Privacy Policy

This Privacy Policy explains how Path 6, LLC, a Texas limited liability company doing business as Pentaria (“Pentaria,” “we,” “us,” “our”) collects, uses, discloses, and safeguards personal data when you visit pentaria.com (the “Site”) or use the Site to license and download Pentaria’s library of AI skills, agents, plugins, software, prompt templates, and related tools (the “Materials,” and together with the Site, the “Services”).

The Site is gated behind a login: Customers create an account to browse, license, and download Materials, which are then used entirely within a third-party AI system Customer separately licenses (a “Customer AI Platform”). Pentaria does not operate, host, or provide any AI model or processing environment, and does not receive, access, or process any prompts, data, or outputs Customer submits to or receives from a Customer AI Platform, whether or not generated using the Materials.

This Policy applies to personal data of our business customers’ authorized users, prospective customers, website visitors, and job applicants. It does not apply to any data processed within a Customer AI Platform, which is governed by that provider’s own privacy policy, or to Customer Data that our business customers process for their own end customers or employees outside the Services.

Pentaria is designed for business (B2B) use. The Services are not directed to, and we do not knowingly collect personal data from, individual consumers acting in a personal capacity or from children under 16.

1. Personal data we collect

1.1 Information You Provide. Account and contact information (name, business email, job title, company, phone number, and an optional profile photo or avatar); billing information (such as billing contact details, invoice and payment records, and, for payments made by wire or ACH, bank account and routing information used to receive payment; if we offer credit card payment for self-service plans in the future, card transactions will be processed by a third-party payment processor and we will not store full card numbers); license and seat information (e.g., which Materials your organization has licensed and how seats are assigned to Authorized Users); communications with us (support requests, survey responses); information submitted through website forms (e.g., demo requests, newsletter sign-ups); and, if you engage us for a custom development engagement, any content you share with us for that specific purpose, governed by the separate agreement covering that engagement.

1.2 Information Collected Automatically. Usage data on the Site (pages visited, features used, Materials downloaded, login activity, timestamps); device and log data (IP address, browser type, operating system); and cookies and similar tracking technologies, described in Section 7.

1.3 Information from Third Parties. Information from identity providers if you log in via single sign-on; information from resellers or partners who refer your organization to us; and publicly available business information (e.g., company firmographic data).

1.4 No Access to Customer AI Platform Data. We do not collect, receive, or have visibility into any prompts, data, conversations, or outputs you or your organization submit to or generate within your own Customer AI Platform, including when using the Materials. That processing occurs entirely outside our Services and is governed by your agreement and privacy relationship with your AI Platform provider.

2. How we use personal data

We use personal data to: provide, maintain, and secure the Site; authenticate accounts and manage licenses, seats, and subscriptions; process payments and manage billing; deliver and update Materials available for download; provide customer support; communicate with you about the Services, including updates and security notices; send marketing communications where permitted (with an opt-out); improve and develop the Site and our library of Materials, including aggregated or de-identified analysis of usage and download patterns; detect, investigate, and prevent fraud, abuse, and security incidents; and comply with legal obligations and enforce our Terms of Service.

We do not use, and do not have access to, any data you submit to your own Customer AI Platform to train or improve our products. If you engage us for a custom development engagement, any use of content you share for that purpose is limited to what is authorized in the separate written agreement covering that engagement.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Services under our Terms of Service or an Order Form); legitimate interests (to secure, support, and improve the Site and our Materials, and for direct marketing to business contacts, balanced against your rights); consent (for optional cookies and certain marketing communications, which you can withdraw at any time); and legal obligation (e.g., tax, accounting, and regulatory compliance).

4. How we share personal data

Service providers and sub-processors who perform services on our behalf, including cloud hosting for the Site (e.g., Vercel), authentication and account infrastructure (e.g., Clerk), license and download delivery infrastructure, customer support, relationship management, and marketing automation tooling (e.g., HubSpot), scheduling tools (e.g., Calendly), cold outbound email tooling (e.g., Instantly), website analytics (e.g., Google Analytics), and business email communications (e.g., Google Workspace). If we offer credit card payment for self-service plans in the future, card transactions will be processed by a third-party payment processor.

Professional advisors, such as lawyers, accountants, and auditors, as needed.

Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

Legal and safety purposes, where required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Pentaria, our customers, or others.

With your direction, such as when you connect a third-party integration.

We do not share data with, or route any Customer prompts or AI Platform activity through, any AI model provider, because we do not receive that data in the first place. We do not sell personal data, and we have not sold personal data in the preceding 12 months. We do not share personal data for cross-context behavioral advertising.

5. International data transfers

Pentaria and its sub-processors may process personal data in the United States and other countries. Where we transfer personal data out of the European Economic Area, United Kingdom, or Switzerland, we rely on recognized transfer mechanisms, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where applicable, certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) by relevant sub-processors, such as Google (for Google Analytics) and Clerk (for authentication).

6. Data retention

We retain personal data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Account, license, and billing data is generally retained for the duration of the customer relationship and for a limited period afterward to allow for account recovery and legal compliance, after which it is deleted or de-identified, unless a longer period is required by law or agreed with the customer. Aggregated or de-identified data may be retained longer for analytics.

7. Cookies and tracking technologies

We use cookies and similar technologies on the Site to operate core functionality (including keeping you logged in to download Materials), remember preferences, and understand site usage through analytics tools such as Google Analytics. Google Analytics collects information about your visits to the Site (such as pages viewed, time on page, and device or browser information) and processes it subject to Google’s own privacy practices. Where required by law, we will request your consent before setting non-essential cookies, including Google Analytics cookies, and provide a mechanism to manage your preferences. We honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing where legally required to do so. You can also control cookies through your browser settings, and Google separately offers its own opt-out tools (e.g., the Google Analytics Opt-out Browser Add-on).

8. Your privacy rights

8.1 EEA/UK/Switzerland (GDPR). Subject to applicable conditions and exceptions, you have the right to: access the personal data we hold about you; rectify inaccurate data; erase your data; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

8.2 California (CCPA/CPRA). If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose; delete personal information we hold about you, subject to exceptions; correct inaccurate personal information; opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by the CCPA); limit the use of sensitive personal information (we do not use sensitive personal information for purposes requiring an opt-out); and not be discriminated against for exercising these rights. You may designate an authorized agent to submit requests on your behalf.

8.3 Other U.S. States. Residents of states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, and others as they take effect) have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, or certain profiling, to the extent applicable. We do not engage in targeted advertising or sell personal data.

8.4 Other Jurisdictions. If you are located in a jurisdiction with its own data protection law (e.g., Canada’s PIPEDA, Brazil’s LGPD, or similar frameworks), you may have comparable rights under that law. We will honor applicable rights requests in accordance with local law.

8.5 Exercising Your Rights. To exercise these rights, contact us at privacy@pentaria.com. We may need to verify your identity before fulfilling a request. If you are an authorized user of a business customer, some requests may need to be directed to that business as the data controller for its own end-customer or employee data.

9. Automated processing

Pentaria does not use personal data to make automated decisions about individuals, and does not perform AI-based processing of personal data as part of the Services. The Materials are designed to be used within your own Customer AI Platform; any AI-driven processing that occurs when you use the Materials happens entirely on that third-party platform, outside of Pentaria’s Services and our control, and is subject to that provider’s own privacy practices, which we encourage you to review.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal data on the Site, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

The Services are not directed to individuals under 16, and we do not knowingly collect personal data from children. If we learn we have collected personal data from a child in violation of this policy, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, for material changes, provide additional notice (e.g., by email or in-product notice).

13. Contact us

Path 6, LLC d/b/a Pentaria
513 Kodiak Trl.
Cedar Park, TX 78613-4109
privacy@pentaria.com