Privacy Policy

1 . INTRODUCTION

Versatile, Inc. (“Versatile”, “we”, “us” or “our”) respects the privacy of its users (“User(s)”, “your”, “you”, “data subject(s)”, “Vistor(s)”, or “Client(s)”), and is committed to protecting your privacy and the personal information that you share with us through the use of our Site found at https://www.versatile.ai (the “Website” or “Site”)” and our Versatile® platform, devices, software, mobile app (the “Platform”, or “Versatile System”, collectively with the Site, the “Services”).

Versatile Privacy Policy (the “Privacy Policy” or “Policy”) outlines the data collection and processing procedures utilized by our Site and Platform. This Policy provides transparency into the types of personal information that are collected and the manner in which they are utilized. By accessing our website and platform, you acknowledge and consent to the data practices described in this Policy.

Please note if you follow a link to any other website from our Services, please check their privacy policies before submitting any personal information to those websites. By visiting our Site or registering our Services, you consent that we will collect and use your information under the terms of this Privacy Policy.

Please read this Privacy Policy and contact us if you have any questions at: privacy@versatile.ai

2 . ABOUT THIS PRIVACY POLICY

We have created this Privacy Policy to demonstrate our commitment to our User’s right to privacy. Your use of the Site and Services requires submitting Personal Data (as defined below), but only if you voluntarily choose to provide us with such Personal Data. Our Site is available to relevant users, and certain functionalities may require registration and submission of certain Personal Data, as described in this Privacy Policy, such as when you request to use our Platform Services. We will retain your Personal Data you provide us through the use of the Site and Services in accordance with this Privacy Policy.

This Privacy Policy was designed with the EU General Data Protection Regulation (GDPR) and Israel applicable privacy law. However, given the country of your residency, other rules may apply to your Personal Data (see defined below “Applicable Privacy Laws”). If you are an EEA resident, please refer to our EEA Resident notice below. If you are a resident of California, we advise you to refer to the CPRA Privacy notice below.

Please read the Privacy Policy carefully to ensure you understand it and agree with its terms before using the Site and the  Services. You have no legal requirement to provide us your Personal Data. We collect, process and retain your Personal Information only if you choose to access and engage with our Site and/or our Services and in accordance with this privacy policy. You can always avoid providing us certain Personal Data; however, you acknowledge that it may prevent us from providing you certain Services or use our Site. If you do not agree with any of the terms provided in this Privacy Policy, and the choices we provide do not mitigate your concerns, please do not access or use our Services and avoid accessing and using our Website.

3 . PRELIMINARY NOTES

Please read this policy and make sure you fully understand our practices in relation to your personal data (“Personal Data”)  before you access or use the Site or our Services. If you have read this Privacy Policy, and remain opposed to our practices, you must immediately leave this Site, and avoid or discontinue all use of the Services.  If you have further questions or concerns regarding this policy, please do not hesitate to contact us at: privacy@versatile.ai.

Binding Agreement – This Privacy Policy constitutes an integral part of our Terms of Use available at: https://www.versatile.ai/terms-of-service/

Content – Our Site and Services do not contain inappropriate content. Nevertheless, we use appropriate technical and organizational measures to ensure the protection and retention of data subjects.  

Versatile provides this Privacy Policy, as will be updated from time to time to inform you of our policies and procedures regarding the collection, use and disclosure of Personal Information we receive when you use the Website and our Services.

Changes and updates to this Privacy Policy – We reserve the right to modify or update this Privacy Policy, to reflect changes in our Site services or data processing practices or to conform to a regulatory requirement. Such changes will be effective immediately upon the display of the revised Privacy Policy. The last revision date will be reflected in the “Last Updated” heading. If we make material changes to this Privacy Policy, we will do our best to notify you by email or through a notice on our website.

