1. Scope
COLMUS INC. ("Colmus", "we", "us"), operator of the Obsidian Command platform (the "Platform") publishes this Privacy Policy to explain what personal data we process and why. It applies to obsidiancommand.org, all subdomains, and the Platform.
2. Data we collect
Account data: email, organization, role, and authentication identifiers.
Operational telemetry: session metadata, IP address, device fingerprint, request logs, and feature usage required to operate, secure, and improve the Platform.
Submitted content: waitlist intake, contact requests, mission configurations, and watchlists you create.
Public-source intelligence: signals ingested from public feeds (news, regulatory filings, code repositories, public social posts). This is not personal data of our users.
3. How we use data
Provide, secure, and operate the Platform; authenticate users; deliver briefings and alerts; respond to inquiries; comply with legal obligations; investigate abuse; and improve our models and ingestion pipelines.
We do not sell personal data. We do not use customer-submitted content to train third-party foundation models.
4. Legal bases
Performance of a contract (delivering the Platform), legitimate interests (security, fraud prevention, product improvement), consent (where required), and compliance with law.
5. Subprocessors
We use vetted infrastructure subprocessors (cloud hosting, databases, AI inference providers, email transport, analytics, error tracking). A current list is available on request.
6. Retention
Operational logs are retained for up to 90 days. Account records are retained for the life of the account plus a legally required tail. You may request deletion at privacy@obsidiancommand.org.
7. International transfers
Data may be processed in the United States and other jurisdictions where we or our subprocessors operate. Where required, transfers occur under standard contractual clauses or equivalent safeguards.
8. Your rights
Subject to applicable law, you may access, correct, export, restrict, or delete your personal data, and lodge complaints with your supervisory authority. Contact privacy@obsidiancommand.org.
9. Contact
Colmus Inc. · privacy@obsidiancommand.org · legal@obsidiancommand.org