// Legal

Regional Privacy Supplement

Effective July 9, 2026Version 2026-07-09--01

Regional Privacy Supplement

Last updated: July 8, 2026

This Regional Privacy Supplement adds extra information for people in certain locations.

It supplements the Watson Privacy Policy. If this Supplement conflicts with the Privacy Policy for your region, this Supplement controls for that region.

When we say “Watson,” “Company,” “we,” “our,” or “us,” we mean Watson Labs, Inc., a Delaware corporation.

Questions or privacy requests can be sent to:

hello@withwatson.co

1. U.S. State Privacy Notice

Some U.S. states provide residents with specific privacy rights. Depending on where you live and whether the law applies to Watson, you may have rights described in this section.

These rights may include the right to:

  1. know whether we process your personal information;
  2. access your personal information;
  3. correct inaccurate personal information;
  4. delete personal information;
  5. obtain a copy of personal information in a portable format;
  6. opt out of certain targeted advertising;
  7. opt out of certain sales of personal information;
  8. opt out of certain profiling or automated decision-making;
  9. limit certain uses of sensitive personal information;
  10. appeal a denied privacy request.

How to Make a Request

You may make a privacy request by emailing:

hello@withwatson.co

Please include enough information for us to understand and respond to your request.

We may need to verify your identity before responding. If your request relates to an organization, we may need to verify your authority to act for that organization.

You may also use an authorized agent where required by law. We may ask for proof that the agent is authorized to act on your behalf.

Appeals

If we deny your privacy request and applicable law gives you the right to appeal, you may appeal by replying to our decision email or contacting:

hello@withwatson.co

Use the subject line: Privacy Appeal

Non-Discrimination

We will not discriminate against you for exercising privacy rights required by applicable law.

This does not stop us from offering different plans, features, pricing, or service levels when the difference is reasonably related to the value, cost, permissions, or data needed to provide the Services.

2. Categories of Personal Information We May Collect

Depending on how you use Watson, we may collect the following categories of personal information.

Category

Examples

Sources

Purposes

Identifiers

Name, email address, account ID, IP address, organization name

You, your organization, your device, integrations

Account creation, login, support, security, billing, communications

Account and profile information

Profile details, avatar, role, workspace settings

You, organization admins

Provide user profiles, permissions, collaboration, organization management

Commercial information

Plan, subscription status, invoices, payment status, usage-based billing data

You, Stripe, our systems

Billing, subscription management, accounting, fraud prevention

Internet or network activity

Log data, browser type, device type, pages viewed, features used, timestamps

Your device, our systems, analytics tools

Security, debugging, analytics, product improvement

Approximate location

Approximate location from IP address

Your device, service providers

Security, localization, fraud prevention, analytics

Professional or business information

Organization, role, team, client or business context you provide

You, your organization, integrations

Provide the Services, collaboration, support, product experience

User content

Files, notes, messages, records, creative assets, client information, metadata, imports

You, your organization, integrations

Store, display, process, support, improve, and operate the Services

Communications

Support messages, feedback, emails, attachments

You

Support, debugging, product improvement, legal records

Inferences or derived information

Usage patterns, feature preferences, account activity insights

Our systems

Product improvement, analytics, personalization, assistant or automation features

Sensitive information

Only if you choose to provide it in content, communications, or integrations

You, your organization, integrations

Provide the Services, support, security, compliance, or other purposes described in the Privacy Policy

Do not upload sensitive information unless you have the right to do so and you understand the risks.

3. Categories of Personal Information We May Disclose

We may disclose the categories above to:

  1. hosting and infrastructure providers;
  2. payment processors, including Stripe;
  3. analytics providers;
  4. email and communication providers;
  5. support tools;
  6. security and monitoring providers;
  7. professional advisors;
  8. organization owners, admins, members, and authorized users;
  9. integrations you connect;
  10. legal, regulatory, or government authorities where required;
  11. business transaction parties in a merger, acquisition, financing, sale of assets, or similar event.

4. Sale, Sharing, Targeted Advertising, and Profiling

We do not currently describe our core product practice as selling personal information.

We may use service providers, analytics, cookies, integrations, or business tools that could be treated differently under different state laws.

If we engage in a practice that requires an opt-out, consent, or other privacy control under applicable law, we will provide the required control.

We may use, publish, or share aggregated, de-identified, or otherwise processed information that does not reasonably identify you or your organization.

5. Sensitive Personal Information

We do not want Watson to become a junk drawer for highly sensitive information.

Depending on the law that applies, sensitive information may include things like precise location, government identifiers, financial account details, health information, biometric information, religious beliefs, sexual orientation, citizenship or immigration status, and information about children.

We may process sensitive information if you upload it, if your organization uploads it, if an integration provides it, or if it is needed for security, support, compliance, or the Services you request.

Where required by law, we will provide any required notice, consent, limit, or opt-out control.

6. De-Identified and Aggregated Information

We may create aggregated, de-identified, or otherwise processed information from use of the Services.

We may use, publish, or share this information for research, benchmarking, product development, business analysis, industry reporting, and similar purposes.

Where we treat information as de-identified, we will take reasonable measures designed to avoid using that information to identify a specific person.

7. California Notice at Collection

This section is for California residents.

We may collect the categories of personal information listed in Section 2 above.

We collect and use that information for the purposes described in the Watson Privacy Policy and this Supplement, including to:

  1. provide the Services;
  2. manage accounts and organizations;
  3. process payments;
  4. provide support;
  5. secure the Services;
  6. debug and improve the product;
  7. communicate with you;
  8. support integrations;
  9. develop current and future assistant, automation, analytics, and AI-related features;
  10. comply with legal, tax, accounting, and regulatory obligations;
  11. create aggregated, de-identified, or otherwise processed insights.

We retain information for as long as reasonably needed for the purposes described in the Privacy Policy, unless a longer period is required or permitted by law. Our more detailed data retention policy is still being finalized.

California residents may have the right to:

  1. know what personal information we collect, use, disclose, sell, or share;
  2. access personal information;
  3. delete personal information;
  4. correct inaccurate personal information;
  5. opt out of sale or sharing;
  6. limit certain uses of sensitive personal information;
  7. not be discriminated against for exercising CCPA rights.

To make a request, contact:

hello@withwatson.co

8. Colorado, Connecticut, Delaware, Texas, Virginia, and Similar State Notices

Residents of certain U.S. states may have rights to:

  1. access personal data;
  2. correct inaccuracies;
  3. delete personal data;
  4. obtain a portable copy;
  5. opt out of targeted advertising;
  6. opt out of sale of personal data;
  7. opt out of certain profiling or automated decision-making;
  8. appeal a denied request.

To make a request, contact:

hello@withwatson.co

If your browser or device sends a legally recognized opt-out preference signal and applicable law requires us to honor it, we will handle that signal as required by law.

9. EEA, UK, and Swiss Notice

This section applies to users in the European Economic Area, United Kingdom, and Switzerland where applicable data protection law applies.

Controller

The controller of your personal data is:

Watson Labs, Inc.
hello@withwatson.co

Personal Data We Process

We may process the categories of personal data described in the Watson Privacy Policy, including:

  1. account information;
  2. profile information;
  3. organization information;
  4. uploaded content;
  5. billing information;
  6. usage, device, and log information;
  7. communications;
  8. integration data;
  9. derived product and usage insights.

Legal Bases

Depending on the processing activity, we may rely on the following legal bases:

  1. Contract — to provide the Services, manage accounts, process billing, and support organizations.
  2. Legitimate interests — to secure, improve, analyze, and develop the Services, respond to support requests, understand usage, and protect Watson and users.
  3. Consent — where we ask for consent, such as for certain optional cookies, marketing, or specific data uses.
  4. Legal obligation — to comply with tax, accounting, legal, regulatory, and law enforcement obligations.
  5. Vital interests or public interest — where applicable and legally appropriate, such as urgent safety or security situations.

International Transfers

Watson Labs, Inc. is based in the United States.

If you use Watson from outside the United States, your personal data may be processed in the United States and other countries where we or our service providers operate.

Where required, we will use appropriate transfer safeguards or other legal mechanisms for international transfers.

Your Rights

Depending on your location and applicable law, you may have the right to:

  1. access your personal data;
  2. correct inaccurate personal data;
  3. delete personal data;
  4. restrict processing;
  5. object to processing;
  6. receive a portable copy of personal data;
  7. withdraw consent where processing is based on consent;
  8. complain to a supervisory authority.

To make a request, contact:

hello@withwatson.co

Automated Decision-Making

Watson may develop assistant, automation, analytics, AI-related, or profiling features.

We do not currently describe Watson as making solely automated decisions that produce legal or similarly significant effects about users.

If that changes, we will update our policies and provide any notices or choices required by law.

10. Canada Notice

If Canadian privacy law applies to your use of Watson, you may have the right to request access to or correction of personal information we hold about you.

You may also be able to withdraw consent where processing is based on consent, subject to legal or contractual limits.

To make a request, contact:

hello@withwatson.co

11. Other Regions

Privacy rights vary by location.

If you live somewhere not specifically listed in this Supplement, you may still contact us with a privacy request at:

hello@withwatson.co

We will respond as required by applicable law and as reasonably practical for the Services.

12. Changes to This Supplement

We may update this Regional Privacy Supplement from time to time.

When we make significant changes, we will update the date at the top and take reasonable steps to notify users, such as by email, in-product notice, or posting an updated version on our website.