents of your Customer Content for this unless you opt in (see Section 4).
• Send marketing communications about Anticlock, where you have opted in or as otherwise permitted by law. You may opt out at any time. We do not send marketing based on Customer Content.
• Monitor for, investigate and prevent fraudulent, unauthorized or illegal activity, and enforce our acceptable use rules.
• Comply with legal obligations, respond to valid legal process, and establish or defend legal claims.

4AI Processing and Your Content

4.1 Model providers

To generate requirements, plans, code and checks, Anticlock sends the relevant parts of your Customer Content to third-party AI model providers that act as our subprocessors. They process it only to return a response to us. Our agreements with them restrict them from using your Customer Content to train their models. Model providers may keep inputs and outputs for a limited time for abuse monitoring, as their terms describe. A current list of subprocessors is available on our website or on request.

By default, Anticlock's agents work inside your workspace and stop at a pull request. They do not deploy to your production systems.

4.2 We do not train on your content

We do not use Customer Content to train or fine-tune any AI model, ours or a third party's, unless a workspace administrator affirmatively opts in or you agree in a signed agreement. We do not train foundation models. We may use usage data and de-identified or aggregated statistics to improve the platform, and that data does not contain the substance of your projects.

4.3 Access by our staff

Our personnel access Customer Content only to provide support you ask for, to investigate security or abuse, to maintain the service, or as the law requires, and they are bound by confidentiality duties.

4.4 Automated decisions

Anticlock uses AI to draft requirements, plans, code and checks for software work. It is not designed to make decisions about individuals' employment, credit, housing, insurance, education, healthcare or legal rights, and our Terms of Service prohibit using it that way. We do not use your personal information to make automated decisions that have legal or similarly significant effects on you. Approval steps in the platform are made by people in your organization, not by us.

5How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may share information with:

• Service providers: cloud hosting, AI model providers, payment processing, email, support and analytics providers that process data on our behalf under contractual confidentiality and security obligations.
• Tools you connect: GitHub, GitLab, Jira and similar tools, at your direction, so the platform can read from and write to the places you authorize.
• Your organization: administrators of your workspace can see account and usage information about you and the content in the workspace.
• Professional advisors: lawyers, auditors, insurers and consultants where necessary.
• Legal and safety purposes: where required to comply with law, respond to lawful requests, or protect the rights, property or safety of Anticlock, our customers or others. For Customer Content, we direct requests to the customer where the law allows.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to standard confidentiality terms.

6Cookies and Opt-Out Signals

The Anticlock application uses only cookies and similar technologies needed to sign you in, keep your session secure and remember settings. Our website may use analytics cookies to understand which pages are useful. You can block or delete cookies in your browser settings, though parts of the application will not work without essential cookies. Where we use non-essential cookies on the website, we provide a way to decline them.

We treat a browser-based Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information and of targeted advertising, in every state that requires it. Because we do not sell or share personal information, the signal does not currently change how we handle your information. There is no common standard for Do Not Track signals, so we do not respond to them.

7Data Security

We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit, access controls, isolated build environments, and restricted internal access to customer content and credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we confirm a breach affecting your information, we will notify you as the law and your contract require. Report a suspected vulnerability or incident to contactus@ideas2it.com.

8Data Retention

We keep personal information only as long as needed to provide our services, comply with legal obligations, resolve disputes and enforce our agreements. Our default periods are:

We may keep information longer for a legal hold, a dispute, fraud prevention, a security investigation or as the law requires.

9Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete or port your personal information, to opt out of certain processing, and to withdraw consent to marketing at any time. These rights exist under laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states, and each law has its own scope and exceptions.

To make a request, email contactus@ideas2it.com. We verify your identity by matching what you give us to what we hold. We respond within 45 days and may extend once by up to 45 more days with notice. There is no charge unless requests are excessive or repeated. You may use an authorized agent, and we may ask for your written permission and verify your identity with you directly.

If your information is Customer Content, for example a colleague added your name to a ticket, we act as that customer's service provider. Send your request to the workspace administrator. If you write to us, we will tell you we cannot act on it directly and, where permitted, pass it on to the customer.

California residents: Sections 2, 3 and 8 describe the categories, purposes and retention of personal information we collect. We do not disclose personal information to third parties for their own direct marketing (Civil Code section 1798.83). We do not use automated decision-making technology to make significant decisions about consumers, and we will provide the required notices and rights before California's rules on that technology apply on January 1, 2027, if that changes. You may also complain to the California Privacy Protection Agency or the Attorney General.

Nevada residents: we do not sell covered information as Nevada law defines it.

EEA, UK and Swiss users (GDPR): you may exercise the rights above and lodge a complaint with your local data protection authority. Our data processing addendum, available on request, includes the transfer mechanisms that apply to business customers.

Other jurisdictions: we honor applicable local privacy rights to the extent required by law.

10International Transfers

Anticlock is operated from the United States and is intended for US business customers. Information we collect is stored and processed in the United States. Our personnel and service providers in the United States and in other countries, including India, may access information as needed to operate and support the service, under written confidentiality and security obligations. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally.

11Children's Privacy

Anticlock is a B2B service intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

12Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. We will post the updated policy on this page with a revised last updated date. Where changes are material, we will tell account owners and workspace administrators by email or in the product at least 30 days before they take effect, unless the law or a security need requires faster action. We will not use your Customer Content in a materially new way without your agreement.