1. Key Privacy Commitments

No AI Training on Your Data: We do not use your prompts, training data, or API inputs to train or improve our AI models without your explicit opt-in.

You Control Your Data: Access, download, or delete your data at any time through the Services.

In certain situations, Assistloft may function as a service provider for other businesses. This Privacy Notice does not apply to such processing, and we recommend you read the privacy notice of the respective customer if their processing concerns your personal data.

2. Changes To This Privacy Notice

We may modify this Privacy Notice from time to time, in which case we will update the "Last Updated" date at the top of this Privacy Notice. If we make material changes to the way in which we use or disclose information we collect, we will use reasonable efforts to notify you and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

3. What Is Personal Data?

When we use the term "personal data" in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household.

4. Collection And Use Of Your Information

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

4.1 Information You Provide Us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

Contact Information. Basic contact details, such as name, address, phone number, and email.

Account Information. Account information, such as name, username, email and password. If you believe your account has been compromised, please contact us immediately at security@assistloft.com.

Payment Information. Payment information, such as credit or debit card information and billing address, which we collect using a third party payment processor.

Applicant Information. Applicant details, such as information included in your resume or CV, references, and job history.

User Content. Your input and output, prompts and other content that you input, upload or submit to the Services, including customer-approved webpages and website content used to create knowledge base materials or Q&A pairs, and the output that you create.

Other Information You Provide. Any other information you choose to include in communications with us when necessary to perform our contract with you.

4.2 Information Collected From Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

Authentication services. Some parts of our Services may allow you to login through a third party authentication service such as Okta.

Your Employer / Company. If you interact with our Services through your employer or company, we may receive your information from your employer or company.

Data Providers. To provide our direct mail marketing services, we may purchase or receive personal data, such as name and mailing addresses, from data providers and third parties.

Service Providers. Our service providers that perform services solely on our behalf may collect personal data and often share some or all of this information with us.

Business Partners. We may receive your information from our business partners, such as companies that offer their products and/or services on our Services.

Other Sources. We may also collect personal data about individuals from publicly available sources, or through transactions such as mergers and acquisitions.

Deidentified information. Through the provision of our Services, we may also process deidentified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer or household.

5. Cookies And Other Tracking Technologies

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of tracking technologies. Blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly.

To opt out of tracking by Google Analytics, click here.

Your browser settings may allow you to transmit a "do not track" signal. Like many websites, our website is not designed to respond to such signals. To learn more, visit http://www.allaboutdnt.com/.

6. Disclosure Of Your Information

We may share, transmit, disclose, grant access to, make available, and provide personal data to third parties.

Assistloft Entities. We may share personal data with other companies owned or controlled by Assistloft, including subsidiaries and affiliated entities.

Your Employer / Company. If you interact with our Services through your employer or company, we may disclose your information to your employer or company.

Service and communication providers. We share personal data with third parties who assist us in providing customer services, communications, hosting, infrastructure, IT, analytics, payment processing, employment application services, and administrative services.

Ad networks and advertising partners. We work with third-party ad networks and advertising partners to deliver advertising and personalized content.

Business partners. From time to time, we may share personal data with our business partners at your direction or allow our business partners to collect your personal data.

Business transaction or reorganization. We may disclose personal data in connection with a merger, acquisition, joint venture, financing, sale of company assets, insolvency, bankruptcy, or receivership.

Legal obligations and rights. We may disclose personal data to legal advisors, law enforcement, or other third parties to comply with laws, respond to lawful requests, enforce agreements, detect or prevent fraud, protect rights and safety, or as otherwise required by applicable law.

With your consent. We may disclose personal data about an individual to certain other third parties or publicly with their consent or direction.

7. Third-Party Data Collection And Online Advertising

We may participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history. We and our third-party partners use information collected through tracking technologies to make advertisements more relevant to your interests and to provide advertising-related services such as reporting, attribution, analytics and market research.

Social Media Platforms. We may display targeted advertising to you through social media platforms, such as Twitter, Instagram, LinkedIn, Facebook, TikTok, and other social media forums.

Third Party Partners. We work with third-party partners to provide advertising services and may use features through Google Analytics, Google Ads Preferences, and NAI resources.

8. Control Over Your Information

Email Communications Preferences. You may unsubscribe from marketing emails by clicking the unsubscribe link provided at the bottom of the email communication. You cannot unsubscribe from certain service-related communications.

Modifying or Deleting Your Information. If you have questions about reviewing, modifying, or deleting your information, you can contact us directly using the information provided in the Contact Us section.

Online Ads. To learn more about interest-based advertising and opt-out options, visit www.aboutads.info/choices or http://www.networkadvertising.org/choices.

Please note that opting out of interest-based advertisements does not mean you will no longer see advertisements from us or on our online services.

9. Children's Personal Data

Our Services are not directed to, and we do not intend to knowingly collect or solicit personal data from children under the age of 13. If we learn that any personal data we have collected has been provided by a child under the age of 16, we will promptly delete that personal data.

10. Data Security And Retention

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice.

11. Links To Third-Party Websites And Services

Our Services may include links to third-party websites, plug-ins and applications that we do not own or operate. Our Privacy Notice does not apply to your browsing or other interactions on any other website or service.

12. U.S. Residents

This section supplements the other sections of this Privacy Notice and applies to you only if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") that applies to us and requires specific privacy notice disclosures.

12.1 Processing of Personal Information

In the preceding 12 months, we collected and disclosed for a business purpose the following categories:

• Identifiers, such as name, email address and IP address.
• Personal information categories listed in the California Customer Records statute.
• Commercial information such as records of products or services purchased.
• Internet or other similar network activity such as usage data.
• Geolocation data such as IP address.
• Professional, employment-related, and education information provided by applicants.
• Account access credentials for the Services.

12.2 Selling and/or Sharing of Personal Information

We do not "sell" or "share" personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we "sell" or "share" personal information of residents under 16 years of age.

12.3 California Account Holders Under 18

California residents under the age of eighteen who have registered to use the Services and posted content or information available to others on the Services can request that such information be removed by contacting us.

13. Data Transfers

The personal information that we collect will be transferred to, stored at, processed in, or accessed from countries outside the jurisdiction in which you are based, including countries in which our service providers or other third parties are located. Specifically, we have servers for the Service in the US.

For transfers of data outside the relevant jurisdiction, we will use applicable safeguards where required. Please contact us at privacy@assistloft.com if you wish to inquire further about such data transfer mechanisms.

14. Your Rights And Choices

Depending on where you live, you may have some or all of the rights listed below in relation to personal information that we have collected about you. These rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Right to access or know.
• Right to delete.
• Right to correct.
• Right of portability.
• Restriction of processing.
• Objection.
• Withdrawal of consent.

You may exercise any of these rights by contacting us using the information provided below. You may also request to delete your account by contacting us at privacy@assistloft.com.

15. Complaints

If you have complaints about how we process your personal information, please contact us at privacy@assistloft.com, and we will respond to your request as soon as possible.

If you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the country in which you live or work, with the UK Information Commissioner's Office, or with another relevant data protection authority as applicable to you.

16. Contact Us

Should you have any questions about our privacy practices or this Privacy Notice, please email us at privacy@assistloft.com.

We value your privacy and your rights as a data subject and have therefore appointed GDPR Local with its local partners as our privacy representative and your point of contact for the EEA/EU and UK.

If you want to contact us via our representative, GDPR Local, or make use of your data subject rights, please visit https://fireworksaiinc.gdprlocal.com/eu.