Privacy Policy

AUTNMY AI, Inc. (“AUTNMY,” “AUTNMY AI,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal data of our users, visitors, subscribers, and institutional clients. This Privacy Policy describes how we collect, use, store, disclose, and protect your information when you visit and use our website located at roadtoautonomy.com, our newsletters, our podcasts, and any associated subdomains or properties (collectively, the “Site”).

By accessing or using the Site, you agree to the collection, handling, and use of your information as outlined in this Privacy Policy. If you do not agree with these practices, please discontinue use of the Site.

1. Information We Collect

We collect information directly from you, automatically through your use of the Site, and from third-party sources.

Information You Provide Directly:

• Subscription and Accounts: When you sign up for our newsletters (e.g., This Week in the Autonomy Economy™), purchase a product via our e-commerce storefronts, or register for institutional or subscriber access, we may collect your name, email address, company affiliation, job title, phone number, billing address, and payment information (processed securely through third-party processors such as Stripe or Shopify).
• Institutional Inquiries: If you request institutional data access from our pricing page, we collect the work email address and optional company name you submit, whether or not you hold an account, and use them only to respond to your request.
• Communications: If you contact us by email at legal (at) autnmy.ai, we collect the content of your communication and your contact information.

Information Collected Automatically:

• Usage Data and Logs: We collect information about your interactions with the Site, including your IP address, browser type, operating system, referring URLs, device identifiers, pages viewed, links clicked, and the dates and times of your visits.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to analyze trends, administer the Site, track user movements, and gather demographic information. You can control cookies at the individual browser level. Where required by law, including for visitors in the EU, the UK, and other applicable jurisdictions, we request consent for non-essential cookies through a cookie consent banner before those cookies are set.

2. How We Use Your Information

We process personal data to operate our business, meet our legal obligations, and fulfill our contracts with you, including to:

• Provide, maintain, and optimize the Site, our indices, articles, and podcast feeds.
• Deliver newsletters, premium insights, and institutional intelligence products to subscribers.
• Process transactions and e-commerce fulfillment.
• Communicate with you regarding updates, system changes, or promotional offers.
• Protect the security and integrity of our systems, prevent fraud, and enforce our Terms of Use.

Where the GDPR applies, we rely on the following legal bases: performance of a contract for account, subscription, and transaction processing; consent for marketing and newsletter communications, which you may withdraw at any time; our legitimate interests in securing, analyzing, and improving the Site; and compliance with our legal obligations.

3. Open Intelligence and Third-Party AI Data Scrapers

AUTNMY AI, Inc. operates on a principle of open intelligence, granting search engines, foundational models, and Large Language Models (LLMs) a permissive license to ingest and process our public editorial content, podcast transcripts, and public components of The Road to Autonomy Indices under our Terms of Use.

• Protection of Personal Data: This machine ingestion license is limited to our public-facing editorial and analytical content.
• No AI Access to User Data: We prohibit automated crawlers, search engines, and AI models from accessing, harvesting, or scraping any personal data, subscriber email lists, account registries, billing details, or behavioral usage metrics.
• No Model Training on User Behavior: We do not sell, rent, license, or share user browsing patterns or personal subscriber profiles with third-party AI companies for the purpose of training foundational models, behavioral targeting, or algorithm calibration.

4. How We Share Your Information

We do not sell your personal data. We share information with third parties only under the following limited circumstances:

• Service Providers: We share data with trusted vendors who perform operational functions on our behalf (e.g., website hosting, email newsletter delivery, payment gateways, and analytics tools such as Google Analytics). These providers are contractually bound to safeguard your data and use it only as directed.
• Legal Requirements: We may disclose your information if required by law, subpoena, or court order, or if we believe in good faith that such action is necessary to comply with legal obligations or protect the rights and safety of AUTNMY AI, our users, or the public.
• Corporate Transactions: If AUTNMY AI is involved in a merger, acquisition, restructuring, bankruptcy, or asset sale, your information may be transferred as part of that transaction and the associated due diligence.

International Data Transfers: Our service providers may process your data in the United States and other countries. Where we transfer the personal data of users in the EU, the UK, or other protected jurisdictions across borders, we rely on appropriate safeguards, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.

California Sharing: Some analytics and advertising technologies may qualify as a sale or sharing of personal information under California law, even when no money changes hands. California residents may opt out of this activity as described in Section 8.

5. Data Retention and Security

We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, loss, alteration, or disclosure. However, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Specific encryption and retention practices for Nodus, The Road to Autonomy Indices console, are described in Section 7.

6. Gated, Subscriber, and Institutional Content

All information, logs, and authentication tokens associated with gated, password-protected, subscriber-only, or institutional intelligence sections of the Site are treated with heightened security protocols. This data is shielded behind access controls designed to prevent both unauthorized human intervention and automated scraper discovery.

Institutional and enterprise clients may be subject to a separate Data Processing Agreement that governs the handling of data under their engagement. Where such an agreement exists, it controls for the data it covers.