4 . DEFINITIONS

• Applicable Privacy Laws means any applicable privacy or other law relevant to our operations, including including the General Data Protection Regulation (EU) 2016/679 (GDPR); European Union Member State laws, Switzerland, the United Kingdom, rules, and guidelines implementing or supplementing the GDPR, as amended from time to time and to the extent applicable to our Company’s operation and our Services; the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), Cal. Civ. Code §§ 1798.100 et seq., to the extent applicable; the Virginia Consumer Data Protection Act, H.B. 2307, 2021 Gen. Assemb., Reg. Sess. Va. 2021 (VCDPA), to the extent applicable; the Texas Data Privacy and Security Act, H.B. 4, 88th Legislature (Tex. 2023) (TDPSA), to the extent applicable; the Oregon Consumer Privacy Act, ORS 646A.570-646A.589 (OCPA), to the extent applicable, and any other applicable U.S. state privacy laws; the Israeli Privacy Law – 1981, including any amendments and revisions, and any regulations enacted thereunder, including but not limited to the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001, and the Privacy Protection Regulations (Data Security), 5777-2017, as well as any applicable guidelines, standards, and/or instructions published by the Israeli Privacy Authority, in effect from time to time, relating to data security and privacy.
• Minor refers to a data subject underage (under 16 years or less depending on the legal jurisdiction applicable), such that the processing of his/her personal data is only lawful if parental or guardian consent has been obtained.
• Data Controller refers to the person, organization, public authority, agency, or other body that, either alone or with others, determines the purposes for which and the manner in which any Personal Data is to be processed, and defines the controls required for such processing.
• Data Processor refers to any person or organization (other than an employee of the Data Controller) who undertakes the processing of Personal Data on behalf of the Data Controller.
• Data Subject refers to an individual who is the subject of Personal Data.
• Data Subject Consent refers to the Data Subject’s approval or agreement for an activity to take place, having considered the benefits and risks of the activity. For consent to be valid, the data subject needs to be informed, have the capacity and knowledge to decide, and to have given their consent voluntarily.
• Personal Data refers to information about a living individual, which means that they can be identified (a) from that data, or (b) from that data and any other information which is, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person or could in the future, come into the possession of the data controller, and as provided in this Privacy Policy below.
• Non-Personal Data means information that does not personally identify a living individual and does not reveal his or her specific identity as an individual, such as anonymized information.
• Processing refers to any operation which is performed upon or applied to Personal Data, whether undertaken manually or by automated means, including its acquisition, organization, storage, retrieval, consultation, amendment, availability, disclosure, erasure, or destruction.
• Subprocessor shall mean any entity appointed by us or by one of our sub-processors, to Process Personal Data on our behalf or on behalf of that sub-processor, excluding any employee of Versatile or of our sub-processor or of any such appointed person but including any contractor or affiliate of the foregoing.
• The terms “Controller“, “Processor“, “Sub-Processor”, “Data Subject“, “Personal Data“, “Processing” (and/or “Process“), “Personal Data Breach”, the “Union”, “Member State” and “Special Categories of Personal Data” shall have the meanings given in the EU GDPR. The terms “Business”, “Business Purpose”, “Consumer”, “Service Provider”, “Third Party” or “Contractor” shall have the same meaning as in the CPRA. To the extent that CPRA applies, the term “Controller” shall also mean “Business”, and “Processor” shall also mean “Service Provider”, “Contractor” or “Third Party”.

This Policy was originally written in English. If you are reading a translation and it conflicts with the English language version, please note that the English language version prevails.

5 . DATA CONTROLLER AND DATA PROCESSOR

Data Controller: Under the Applicable Privacy Laws, Versatile is the Data Controller concerning Personal Data processing through the Website.

Data Processor: With respect to the platform Versatile provides to its clients, Versatile acts as the Data Processor.

Our registered office is:

5550 Glades Road, Suite 500 #1090

Boca Raton, FL 33431

Phone Number: +1 (561) 794-4773

6. WHEN DOES THIS PRIVACY POLICY APPLY?

This Privacy Policy applies to Personal Data about you that we collect, use or otherwise process regarding your relationship with us as a Visitor of our Website or a user of our Services.

7 . THE TYPES OF PERSONAL DATA THAT WE COLLECT

In this Privacy Policy, “Personal Data” or “Personal Information” means any personal information about you that can identify you (by itself or in combination with other data), such as your name, address, email address, credit information, other means of identification, or your Internet Protocol (or ‘IP’).

