Privacy Policy for Inference Scaled

Last updated: September 2, 2026

Inference Scaled is operated by Blosser, Inc. (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites or use Inference Scaled products, applications, or services that link to this Policy, including Clipboard and One on One (collectively, the “Services”).

Our role

We generally act as the controller or business responsible for account, website, billing, support, and business-contact information. When an organization uses the Services and submits clips, files, notes, or other content (“Customer Content”), we generally process that Customer Content on the organization’s behalf as its service provider or processor. A customer agreement or data processing agreement may provide additional terms and will control if it conflicts with this Policy.

Information we collect

Information you provide

• Account and organization information. Your name, email address, password or authentication credentials, profile information, organization name, role, and account preferences.
• Customer Content. Clips, notes, conversation context, files, attachments, and other information you choose to save, upload, share, or process through the Services.
• Support and communications. Information you provide when you contact us, request support, respond to surveys, or otherwise communicate with us.
• Transaction information. If you purchase a paid Service, billing and transaction information. Payment-card information may be collected directly by our payment processor rather than stored by us.

Information collected automatically

We collect technical and usage information when you use the Services, such as IP address, browser and device type, operating system, referring and exit pages, pages or features used, dates and times of access, diagnostic information, and security and audit events. We may derive an approximate location from an IP address for security, fraud prevention, and service operation.

Information from other sources

We may receive information from your organization’s administrators, other users who share content with you, and services you connect to Inference Scaled. If you sign in with Google, we receive information such as your name and email address as permitted by your Google account settings. Information received through another service depends on the permissions you grant and that service’s policies.

Cookies and similar technologies

We use cookies and similar technologies that are necessary to authenticate users, maintain sessions, remember preferences, protect the Services, and prevent abuse. If we introduce non-essential analytics or advertising technologies, we will provide any notice and choices required by law. We do not currently use personal information to serve targeted advertisements through the Services.

How we use personal information

We use personal information to:

• provide, operate, maintain, and support the Services;
• create and administer accounts and authenticate users;
• process transactions and send related notices;
• respond to questions, support requests, and other communications;
• monitor performance, troubleshoot problems, and improve the Services;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our agreements;
• send administrative, technical, security, and service-related messages;
• comply with law and protect our rights, users, and the public; and
• carry out another purpose with your consent or at your direction.

Customer Content and connected AI services

We process Customer Content to provide the functions you or your organization request. We do not use Customer Content to train general-purpose artificial intelligence models. When you connect or use the Services through ChatGPT, Claude, or another third-party AI platform, information and tool responses may be transmitted to that platform at your direction. The platform may process that information under its own agreement and privacy terms. You and your organization are responsible for selecting integrations and configuring appropriate permissions.

How we disclose personal information

We may disclose personal information to:

• Service providers. Providers of hosting, storage, authentication, email, security, support, and payment services that process information for us under contractual restrictions.
• Connected services. Third-party services and AI platforms when you authorize a connection or direct the Services to interact with them.
• Your organization and other users. Organization administrators and people with whom you choose to share content. Administrators may manage accounts and access or control organization content.
• Professional advisers. Lawyers, auditors, insurers, and other advisers where reasonably necessary.
• Authorities and other parties for legal reasons. When we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, or the integrity of the Services.
• Transaction participants. Parties involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.
• Other parties at your direction. When you consent to or direct the disclosure.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising or process it for targeted advertising as those terms are defined under applicable U.S. state privacy laws.

Retention

We retain account information and Customer Content, including saved notes, conversations, files, attachments, and related metadata, for as long as your account remains active or as needed to provide the Services. When you delete content, we remove it from active systems within 30 days. When your account is closed or we complete a verified deletion request, we remove your account content from active systems within 30 days.

Residual copies may remain in encrypted backups for up to 90 days before being removed through our normal backup-rotation process. Backup copies are isolated from ordinary use and are accessed only when necessary for security, disaster recovery, or legal compliance.

We may retain:

• security, access, and abuse-prevention logs for up to 12 months;
• support communications for up to 24 months after the request is resolved;
• billing, transaction, tax, and accounting records for up to seven years when required for legal or financial compliance;
• pending or failed file uploads for up to 30 days so they can be completed, retried, investigated, or safely cleaned up; and
• information subject to a legal hold for as long as the applicable obligation, dispute, or investigation continues.

After the applicable retention period, information is deleted or de-identified. We may retain de-identified information that cannot reasonably be linked back to an individual.

Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

Your choices and privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; restrict or object to certain processing; withdraw consent; opt out of qualifying sales, sharing, or targeted advertising; or appeal our response to a request. You may also have the right to use an authorized agent and to receive equal service without discrimination for exercising a privacy right.

To submit a request or appeal, email support@blosserinc.com. We may ask for information needed to verify your identity and authority. If we process your information on behalf of your organization, please direct your request to that organization first. You may also have the right to complain to your local data protection authority.

Additional information for the EEA, United Kingdom, and Switzerland

Where applicable, our legal bases for processing personal information include performing a contract with you, pursuing legitimate interests such as operating and securing the Services, complying with legal obligations, and consent. You may withdraw consent at any time without affecting earlier processing. When we transfer personal information internationally, we use safeguards required by applicable law, which may include adequacy decisions or standard contractual clauses.

Children’s privacy

The Services are intended for general audiences, including users ages 13 through 17, and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under the age of legal majority where you live, use the Services only with permission from a parent or legal guardian. If you believe a child under 13 has provided personal information to us, please contact us so we can investigate and take appropriate action, including deletion when required.

Changes to this Policy

We may update this Policy to reflect changes in our Services, practices, or legal obligations. We will post the revised Policy and update the “Last updated” date above. If a change is material, we will provide additional notice where required by law.

Contact us

Questions, requests, or complaints about this Policy or our privacy practices may be sent to support@blosserinc.com or by mail to: