Privacy Policy

Introduction

Auditale Inc. ("Auditale", "we", "our" or "us") develops and operates an AI solution for automated quality reviews, which includes Auditale web app, as well as where applicable Auditale API (together - "Platform"). We also operate the website, its subdomains and its related features ("Website", and together with the Platform - the "Services").

Auditale is dedicated to protecting your privacy rights and making our practices regarding your Personal Data more transparent and fair. This Privacy Policy ("Policy") is designed to help you understand how we collect, store, use and share your Personal Data. This Policy applies whenever you visit our Website, install any app or software, interact with our Platform, or otherwise access or use any of our Services. Please note that parts of this Policy may not be applicable to you, depending on the jurisdiction in which you reside and the applicable laws.

Specifically, this Policy describes:

1. What types of data we collect?
2. Tracking Technologies
3. Why we process your Personal Data?
4. With whom we share your data?
5. Marketing and advertising
6. Your rights
7. Transfer of Personal Data
8. How we protect your data?
9. Minors
10. Retention
11. Updates to this Policy
12. Controlling version
13. Contact us

We strongly urge you to read this Policy and make sure that you fully understand and agree to it. If you do not agree to this Policy, please discontinue and avoid using our Services. You have the right to cease using our Services, pursuant to this Policy, at any time.

You are not legally required to provide us with any Personal Data, but without it we will not be able to provide you with the full range or with the best experience of using our Services.

1. What types of data do we collect?

We collect Personal Data about you, meaning any information which potentially allows your identification with reasonable means (for example, email address or name, collectively "Personal Data"). This section sets out how and when we collect and process Personal Data about you.

1.1. Account Information. When you register to our Services, we collect your full name, nickname, password, email address, phone number, your company's name and job title.

1.2. Communication Information. When you send us an email or contact us via the support in our Platform or Website, we collect the Personal Data you provide us. This may include your name, email address, phone number, your company name and any other information you choose to provide.

1.3. Usage Information. When you use our Services, we collect technical information about your interaction with our Services. Such information may include IP address, unique identifiers (e.g., MAC address and UUID), as well as other information which relates to your activity in the Services.

1.4. Device Information. We may collect Personal Data from your device, such as non-precise geolocation data, IP address and other online identifiers (i.e. online data collected from individual's devices, applications and protocols which leave traces which may be used to identify individuals).

1.5. Voluntary Information. Voluntary information provided by you as part of your use of the Services or otherwise collected from time to time (for example, through surveys) to enable us to improve our Services or consider the wider needs of our users or potential users, or voluntary information that might be collected from you upon request and subject to your specific consent, for the purpose of provision of any of the Services to you. We also collect your communication or information provided by you to us when you respond to communications from us, provide us with feedback, register to our events, sign up for our newsletter, communicate with us via email or other digital medium or share additional information about yourself through your use of the Service, including submission of any form or request via Services.

2. Tracking Technologies

When you visit or access our Services, we use cookies, pixels, beacons, local storage and similar technologies ("Tracking Technologies"). These allow us to automatically collect information about you, your device, and your online behavior, in order to enhance your navigation in our Services, improve our Services performance, perform analytics, customize your experience, and offer you, for example, advertisements that better correspond with your interests.

2.1. What types of Tracking Technologies do we use?

When you use or access our Services, we use the following categories of Tracking Technologies:

1. Strictly Necessary Tracking Technologies - These Tracking Technologies are automatically placed on your computer or device when you access our Services or take certain actions on our Platform or Websites. These Tracking Technologies are essential to enable you to navigate around and use the features of our Services. We do not need to obtain your consent in order to use these Tracking Technologies.
2. Functionality Tracking Technologies - These Tracking Technologies allow our Services to remember choices you make (such as your language) and provide enhanced and personalized features. For example, these Tracking Technologies are used for authentication (to remember when you are logged-in) and support other features of our Services.
3. Performance Tracking Technologies - These Tracking Technologies collect information about your online activity (for example, the duration of your visit on our Services), including behavioural data and content engagement metrics. These Tracking Technologies are used for analytics, research and to perform statistics (based on aggregated information).

2.2. How and by whom Tracking Technologies are stored on your device?

We store Tracking Technologies on your device when you visit or access our Services (for example, when you are visiting our Website) - these are called "First Party Tracking Technologies". In addition, Tracking Technologies are stored by other third parties (for example, our analytics service providers, business partners, and advertisers), who run content on our Services - these are called "Third Party Tracking Technologies". Both types of Tracking Technologies may be stored either for the duration of your visit on our Services or for repeat visits.

Third-party analytics providers we use on our Website:

• Google Analytics (Google LLC) — used to measure aggregate Website traffic and understand how visitors interact with our pages. We operate Google Analytics in a strict consent mode: until you accept the "Analytics" category in our cookie banner, Google Analytics does not load any tracking, does not set any cookies, and does not send any data to Google — including no cookieless pings. After you accept, Google Analytics sets cookies (e.g. _ga, _ga_*) and records aggregate visit data. We also honour the Do Not Track (DNT) and Global Privacy Control (GPC) browser signals: if either is enabled in your browser when you visit, we treat that as a decline and the cookie banner does not appear. You can withdraw consent at any time via the same banner. See Google's Privacy Policy and Google Analytics opt-out browser add-on.

There are various ways in which you can manage and control your Tracking Technologies settings. You can change your preferences using our cookie settings tool (however, please note that this tool may only be available in certain jurisdictions). Other methods of managing your Tracking Technology preferences include: changing your browser settings to send a "Do-Not-Track" signal. In such case, your browser will send us a special signal to stop tracking your activity. However, please note that certain features of the Website may not work properly or effectively if you delete or disable cookies.

To learn more about how you can manage your cookies:

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Safari (Desktop)
• Safari (Mobile)
• Android Browser

3. Why we process your Personal Data?

This section explains for what purposes we use your Personal Data, and outlines the legal bases that underlie our usage.

4. With whom we share your data?

We may share, sell and disclose your Personal Data as described below:

1. Affiliated companies: We may share Personal Data internally within our affiliated companies and subsidiaries, for the purposes described in this Policy.
2. Service providers: Our service providers work on our behalf that may need access to certain Personal Data in order to provide their services to us. These companies include those we have hired to provide customer service support, artificial intelligence-related services, operate the technical infrastructure that we need to provide the services and cloud storage vendors.
3. Third Party Integrations: The Services allow you to integrate with certain third party services, in which case you will be bound by the terms and conditions and privacy notices of said third parties - so please make sure that you read and accept them in advance. We do not receive or store your passwords for any of these third party services.
4. Compliance with laws and law enforcement entities: We may disclose any data about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal procedures (including but not limited to subpoenas), to protect our or a third party's property and rights, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable. We may also be required to disclose an individual's Personal Data in response to a lawful request by public authorities, including meeting national security or law enforcement requirements.
5. Auditors and advisers: We may share your data with our external auditors, advisors and professional service providers (e.g., lawyers, accountants, insurers) for ensuring our compliance with regulatory requirements and industry standards.
6. Mergers and acquisitions: We will transfer, sell or otherwise share your data with potential purchasers, successors or investors, in case of entering into a business transaction such as merger, acquisition, reorganization, bankruptcy, or sale of some or all of our assets.

These recipients may only use Personal Data on our behalf or for specific permissible purposes, and are subject to strict confidentiality and data protection requirements as part of our contractual arrangements with them, while ensuring compliance with all applicable data protection regulations. When we disclose Personal Information, we ensure that the recipient only have access to such information that is strictly necessary for us to provide the Services.

We do not offer financial incentive to end users for providing Personal Information.

We do not "Sell" or "Share" Personal Information about you, as these terms are defined under US privacy laws.

5. Marketing and advertising

We may use your Personal Data, such as your email address, collected by the Company or by using our third-party subcontractors for the purpose of providing you with promotional materials via different marketing techniques, such as direct email, concerning the Services, products, services, websites and applications, which relate to: (i) other companies within the Company's group, as applicable; or (ii) the Company's business partners and affiliates, which we believe could interest you, subject to obtaining your explicit consent, when required by applicable law.

We may also offer you this content via email marketing messages. In any case, you may at any time decline receiving further marketing offers from us by clicking on the "Unsubscribe" option available in our messages or by contacting us at inquiries@auditale.ai.

Please note that even if you unsubscribe from our marketing mailing list, we may continue to send you service-related updates and notifications.

6. Your rights

Depending on the jurisdiction in which you reside, you may have certain rights under relevant applicable laws regarding the collection and processing of your Personal Data. To the extent these rights apply and concern you, you can contact us via the contact details available below and ask to exercise the following rights:

6.1. Rights of access to your Personal Data: You have the right to receive confirmation as to whether or not Personal Data concerning you is being processed, and access your stored Personal Data, together with supplementary information.

6.2. Right of data portability: You have the right to request us to move, copy and transfer your Personal Data easily from one IT environment to another, in a safe and secure way, without affecting its usability.

6.3. Right of rectification: You have the right to request rectification of your Personal Data in our control in the event that you believe the Personal Data held by Auditale is inaccurate, incomplete or outdated.

6.4. Right of deletion/erasure: You have the right to request that Auditale erases or deletes Personal Data held about you at any time.

6.5. Right to restriction or objection to processing: You have the right to request that Auditale restricts or ceases to conduct certain Personal Data processes at any time.

6.6. Right to withdraw your consent: To the extent we process Personal Data on the basis of your consent, you have the right to withdraw your given consent at any time.

6.7. Right to limit use and disclosure of your sensitive Personal Data: You have the right to request to limit the collection of your sensitive Personal Data, to that use which is necessary to perform our Services.

6.8. Right not to be subject to automated decision making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly effects to you.

6.9. Right to opt-out of the sale or share of Personal Data: In the event that we sell or share your Personal Data for behavioral advertising purposes, you have the right to submit a request to opt-out of the sale or share of your Personal Data. After you opt-out, we may continue disclosing some Personal Data to our partners to help us perform business-related functions such as, but not limited to, providing the Services, ensuring that the Services are working correctly and securely, providing aggregate statistics and analytics and preventing fraud.

6.10. Right to non-discrimination: You have the right to be free from any discrimination for exercising your rights, such as offering you different pricing or products, or by providing you with a different level or quality of services, based solely upon your request.

Please note that these rights are not absolute, and may be subject to our own legitimate interests and regulatory requirements. You are welcome to contact us for any questions or requests through our contact details below.

We will make an effort to reply within a reasonable timeframe. Please feel free to reach out to us at any time. If you are unsatisfied with our response, you can lodge a complaint with the applicable data protection supervisory authority.

7. Authorized agent

1. You can use an authorized agent to make a request to exercise your right under applicable laws on your behalf if:
   1. The authorized agent is a natural person or a business entity; and
   2. You sign a written declaration that you authorize the authorized agent to act on your behalf. If you use an authorized agent to submit a request to exercise your right, please provide us with a certified copy of your written declaration authorizing the authorized agent to act on your behalf using the contact information below.
2. The request must:
   1. Provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Data or an authorized agent. We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you; and
   2. Describe your request with sufficient details to allow us to properly understand, evaluate, and respond to it.
3. We will only use Personal Data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
4. Making a verifiable consumer request does not require you to create an account with us.

8. Transfer of Personal Data

We operate globally, thus any information that we collect, disclose or share, including your Personal Data, can be stored and processed in various jurisdictions around the world, including (but not limited to) the European Economic Area, United Kingdom and the United States of America, for the purposes detailed in this Policy.

To the extent that the GDPR or UK GDPR are applicable, we will only transfer or share your Personal Data to data recipients:

1. located in the EEA or in the UK;
2. located in non-EEA countries or UK which have been approved as providing adequate level of data protection; or
3. who have entered into legal agreements ensuring an adequate level of data protection.

9. How do we protect your data?

We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of your Personal Data. While we seek to protect your information to ensure that it is kept confidential, we cannot guarantee the security of any information. You should be aware that there is always some risk involved in transmitting information over the internet and that there is also some risk that others could find a way to thwart our security systems. Such breaches can lead to things such as reputational harm, fraud or identity theft. Therefore, we encourage you to exercise discretion regarding the Personal Data you choose to disclose. If you feel that your privacy was treated not in accordance with our Policy, or if any person attempted to abuse the Services or acted in an inappropriate manner, please contact us directly via our contact details available below.

10. Minors

Our Services are only eligible to individuals who are the greater of eighteen (18) years of age or the age of legal majority in the applicable jurisdiction ("Applicable Age"). We do not knowingly collect or solicit Personal Data from anyone under the Applicable Age. By accessing, using or interacting with our Services, you certify to us that you are not under the Applicable Age. In the event that we learn that we have collected Personal Data from an individual under the Applicable Age without verification of parental consent, we will delete that information upon discovery. If you believe that we might have any information from or about an individual under the Applicable Age, then please contact us through the contact details available below.

11. Retention

We will retain your Personal Data for as long as necessary to provide our Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time.

12. Updates to this Policy

We reserve the right to change this Policy at any time. The most current version will always be posted on our Services (as reflected in the "Last Updated" heading). You are advised to check for updates regularly. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Policy.

13. Controlling Version

The Policy has been drafted in the English language, which is the original and controlling version of this Policy. All translations of this Policy into other languages shall be solely for convenience and shall not control the meaning or application of this Policy. In the event of any discrepancy between the meanings of any translated versions of the Policy and the English language version, the meaning of the English language version shall prevail.

14. Contact Us

If you have any further questions, please contact us by email at: inquiries@auditale.ai

Auditale Inc.
122 Grand St
New York, NY 10013-2614