We collect personal information about you in several different ways. In this section, we will explain the various ways in which we collect personal information about you and how this information will be used.

This Policy refers to information of the first nature and can be collected in one of the following ways:

Data you provide us directly:

Submitting information to us is optional in certain cases and required in others, depending on the Service you choose to use or access and whether you are a Customer or a User. This category includes one or more of the following data categories:

• Contact details. We may process your contact details (such as name, business email address, telephone, company name, country, or role) if you submitted those to us when applying to us concerning our Services or when reaching out to our support services, as further described below.
  • Purpose: We use this information, based on your consent and our legitimate interest, for the purpose for which it was provided, respectively, including, responding to your inquiry and providing you with the support or information you have requested.
  • Retention: We retain such information for as long as needed to provide you with the inquiry requested or as required under applicable law. We may use third-party services to help us provide this service. Hence your data will be shared with them only for processing, tracking, and addressing your request.
• Sharing with us your Feedback: You may voluntarily share your feedback with us to assist us improving Versatile System. For that you will be asked to provide us your details (such as name and email). In order to give us essential and profound feedback, we allow you to upload documents and files. We implement technical and organizational measures to ensure the full protection of the shared data.
  • Purposes: We use the information to review your feedback, to deliver the Services, and to protect the access to your account and purchased Platform licenses.
  • Retention: We apply data retention rules to abide by data minimization principles. We will retain your information for as long as you did not explicitly ask us to delete it or if we learn that it was unlawfully collected, and provided that no exemption is applied according to applicable law. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements unless a longer retention period is required or permitted by law and helpful for the service to function properly.
• Signing up and registration. Our Site and our Platform require registration and signing up to a user account. If you choose to do so, you will be asked to submit some information such as your email address, full name, and credentials. Your email address will be used as your username together with a password of your choice for authentication and authorization purposes. This information will be used to uniquely connect your account with you, your device (pc or mobile), and your usage and for account authentication and security purposes.
  • Purpose: We use your account information to assign an account to you, secure your access to your account,  and provide you with access to your activity and the ability to manage it directly.
  • Retention: We retain account information for as long as you are a User of the Product, and so long as the Account Information is required to provide you with the Services or, as required by any applicable law. If billing is involved, we may retain such data for up to seven (7) years from the billing event, as required by applicable tax laws.
• Providing the Services. We require you to set up a user account to provide our Platform Services. We collect data for this account at three levels – the customer’s corporate name, headquarters address and local address as applicable; the job site address and project calendar and planning data; and individual user name, title and telephone number.
  • Retention: We retain account information for as long as you are a User of the Product, and so long as the Account Information is required to provide you with the Services or, as required by any applicable law.
• Purchasing our Platform license. If you wish to purchase a product license from us, you will be asked to provide your contact information, such as your full name, email address, billing information, and any other purchase-related information, in order to process your purchase, contact you in case of support necessity if an issue arises, and to protect the access to your account and purchased Platform licenses. We also use this information to share purchase confirmations, notifications, support and product notices. Please note that depending on the product your purchase and the payment method you choose, your Payment Information will be collected either by third-party payment processors.
  • Purposes: We use the information to process your order, to deliver the Service you ordered, to manage your purchase, and to protect the access to your account and purchased Platform licenses.
  • Retention: We retain this information for as long as your license is valid, and may sometimes retain it for longer periods when applicable laws require.
• Scheduler Services Option. To improve the experience of the Platform usage, we allow our Clients to configure a scheduler service option. Our Clients may monitor their activities and add relevant third-party (“contractors”) details. It may provide analysis and monitoring tools to our Clients. It should be emphasized that this action refers to our Clients’ sole responsibility. Our Clients must rely on a data processing legal basis before processing any data from third parties.
• Images, videos, and media files. When you use our Platform, you can use a video camera option to measure statistical construction data related to the designated construction project (for example, data concerning utilization, time on hook, steel installation, concrete pouring tracker, truck deliveries, and more). We do not retain Your Content beyond what is necessary to provide your daily operation insights. Upon your choice and request, we may offer you a backup option or cloud storage. In this case, it will be encrypted, and we will have no access to Your Content. We do not, under any circumstances, collect personal data concerning this category. However, It should be emphasized that this action refers to our Clients’ sole responsibility. Our Clients must rely on a data processing legal basis before processing any data from third parties.

