Privacy Policy

Last updated: September 26, 2023

This Privacy Policy describes how Duality (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) collects, uses, and discloses your information when you use our services and products. 

We use your personal data to provide and improve the FALCON Suite and Duality website (www.duality.ai) (referred to as “Services” in this Agreement). Personal data is any information that identifies, relates to, describes, or is capable of being associated with you, such as name, location, and email address.

By using the Services, you agree to the collection and use of information under this Privacy Policy.

Collecting and Using Your Personal Data

We collect several types of information.

Personal Data

While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include but is not limited to:

  1. Email address
  2. First name and last name
  3. Bank account information to pay for products and/or services within the Services
  4. Usage Data

Usage Data

Usage Data is collected automatically when using the Services. Usage Data may include information such as your device's internet protocol address (e.g., IP address), browser type, browser version, the pages of our Services that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to track the activity on our Services and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our Services. 

Use of Your Personal Data

The Company may use personal data for the following purposes:

  1. To provide and maintain our Services, including to monitor the usage of our Services.
  2. To manage your account: to manage your registration as a Services user. The personal data you provide can give you access to different functionalities of the Services that are available to you as a registered user.
  3. For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items or services you have purchased or of any other contract with Us through the Services.
  4. To contact you: To contact you by email or other equivalent forms of electronic communication,
  5. To provide you with news and general information about other services and events that we offer similar to those you have already purchased or enquired about unless you have opted not to receive such information.
  6. To manage your requests: To attend and manage your requests to Us.
  7. For business transfers: We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about our Services users is among the assets transferred.
  8. For other purposes: We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Services, products, services, marketing, and your experience.

We may share your personal information with your consent.

Retention of Your Personal Data

The Company will retain your personal data and usage data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Transfer of Your Personal Data

Your information, including personal data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. Your consent to this Privacy Policy and submission of such information represents your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that your data is treated securely and following this Privacy Policy, and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that we assist in deleting the personal data we collected about you. You may contact us to request access to, correct, or delete any personal information that you have provided to us.

We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Security of Your Personal Data

The security of your personal data is important to us. Unfortunately, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its security.

Subprocessors

To provide certain Services, we engage with third parties (i.e., subprocessors) that may process your personal data. These subprocessors are listed below:

  1. Amazon Web Services, Inc. (AWS) provides data hosting, infrastructure, and storage services.
  2. Google LLC (GCP) provides data hosting, infrastructure, and storage services.
  3. Atlassian PTY, Ltd. provides engineering support ticket processing. 
  4. Salesforce, Inc. provides user database management. 
  5. Slack Technologies, LLC provides workplace communication.
  6. Mailgun Technologies provides email functionality from the Services.

GDPR Privacy

Legal Basis for Processing Personal Data under GDPR

We may process personal data under the following conditions:

  1. Consent: you have given your consent for processing personal data for one or more specific purposes.
  2. Performance of a contract: provision of personal data is necessary for the performance of an agreement with you and/or any pre-contractual obligations thereof.
  3. Legal obligations: processing personal data is necessary for compliance with a legal obligation to which the Company is subject.
  4. Vital interests: Processing personal data is necessary in order to protect your vital interests or of another natural person.
  5. Public interests: Processing personal data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
  6. Legitimate interests: Processing personal data is necessary for the purposes of the legitimate interests pursued by the Company.

In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular, whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract.

Your Rights under the GDPR

We undertake to respect the confidentiality of your personal data and to guarantee you can exercise your rights.

You have the right under this Privacy Policy, and by law, if you are within the EU, to request access to your personal data, request correction of the personal data that we hold about you, object to the processing of your personal data, request the erasure of your personal data, request the transfer of your personal data, and withdraw your consent.

Exercising Your GDPR Data Protection Rights

You may exercise your rights of access, rectification, cancellation, and opposition by contacting us. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will respond to you as soon as possible.

You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.

CCPA/CPRA Privacy Notice

This privacy notice section for California residents supplements the information contained in our Privacy Policy, and it applies solely to all visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information that we may collect or may have collected from California residents within the last twelve (12) months.

Please note that the categories and examples provided in the list below are those defined in the CCPA/CPRA. This does not mean that we collected all examples of that category of personal information but reflects our good faith belief that some of that information from the applicable category may be and may have been collected. For example, certain categories of personal information would only be collected if you provided such personal information directly to us.

  1. Identifiers, such as a real name, Internet Protocol address, email address, or other similar identifiers.
  2. Commercial information, such as records and history of products or services purchased or considered.
  3. Internet or other similar network activity, such as interaction with our Services or advertisement.
  4. Geolocation data, such as approximate physical location derived from IP addresses
  5. Sensitive personal information, such as account login and password information.

For details about the precise data points we collect and the categories of sources where we got that information, please see “Types of Data Collected” above. We collect personal information for the business and commercial purposes described in “Use of Your Data” above.

Share of Personal Information

We do not sell personal information as the term sell is commonly understood. We may share, and may have shared in the last twelve (12) months, your personal information identified in the above categories with the following categories of third parties: service providers, payment processors, and third-party vendors to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

Your Rights under the CCPA/CPRA

The CCPA/CPRA provides California residents with specific rights regarding their personal information. If you are a resident of California, you have the following rights: the right to notice, the right to know/access, the right to say no to the sale or sharing of personal data (opt-out), the right to correct personal data, the right to limit use and disclosure of sensitive personal data, the right to delete personal data, and the right not to be discriminated against. 

To exercise any of your rights under the CCPA/CPRA, and if you are a California resident, you can contact us by email: support@duality.ai

Children's Privacy

We do not knowingly collect personal data from anyone under the age of 16. If you are under 16, please do not attempt to fill out our forms, register or use the Services, or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 16, we will delete that information promptly.

Changes to this Privacy Policy

We may update our Privacy Policy occasionally. We will notify you of any changes by posting the new Privacy Policy on this page. We will inform you via email and/or a prominent notice on our Services, before the change becomes effective, and update the "Last updated" date at the top of this Privacy Policy. you are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us by email: support@duality.ai.

‍