Legal
Privacy Policy
Effective August 4, 2026
This Policy describes how That's Cool Inc., doing business as Dissent, handles information on the Dissent website and services. The website does not collect payment or issue service credentials.
Private-beta invite requests use email. Service data flows begin under accepted written terms, an evaluation agreement, a data-processing agreement, or another applicable privacy notice.
1. Information from the public website
Information you choose to send
If you email us or contact us through a linked channel, we receive the contact details, message, and other information you choose to provide. Do not send passwords, API keys, private artifacts, customer content, health information, financial account data, or other sensitive material through ordinary email or the public website.
Technical information
Our hosting and security infrastructure may process IP address, user agent, request path, timestamp, response status, and similar network or device data needed to deliver, secure, diagnose, and prevent abuse of the site.
Cookies and analytics
The public dissent.works website does not currently use advertising cookies or third-party behavioral analytics. Essential hosting and security systems may use short-lived technical storage where necessary to provide and protect the site.
2. Dissent service access
Under written terms, Dissent processes the account, contract, evidence, request, route, model and provider, usage, latency, cost, decision, receipt, outcome, security, support, and billing information needed to provide the service.
Private processing and retention follow the applicable written terms, selected provider or runtime authority, and adopted policy. Dissent does not promise zero retention, a region, provider, model, runtime, or deletion behavior unless that exact route and control are confirmed in the applicable agreement and current authority.
Dissent minimizes retained customer content and preserves host authority. The applicable order and route policy define the exact controls.
3. How we use information
We may use information to:
- deliver, secure, troubleshoot, and improve the public website;
- respond to questions, security reports, and authorized evaluation requests;
- administer separately contracted private access, support, security, and billing;
- prevent fraud, abuse, unauthorized access, and credential compromise;
- comply with law and enforce applicable agreements; and
- create aggregate or de-identified operational statistics that do not identify a person or reveal customer content.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use customer content to build advertising profiles.
4. How we disclose information
We may disclose information only as reasonably necessary to:
- Infrastructure and security providers that host, deliver, monitor, or protect the website;
- Authorized private-service providers or runtimes selected under the applicable route and policy for separately contracted access;
- Payment and billing providers only where a separate private commercial relationship requires them; the public site has no checkout;
- Your organization and its authorized administrators for separately contracted access;
- Legal and safety recipients where reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish or defend claims; and
- Business transaction recipients in a merger, financing, acquisition, reorganization, or asset sale subject to appropriate protections.
We do not publish customer identities or use customer names or logos in marketing without permission.
5. Retention and deletion
Public-site contact and technical records are retained only as reasonably necessary for communication, security, troubleshooting, abuse prevention, legal obligations, and ordinary backup integrity. Separately contracted private records follow the applicable agreement, adopted route policy, and legal requirements.
On a verified valid request, we delete or de-identify eligible records unless retention remains necessary for security, billing, tax, legal, backup-integrity, or dispute purposes. Provider-side or tenant-runtime deletion follows that exact provider/runtime authority; Dissent cannot promise control it does not have.
6. Security
We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure. Notify us at dev@dissent.works if you believe a Dissent-controlled account, credential, or site has been compromised. Do not include the credential itself.
7. International processing
Dissent and its providers may process website information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where required, we use legally recognized safeguards for cross-border transfers. Customer route and residency commitments appear in the applicable written order.
8. Your choices and rights
Depending on your location and relationship with Dissent, you may have rights to request access, correction, deletion, or portability, or to object to or restrict certain processing. Send requests to dev@dissent.works. We may verify your identity and authority before acting. You may appeal a denied privacy request by replying with the subject “Privacy Appeal.”
9. Children
The site is intended for organizations and adults evaluating Dissent and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
10. Changes and contact
We may update this Policy as the site, product, or law changes. We will post the revised version with a new effective date and provide additional notice where appropriate or required.
Questions and requests may be sent to dev@dissent.works. To protect personal privacy, Dissent publishes a company contact channel rather than any individual's residential address, personal telephone number, or personal email address.