• Data we collect when you use our Services

This category refers to data we use to improve our Clients’ and Visitors’ experience and our process performance for our Services. WhenWhen you access the Site, or otherwise use the Services, certain information about your actions in connection with the Services, your device, and Site visit may be processed in order to provide the Services, to maintain them, to understand a User’s usage of them, to improve them with further versions and features, and to  support and protect them.

• Online identifiers: When you use the Websites or Services, we may process one or more of the following online identifiers: the IP address that your internet provider assigned to your device and access to the web, cookies information, browser details or upon landing on our Websites. Such information, like any other digital service, is collected through cookies, pixel tags, and log files and includes online usage data, login data (when applicable), and IP address.
  • Purposes: We obtain information from server log files and use tracking technologies, like pixel tags, on our Websites to collect Online Identifiers. We use online identifiers for various purposes: (i) As part of our legitimate interests, we use certain online information for analytics and statistical purposes (ii) We also use IP addresses many times as part of our legitimate interests to monitor, detect and prevent fraud or any automated non-human actions across our Websites and Services. The IP address also serves our legitimate interest to learn the country from which you access the Services and make sure we provide  Services in the right language and in compliance with the jurisdiction in which we offer the Services. (iii) In certain cases, and upon your consent, third-party cookies and tags will be used for advertising and marketing purposes of our Services, including by using retargeting. See further explanation under “Third Party Services”.
  • Retention: We retain online information for as long as necessary to achieve the purpose for which it is processed, to begin with, or, until we make it Non-Personal Information, in which case, we reserve the right to retain the information without any time limitation, based on our discretion and commercial necessities.
• Device Information: We may collect certain information about the device from which you access the Website, use Products and Services, such as user-agent (that includes the browser type and version, IP address, operating system type and version), device type (mobile/desktop), type and version of your operating system, and the language you use on your device.
  • Purposes: Based on your consent, and in certain cases, our legitimate interest, we may process device information for the purpose of the Platform’s compatibility purposes, to the right device type, the relevant operating system’s version and features.
  • Retention: We retain device information for as long as necessary to provide the Service’s functionality, to maintain a record of your license key and usage of the product, to associate license terms and renewals.
• Online activity: We also collect certain online activity information from Visitors, for example, if you clicked an advertisement for our Services, we will get the source URL in which you click the advertisement, or, by using third-party services (such as retargeting), we may offer to you one or more of our Services when you visit other websites. Under this category, we may also document in log files your clicks on actions and buttons across our Website or Services, if provided, as described under the category of “Online Identifiers”.
  • Purpose: We use this information for the following purposes: (i) Based on your consent for advertising, marketing and retargeting of our Services. (ii) Based on our legitimate interest – to make the Website, Platform and Services responsive and functional, to measure and calculate our payments to advertisers and to monitor and prevent ad fraud concerning our Services.
• Platform and Website Activity: we automatically record and process activities related to the Platform’s usage and functionality in order to be responsive to them or allow you to revert certain actions you took such as your Site and Platform use, including but not limited to performance and frequency of use, or the number of times you visit or use the Site or Platform and the time you spend using it.
• ‍Purpose: The purpose of these transcripts is to accurately document discussions for record-keeping, service improvement, and to ensure the quality and integrity of our communications. The transcripts may capture details of the conversation and will only be generated for the duration of the meeting.Retention: We will retain transcripts for as long as you remain a user of the product, or as long as the data is required to fulfill its intended purpose, in compliance with applicable regulations.
• Video Meeting Call Transcripts. With your explicit consent, we may activate automated transcription tools during certain video meetings. These tools will automatically transcribe the spoken content of the meeting, capturing key details to ensure that no important information is missed. By agreeing to the transcription, you allow us to improve our record-keeping and provide more accurate follow-up services.
  Purpose: The purpose of these transcripts is to accurately document discussions for record-keeping, service improvement, and to ensure the quality and integrity of our communications. The transcripts may capture details of the conversation and will only be generated for the duration of the meeting.Retention: We will retain transcripts for as long as you remain a user of the product, or as long as the data is required to fulfill its intended purpose, in compliance with applicable regulations.

Data we collect from third parties This category refers to data we may receive from third parties concerning the Services we provide to you.

• Data from companies that offer their products or services in relation to our Services or whose products or services may be linked from or to our Services.
• Information for marketing operations provided by third-party marketing services.
• Analytical information provided by third-party analysis services engaged in analyzing how users use the Services.
• Additional information as required from us to comply with legal obligations.
• Any data obtained by any of the above means may be associated with other data you have previously provided to us.
• Third-party advertising companies are sometimes used to help us collect this personal information.

8 . COOKIES

A cookie is a small text file that is placed on the browser of the hard drive of your computer (or similar device) by websites that you visit. Cookies are typically used in order to make websites function, or function more efficiently, as well as to provide information to the operator of the particular website. Cookies make your use of the Site and Services easier to use and improve their functionality.  They are used to make the login process easier for our users.

Cookies collecting by us

Both the Site and the Versatile System use “session” Cookies and “persistent” Cookies. Both types of Cookies identify you; session Cookies expire quickly (or when you log off); persistent Cookies remain on your computer or device for a specific period of time that we determine. We also use the LinkedIn Insight Tag, discussed in more detail below. We do not use flash cookies, web storage, web beacons or other technologies that track your browsing history across multiple apps or websites.

Below is a summary of the usage to which we put Cookies when you use the Site and the Versatile System.

Strictly Necessary - These Cookies are essential for the website to function and cannot be switched off. They are always enabled.

Functional - These cookies are essential for the website to function and cannot be switched off. They are always enabled.

Preferences - To remember your settings and preferences, like the language you prefer, and to enable you to fill out forms more easily.

Authentication - To locate your account information when you access the Versatile System so that you do not need to log in or otherwise verify your identity with each use.

Security - To enable and support our security features and to help us detect malicious activity such as account hacking.

Performance and Analytics - To enable us and our partners to generate analytics regarding your use of the Site and the Versatile System, to improve each of them and make each of them easier for you to use.

Marketing - These cookies are used to track visitors across websites to display advertisements that are relevant and engaging for users. 

Others - These cookies do not fall under any of the above categories but may still be necessary for providing certain functionalities.

Cookies collecting by third parties

Both the Site and the Versatile System use Google Analytics, which is a web analytics service provided by Google, Inc. (“Google”), to help us analyze how you interact with and use the Site and the Versatile System. Google Analytics uses Cookies to collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website or app. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. You can learn more about Google Analytics and opt-out of Google’s tracking of analytics by clicking here.

The Site also uses the LinkedIn Insight Tag, a piece of lightweight JavaScript code that also helps us analyze how you interact with and use the Site. The LinkedIn Insight Tag enables the collection of data including URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. The IP addresses are truncated or hashed (when used for reaching LinkedIn members across devices), and LinkedIn members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining pseudonymized data is then deleted within 180 days.

LinkedIn does not share the personal data of LinkedIn members with us; it only provides us with reports and alerts (which do not identify members) about our Site audience and their interactions with the Site. LinkedIn members can control the use of their personal data for advertising purposes through their account settings.

Cookies opt out option

• Your ability to opt out from Versatile cookie collection

Versatile understands the importance of your privacy and allows you to control how we collect your data through cookies. Here are the ways you can opt-out:

• Opt-out from Website Services: You can opt-out of the cookies we use for Website Services by clicking cookie settings in the cookie banner. This will take you to our cookie option center, where you can manage your preferences.
• Opt-out from Platform Services: to opt out of Platform Services and change your cookie preferences, please send an email to: privacy@versatile.ai.

Your ability to opt out from third party cookie collection

You can learn more about Google Analytics and opt out of Google’s tracking of analytics by exploring Google’s privacy policies. You can learn more about LinkedIn settings by visiting https://www.linkedin.com/psettings/advertising/actions-that-showed-interest.

You can also learn about your options to opt-out of mobile app tracking through your device settings. For more information, see https://support.apple.com/iphone and https://support.google.com/android/.

Your browser or device may include “Do Not Track” functionality. We do not respond to “Do Not Track” signals.

Most devices and browsers will allow you to erase cookies or block acceptance of cookies, or receive a warning before a cookie is stored. Please note that unless you block the acceptance of cookies, the Website will utilize cookies upon your use of the Website (unless it is required by Applicable Laws to provide a separate consent to use such cookies, and in which case We will use such cookies only after we receive your separate consent to such use and subject to your right to withdraw such consent at any time). For more information please see: www.allaboutcookies.org

Please keep in mind that, if you delete your Cookies or if you set your browser or device to decline Cookies, some functions of the Site and/or the Versatile System may not function as designed or at all.

9 . HOW WE USE PERSONAL DATA (PURPOSES OF PROCESSING)

Personal Data is used for the following primary purposes (as may be updated from time to time): to provide and operate the Website and Services; to monitor, study and analyze usage of the Website and Services and their functionalities; to provide, personalize and improve our Services. This information helps us surface features and promotions from our partners that may interest you and us. To provide on-going customer assistance, technical support and maintain the Website and Services; to provide service announcements and notices, promotional messages and market our Services subject to applicable laws; to enforce our Terms of Use, policies and other contractual arrangements and prevent misuse of the Website and/or Services; and to comply with court orders and warrants and to take any action in any legal dispute and proceeding; to better understand your needs, both on an aggregated or inferred basis; and on an individualized basis, in order to further develop, customize and improve our Website and Services based on Visitors’ Users and Client’s preferences, experiences and difficulties; to communicate with you and contact you to obtain feedback from you regarding the Services and Site; to disclose to third party vendors, service providers, contractors or agents who perform functions on our behalf with respect to the Website and Services; and as otherwise authorized by you.

10 . THE LEGAL BASIS FOR PERSONAL DATA USE

Versatile processes your Personal Data based on the legal grounds applicable to each context. For your use of our Site, we rely on your consent to process Personal Data. When it comes to Platform usage, we process Personal Data as part of our engagement with the Client, typically under the terms of a Data Processing Agreement (DPA).The legal basis for processing your Personal Data depends on the specific purpose for which it was collected. This could be to fulfill our obligations as the Data Processor under the relevant DPA or to comply with other legal obligations. We will only process your Personal Data where we have a valid legal basis to do so, ensuring that any use is lawful and necessary for the provision of our Services.

11 . SHARING PERSONAL DATA WITH THIRD PARTIES

We do not sell, rent or lease your Personal Data. We may share your Personal Data with service providers and other third parties, to the extent necessary to fulfil our Services. However, to provide, operate, maintain, serve and improve our Site and Services, we use third-party services. Such Services include payment processors, feedback features, support and ticketing systems, operational tools, analytics, and statistical tools, and so forth. Those services include the following categories:

• Hosting services and storage: We use third-party host and storage services (including cloud storage) to host our Site and the Platform, and respective data and retain your Information. Such Processors may be based (and their servers may be located) in the EEA or anywhere in the world. We require each such Processor to maintain strict privacy protection and data security policies and ensure their compliance with applicable data protection laws. However, their practices and activities are fully governed by their own privacy policies.
• Analytics. If you are a User and visiting our Site, we may use analytics services to help us understand how Users interact with our Site and Services.
• Support services. We may use, from time to time, support and help desk services to provide better and faster support, whether online or, when you contact customer support.
• Authentication and security. In cases where you open an account with us, we may integrate over time certain authentication services.
• Payment processors. When you choose to purchase one or more of our products, we may use payment processing services carrying strict security standards.
• CRM and mailing lists. If you are a Customer or a User, we may use services to manage and secure your Personal Information, or, manage subscriptions and notifications lists.
• Technology partners. Our Services may include third-party technologies (including without limitation artificial intelligence (AI) and large language models (LLM), widgets, or features in order to enhance functionality and to include more features for you, such as a chatbot.
• Advertising and Retargeting: Some of our third-party services may collect non-identifiable information about your interaction with our Site. Third parties may use such information to serve and display ads when browsing other websites across the web (“Retargeting”). You can opt-out at any time of such type of advertising directly from the Ad when you encounter it.
• Legal Proceeding or law requirement. we may share your Personal Information with any third party if we believe that disclosure of such information is helpful or reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or governmental request; (b) enforce our license agreement, terms of service or this privacy policy, including investigations of potential violations thereof; (c) detect, prevent, or otherwise address fraud or security issues; and/or (d) protect against harm to the rights, property or safety of Versatile, our affiliated entities, our users, yourself, and/or the public.
• Merger, Sale, or Bankruptcy. In the event that we or one of our affiliated entities is acquired by, or merged with, a third party entity or otherwise sells all or part of our/its assets, we may (and hereby reserve the right to) transfer or assign the Personal Information and other information we have collected or received. In such a case, we will require the acquiring entity to post its data practices and provide you with any of your rights as per the jurisdiction of your residency.

