Privacy Policy

Metropolis IQ Technology, Inc. (“we,” “our,” or “us”) is committed to protecting the privacy and security of our users’ and visitors’ (“you” or “your”) data. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website www.metropolisiq.io (the “Website”). It covers the Website only. Use of the MIQ products by a customer organization is governed by that organization’s separate agreement with us.

Owner and data controller: Metropolis IQ Technology, Inc., 15876 Monte Alto Terrace, San Diego, CA 92127. Contact: use our Contact page.

Effective date: October 11, 2026

1. Information We Collect

We collect personal information directly from you when you use our Website. This information includes:

• Name
• Email address
• Employer and employer address
• Phone number
• Usage data of our Website

More specifically, depending on what you do on the Website, we collect:

• Form submissions. When you request a demo, contact us, subscribe to our newsletter, or request a resource, we collect the details you enter (such as name, work email, organization, organization type, title, your message or question, and your interest in a product), the consent choices you make on the form, and the time of submission.
• Demo follow-up. When you request a demo, we do not use an online scheduling service. Metropolis IQ staff review your request and contact you directly, using the details you provided, to arrange a time.
• Attribution information. Where you have allowed analytics cookies, we record the campaign parameters (UTM tags), referring page and landing page that first and last brought you to the Website, so we can attach them to a form you send.
• Visitor association. Where you have allowed analytics cookies, we assign a random first-party visitor identifier so that pages you viewed can be linked to a form you later choose to send.
• Device and usage data. Our hosting and content delivery services receive your IP address, browser and device type, pages requested and the time of the request. We store a hashed version of your IP address for rate limiting and abuse prevention.
• Analytics and advertising data. Only with your consent, analytics and marketing tools described in Section 9 collect information about how you use the Website.
• Bot-detection signals. Our forms use Cloudflare Turnstile to tell people from automated traffic.

Additionally, we may use other public information freely available on government websites or within government documents to enhance the user experience and provide more tailored information and insights.

2. Use of Your Information

The personal information we collect is used to enhance your experience with our Website and provide you with more tailored information and insights. We use this information to:

• Improve and personalize our Website and services
• Communicate with you about our services
• Ensure the security and integrity of our Website

Specifically, we use form data to respond to your request, follow up with you manually to arrange and prepare demos, qualify and follow up on enquiries, and keep a record of your consent choices. We send our newsletter only if you opt in, and your newsletter choice is independent of any other form. We use attribution and analytics data to understand which pages and campaigns are useful and to improve the Website. We use bot-detection and rate-limiting data to prevent abuse.

3. Sharing Your Information

We do not share your personal data with third parties for their marketing purposes. We use the following service providers to operate the Website, and they process personal information on our behalf or, in the case of advertising and analytics tools you have allowed, for their own stated purposes:

Provider	Purpose	Data involved
Amazon Web Services	Website hosting, content delivery, form processing, lead records and email delivery, in the United States	Form data, IP address and request logs
Cloudflare	Turnstile bot detection on forms	Browser signals and IP address
Google (Workspace)	Email and an internal working list of leads, with access limited to our staff	Lead details
Google (Tag Manager and Analytics 4)	Website analytics, only with your consent	Usage data and identifiers
Microsoft (Clarity)	Session recordings and heatmaps, only with your consent	Usage data and identifiers
LinkedIn	Conversion measurement and audiences, only with your consent	Usage data and identifiers; we do not send your name or email
Newsletter provider (MailerLite)	Sending our newsletter to people who opt in	Name, email and subscription choices

We do not sell your personal information for money.

4. Consent and Withdrawal

Optional analytics and marketing tools load only after you opt in through the cookie banner, and nothing optional loads before you choose. You can change or withdraw your choices at any time through the “Cookie settings” link in the footer. If your browser sends a Global Privacy Control signal, we treat it as a request to decline optional categories. You can unsubscribe from our newsletter at any time using the link in every email. We use a double opt-in for the newsletter. Downloading a resource may record you as a lead, and this is independent of newsletter consent.

5. Data Security

We use reasonable administrative, technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, so we cannot promise absolute security. To report a security concern, use our security contact form.

6. Data Retention

We keep personal information only as long as needed for the purposes described in this policy:

• Leads and demo requests: kept while the relationship is commercially relevant and reviewed at least annually.
• Form submission records: kept for 24 months.
• Raw website event records: kept for 90 days.
• Abuse-prevention logs: kept for 30 days.
• Infrastructure logs: kept for 30 to 90 days.
• Google Analytics data: kept for 14 months.
• Newsletter records: kept until you unsubscribe or ask us to delete them.

You also have the right to request deletion of your data (Section 7).

7. Your Rights and Choices

You have the right to request the deletion of your personal data. To do so, use our Contact page with the email address you used, or write to Metropolis IQ Technology, Inc., 15876 Monte Alto Terrace, San Diego, CA 92127. We will delete the data we hold in our systems and ask our providers (including our newsletter and analytics providers) to delete theirs.

If you are a California resident, you may have the following rights under the California Consumer Privacy Act as amended: to know what personal information we collect, use, disclose and retain; to access and correct it; to delete it; to opt out of the “sale” or “sharing” of personal information; to limit use of sensitive personal information (we do not intentionally collect sensitive personal information); and not to be treated differently for using these rights. In the last 12 months we may have collected the following categories from the sources and for the purposes described in Section 1 and Section 2: identifiers (name, email, IP address, online identifiers); commercial information (the product you asked about); internet or network activity (pages viewed, referrer); and professional information (employer, title). Where you have allowed the LinkedIn marketing tool, LinkedIn may use identifiers for its own purposes, which can be treated as “sharing” for cross-context behavioral advertising; you can decline it in the cookie settings, and we honor Global Privacy Control signals. To exercise a right, use our Contact page.

8. International Data Transfer

We do not transfer your data across international borders, ensuring your information is stored and processed within the United States. Our Website is directed to visitors in the United States.

9. Cookies and Tracking Technologies

The Website uses a small number of necessary cookies and, only if you opt in, analytics and marketing tools:

• Necessary. A first-party cookie that remembers your cookie choice, and Cloudflare Turnstile on our forms.
• Analytics (with your consent). Google Tag Manager and Google Analytics 4 to measure which pages are useful, Microsoft Clarity to see how people use pages (session recordings and heatmaps, with form fields masked and sensitive pages excluded), and first-party identifiers that link pages you viewed to a form you later send.
• Marketing (with your consent). The LinkedIn Insight Tag, which lets LinkedIn measure whether its ads lead to demo requests and build audiences. We do not send your name or email to LinkedIn. LinkedIn acts as an independent controller for its own use of the data it receives.

For the full list of cookies, their purposes and durations, and how to change your choices, see our Cookie Policy.

10. Policy Updates

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on our website, with the date of the latest update shown at the top of this page.

11. Contact Us

If you have questions or concerns about this Privacy Policy, or want to make a privacy, security or legal request, please use our Contact page.

12. Children’s Privacy

Our Website is not intended for use by children under the age of 18. We do not knowingly collect personal information from children or other individuals who are not legally able to use our services.