7. Nodus, The Road to Autonomy Indices Console, OMEGA Pulse, and Encryption

Subscribers to The Road to Autonomy Indices use Nodus, the subscriber console operated by AUTNMY AI, Inc. at indices.roadtoautonomy.com (“Nodus” or the “Console”). We built the Console so that we cannot read your private content, not merely so that we choose not to. This section describes exactly what the Console stores, what it cannot see, and how long data is kept.

What the Console stores:

• Account: Your email address and a salted password hash, or your Google sign-in identity if you use it. We never see or store your password. If you upload a profile picture, we store the resized image with your account and display it only to you.
• Billing: Your plan and subscription status. Payments are processed by Stripe; card numbers never touch our systems.
• Preferences: Which operators you follow, your alert rules, email preferences, and custom indices. If you create a share link for a custom index, the frozen snapshot behind that link is viewable by anyone who has the link until you delete it.
• Usage Counts: A daily count of OMEGA Pulse questions per account, used only to enforce the fair use limit. Numbers only, never content.

OMEGA Pulse Questions Are Transient: Questions you ask OMEGA Pulse, and any recent turns your browser supplies for follow-up context, are held in memory only for the seconds needed to produce an answer, then discarded. They are never written to our databases or logs in readable form. To generate the answer, the question and the sealed index record are sent over encrypted connections to our OMEGA model solely for that purpose. Your conversations are never used to train or improve any AI model.

End-to-End Encryption, Zero Access: If you enable saved chat history or research notes, that content is encrypted in your browser with AES-256-GCM under a key derived from a passphrase only you hold. Our servers store ciphertext only. We cannot read, search, index, or recover this content. If you lose your passphrase, the content is unrecoverable by design. Deleting a note or clearing saved history removes the ciphertext from our systems.

Newsletter Management: This Week in the Autonomy Economy™ is delivered by Beehiiv. If you subscribe, from a site footer or your Console account page, we share your email address with Beehiiv for that delivery and nothing else. The account page checks your live subscription status with Beehiiv. Unsubscribing marks your address inactive with Beehiiv, which stops all delivery immediately; the record is retained so resubscribing later is instant. To have the record erased entirely, contact us as described in Section 12.

No Analytics on Subscriber Pages: The Console serves no third-party analytics or advertising scripts on subscriber pages.

Console Service Providers: Cloudflare hosts the Console and stores its data, including the encrypted content described above. Stripe processes payments. Resend delivers transactional email. Beehiiv manages the newsletter, only if you opted in.

Console Retention and Deletion: Account records persist while your account is active. Encrypted content persists until you delete it and is unreadable to us regardless. Institutional inquiries are retained for as long as needed to respond and for our business records. To delete your Console account and its data, use Message Us from any Console page or contact us as described in Section 12; we will confirm when deletion is complete.

8. Your Privacy Rights and Choices

Depending on your jurisdiction, including rights provided under the California Consumer Privacy Act as amended by the CPRA, the EU and UK General Data Protection Regulation, and other state or international frameworks, you may have specific rights regarding your personal information, including:

• Access and Portability: The right to request copies of the personal data we hold about you.
• Correction: The right to request that we rectify inaccurate or incomplete information.
• Deletion: The right to request that we erase your personal data under certain conditions.
• Objection and Restriction: The right to object to or restrict certain processing of your personal data.
• Withdraw Consent: The right to withdraw consent at any time where we rely on consent, without affecting processing already carried out.
• Opt-Out of Marketing: The right to unsubscribe from our marketing and newsletter communications at any time using the “Unsubscribe” link in the footer of our emails or the newsletter controls on your Console account page.
• Do Not Sell or Share: California residents may opt out of the sale or sharing of personal information and may limit the use of sensitive personal information.
• Non-Discrimination: We will not discriminate against you for exercising any of these rights.
• Complaint: EU and UK residents have the right to lodge a complaint with their local data protection supervisory authority.

To exercise any of these rights, contact us at legal (at) autnmy.ai. We may need to verify your identity before responding, and we will respond within the timeframes required by applicable law. Note that content protected by the end-to-end encryption described in Section 7 cannot be produced in readable form by us in response to an access request, because we cannot decrypt it.

9. Third-Party Links

The Site contains links to external websites, platforms, and e-commerce properties, such as our official podcast distributors or store platforms. We are not responsible for the privacy policies or data handling practices of these external third parties. We encourage you to review their policies when you navigate to their systems.

10. Children’s Privacy

The Site is intended for a professional and adult audience and is not directed to children. We do not knowingly collect personal data from children under the age of 16. If we learn that we have collected personal data from a child under that age, we will delete it. If you believe a child has provided us with personal data, contact us at legal (at) autnmy.ai.

11. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time. When updates occur, we will revise the “Last Updated” date at the top of this document. Material changes will be accompanied by a prominent notice on the Site or direct notification to our registered subscribers. Your continued use of the Site following updates constitutes acknowledgment of the revised policy.

12. Contact Us

If you have any questions, regulatory inquiries, or data privacy concerns regarding this policy, contact us at: