Privacy Policy

PRIVACY POLICY

Last Updated

August 13, 2026

Privacy Policy Version

2026.08.13.1

Company Legal Business Name

Theta Wave Blue Media LLC

Company Abbreviation

TWBM

Company Principal Address

137 West Bridge Street, Suite 145,    Homestead, Pennsylvania 15120

Phone

(412) 352-3343

Email / Privacy Contact

norman.domek@thetawaveblue.com

Website

www.thetawaveblue.com

PRIVACY AT A GLANCE

We do not knowingly sell, rent, or trade personal   information. We also do not knowingly give personal information to third   parties for cross-site or cross-context behavioral advertising.

We use information to run the business and serve clients.   That includes responding to inquiries, processing purchases, creating   work, managing subscriptions, communicating, improving services, and   protecting our systems and rights.

AI and technology are part of our workflow. For client   work, information may be processed with AI, automation, transcription,   analytics, cloud, and related technology when allowed by this Policy and the   applicable client agreements.

Please do not send specially regulated or highly   sensitive information unless we agree in writing first. Examples   include full payment-card data, bank login credentials, protected health   information subject to HIPAA, biometric identifiers, Social Security numbers,   and government-classified information.

1. WHAT THIS POLICY COVERS

This Privacy Policy explains how Theta Wave Blue  Media LLC ("TWBM", "we," "us," or "our") collects, uses, shares, keeps, and protects personal information when you visit our website, contact us, buy or use our products or services, submit questionnaires or files, participate in meetings, use shared workspaces, or otherwise work with us.

A specific Mutual Nondisclosure Agreement, Intellectual Property Agreement, services agreement, order, or other signed document may provide additional or more specific privacy and confidentiality rules. For the information that document specifically addresses, the more specific signed agreement controls.

2. INFORMATION WE COLLECT

We collect information that is reasonably useful for our website, business operations, purchases, and client work. Depending on how you interact with us, this may include:

• Contact and account information, such as your name, business name, title, mailing address, email address, phone number, account details, and authorized-representative information.

• Purchase and subscription information, such as products or services purchased, amounts, billing status, renewal status, transaction identifiers, shipping information, and related records.

• Client and project materials, such as questionnaires, surveys, documents, images, audio, video, recordings, meeting notes, business records, brand information, customer or market information, instructions, preferences, and materials you ask us to work with.

• Communications, including emails, forms, messages, meeting information, support requests, feedback, approvals, and other interactions with us.

• Website and device information that may be collected automatically by our site or service providers, such as IP address, browser or device type, pages viewed, referral information, approximate location derived from IP address, timestamps, cookies, and similar technical data.

• Information from your organization, its Authorized Representatives, service providers, public sources, or other third parties when reasonably related to our work or business relationship.

3. HOW WE USE INFORMATION

We may use information to:

• respond to inquiries, provide proposals, process purchases, manage accounts and subscriptions, and deliver products or services;

• plan, create, edit, analyze, personalize, improve, and deliver client work and other content;

• communicate about projects, payments, meetings, approvals, support, security, policy changes, and other service matters;

• operate shared folders, workspaces, websites, systems, and other tools used in the client relationship;

• protect our systems, clients, rights, property, and users; detect fraud or misuse; enforce agreements; and resolve disputes;

• maintain accounting, tax, legal, compliance, transaction, and business records;

• improve our methods, products, services, workflows, and internal systems; and

• send marketing or educational communications when permitted, with the choices described below.

4. AI, AUTOMATION, AND ADVANCED TECHNOLOGY

AI is part of our normal business and creative workflow. We may use artificial intelligence, machine learning, transcription, automation, analytics, retrieval systems, agents, generative media, knowledge bases, and related technologies to organize, summarize, compare, analyze, transform, generate, edit, retrieve, and create information and work product.

For client work, these tools may process questionnaires, interviews, files, recordings, business information, notes, and other Client Materials to help create specialized plans, reports, strategies, documents, websites, images, graphics, audio, video, media, code, business systems, recommendations, and other deliverables. Where a client agreement authorizes it, we may also configure, fine-tune, train, test, evaluate, or improve client-specific models, assistants, agents, automations, knowledge bases, datasets, workflows, or our internal methods and systems.

We may use third-party AI, cloud, transcription, analytics, automation, hosting, storage, and related technology providers. Depending on the provider, contract, account settings, and technical design, those providers may process, retain, log, cache, evaluate with, improve from, train on, or otherwise handle information. More specific permissions and limits for confidential client information are described in the applicable NDA or other client agreement.

We may use de-identified or aggregated information that does not reasonably identify a person or client to improve our methods, tools, systems, datasets, and services. We do not intentionally use personal information for a hidden purpose that conflicts with this Policy or an applicable client agreement.

5. WHEN WE SHARE INFORMATION - AND WHEN WE DO NOT

We do not knowingly sell, rent, or trade personal information. We also do not knowingly give personal information to third parties for cross-site or cross-context behavioral advertising.

We may disclose information when reasonably needed to operate the business or provide services, including to:

• technology and service providers that support payments, websites, email, cloud storage, file sharing, AI, automation, transcription, analytics, communications, shipping, security, accounting, and similar business functions;

• employees, contractors, professional advisers, and other people who reasonably need the information to perform work or protect our rights;

• a client organization, its Primary Authorized Signer, and its Authorized Representatives when the information relates to that organization or its work;

• government authorities, courts, law enforcement, regulators, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or prevent fraud or misuse;

• a buyer, successor, lender, investor, affiliate, or adviser involved in a merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate legal obligations; or

• another party when you ask us to share the information or otherwise authorize the disclosure.

Service providers have their own systems, contracts, privacy practices, security measures, and technical limitations. We use reasonable care in selecting providers for our services, but we do not control every independent act of a third-party provider.

6. WEBSITE, COOKIES, AND ANALYTICS

Our website and service providers may use cookies, logs, pixels, local storage, or similar technology for site operation, security, fraud prevention, preferences, performance, and basic analytics. These tools may collect technical information such as IP address, browser or device information, pages viewed, referral information, and timestamps.

We do not knowingly use our website to sell personal information or for cross-site behavioral advertising. You can usually control cookies through your browser or device settings, although disabling some technology may affect site features. If applicable law requires us to recognize a browser-based privacy preference signal, we will do so as required.

7. PAYMENTS AND FINANCIAL INFORMATION

Payments are generally handled by third-party payment or commerce providers. We may receive transaction information such as the buyer name, email, amount, product or service, payment status, subscription status, and transaction identifier. We generally do not need to receive or store your full payment-card number or card security code.

Please do not send full card numbers, card security codes, bank login credentials, PINs, or similar payment credentials by email, questionnaire, shared document, or ordinary message. Enter payment credentials only through the approved payment provider unless we give you different secure instructions.

8. SENSITIVE OR SPECIALLY REGULATED INFORMATION

Our ordinary services are not designed to receive specially regulated or unusually sensitive information unless we agree to the required handling in writing first. Please do not send protected health information subject to HIPAA, Social Security numbers, full payment-card data, bank login credentials, biometric identifiers, government-classified information, or information you are not legally permitted to share unless you first identify the restriction and we agree in writing to receive and handle it.

TWBM is not agreeing to act as a HIPAA Business Associate or another specially regulated data processor merely because a client sends us information. Any such role must be expressly accepted in a separate written agreement.

9. HOW LONG WE KEEP INFORMATION

We keep information for as long as reasonably necessary for the purposes described in this Policy, to provide services, maintain appropriate business and legal records, protect our rights and systems, comply with law, and resolve disputes. Retention periods vary based on the type of information, the service, the client relationship, provider settings, and legal or contractual requirements.

When a subscription or client relationship ends, access to shared folders, workspaces, subscription libraries, or working resources may end under our Terms or project agreement. Ending shared access does not necessarily mean every internal business record is immediately deleted.

We will take reasonable steps to delete or de-identify information under our direct control when it is no longer reasonably needed and no legal, contractual, security, accounting, archival, or business reason requires retention. Ordinary backups, provider logs, caches, records required by law, and information already processed into authorized AI or technology systems may not always be capable of immediate or complete deletion or reversal.

10. HOW WE PROTECT INFORMATION

We use reasonable administrative, technical, and organizational safeguards appropriate to our size, systems, services, and the information we handle. We also try to limit collection and access to what is reasonably needed for the work.

No website, cloud service, email system, device, storage system, or method of transmission can be guaranteed completely secure. You are responsible for protecting passwords and access credentials you control and for telling us promptly if you believe an account, credential, shared file, or communication has been compromised.

11. SECURITY INCIDENTS

If we learn of a security incident involving information under our control, we will take reasonable steps to assess the situation, contain or reduce the risk, work with relevant providers, preserve appropriate records, and notify affected people or authorities when applicable law requires notice. The timing and content of any notice will depend on the facts and the law that applies.

12. YOUR CHOICES AND PRIVACY RIGHTS

Depending on where you live and which laws apply, you may have rights to ask for access to, correction of, deletion of, or other treatment of certain personal information. You may also have the right to use an authorized agent or to appeal a privacy decision where applicable law provides those rights.

We may need to verify your identity or authority before acting on a request. We may also keep information that we are legally allowed or required to retain, including transaction, tax, security, contract, dispute, backup, and other legitimate business records. We will not unlawfully discriminate against you for exercising an applicable privacy right.

Privacy requests may be sent to norman.domek@thetawaveblue.com.

You may unsubscribe from marketing emails using the unsubscribe method provided in the message or by contacting us. We may still send non-marketing communications reasonably necessary for transactions, security, subscriptions, projects, legal notices, or customer service.

13. CHILDREN'S PRIVACY

Our general website and services are not directed to children under 13, and we do not knowingly collect personal information online from a child under 13 through our general services without the permissions or process required by law. Purchases and contractual services are generally intended for adults who can legally enter an agreement. If you believe a child has provided personal information to us inappropriately, contact us so we can review the situation.

14. WHERE INFORMATION MAY BE PROCESSED

TWBM is based in the United States. Information may be stored or processed in the United States and in other locations where our service providers operate. Privacy and data-protection laws may differ from one place to another. Where a law that applies to us requires a particular transfer, notice, or protection mechanism, we will use the mechanism required by that law.

15. THIRD-PARTY WEBSITES AND SERVICES

Our website, communications, or deliverables may link to or use third-party websites, social platforms, payment systems, software, hosting services, plugins, AI tools, or other services. Their independent privacy practices are governed by their own policies and terms. This Policy describes TWBM's practices and does not control an unrelated third party's independent collection or use of information.

16. CHANGES TO THIS POLICY

We may update this Policy as our services, technology, providers, or legal obligations change. The Last Updated date and Privacy Policy Version identify the version in effect. Material changes will apply prospectively, and we will provide notice or obtain additional consent when required by law or when a specific agreement requires it. The OS should preserve historical policy versions associated with applicable transactions and client records.

17. CONTACT US

Theta Wave Blue Media LLC
137 West Bridge  Street, Suite 145, Homestead, Pennsylvania 15120
Phone: (412) 352-3343
Email / Privacy Contact: norman.domek@thetawaveblue.com
Website: www.thetawaveblue.com

Privacy Policy Version 2026.08.13.1 | Last Updated August  13, 2026