12 . TRANSFER OF DATA OUTSIDE OF YOUR TERRITORY

If you are a resident of the EEA, your data may be transferred outside the EEA to one of our affiliates or to third parties that assist us in providing our services. We may process your Personal Data in any country where we operate, primarily in countries that have been recognized as providing an adequate level of data protection, or, where necessary, under safeguards such as Standard Contractual Clauses (SCCs). For transfers to countries without adequacy decisions, we will comply with all applicable data protection laws, including relevant decisions such as Commission Implementing Decision (EU) 2021/915 of 4 June 2021, and our obligations under the Data Processing Agreement (DPA) with the Data Controller.
We are subject to the GDPR, which protects your Personal Data, and we will ensure that appropriate safeguards are in place to provide a similar level of security for your Personal Data during any such transfer.

13 . DATA SECURITY

We take the safeguarding of the Personal Data and non-Personal Data very seriously, and use a variety of industry standard systems, applications and procedures to protect the Data from loss, theft, damage or unauthorized use or access. However, although we make efforts to protect your privacy, we cannot guarantee that the Website or our Platform will be immune from any wrongdoings, malfunctions, unlawful interceptions or access, or other kinds of abuse and misuse.

We also regularly monitor our systems for possible vulnerabilities and attacks, and regularly seek new ways and for further enhancing the security of our Website and Platform and protection of our Visitors’ and our users’ privacy.

14 . DATA RETENTION

We retain different types of information for different periods, depending on the purposes for processing the data. We may retain Personal Data for as long as necessary in order to support our legitimate business purposes and Services, for example, for storing data, for documentation, for cyber-security management purposes, legal proceedings and tax issues.

We may store aggregated or anonymized Non-Personal Data without a time limit. In any case, as long as you use the Website and Services, we will keep information about you as provided above in this Policy, unless we are legally required to delete it, or to the extent applicable under Applicable Law – if you exercise your rights to delete the information, subject to our legal requirements.

15 . EEA RESIDENTS NOTICE

Depending on your country of residency, and on the type of your use of our Website (Visitor or a User) certain rights concerning your Personal Data may be available to you.

If you are located in the European Economic Area (“EEA”), you have certain rights with respect to your Personal Data, including:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure
• the right to restrict processing
• the right to object to processing
• the rights in relation to automated decision making and profiling.

Please contact us at: privacy@versatile.ai with your detailed request and sufficient information to allow us to verify you and your request, and we will process your verifiable request within the timeframe indicated in the applicable regulation. Please note, that when handling these requests, we may ask for additional information from you. you. We will make good-faith efforts to locate the data that you request to access.

When you ask us to exercise any of your rights under this Policy and the applicable law, we may need to ask you to provide us certain credentials to make sure that you are who you claim you are, to avoid phishing and/or disclosure to you of Personal Data related to others.

We may redact from the data which we will make available to you, any Personal Data related to others, if applicable.

We hereby inform Visitors and Users that are California residents (in this section “You”, “Your”), of the following rights (by virtue of the CPRA) with respect to the Processing of your Personal Data:

To learn more about the Personal Data we collect, including the specific Personal Data categories collected, sources of collection, our purposes for collection, and the categories of service providers with whom we share Personal Data, please see the headlines above.

We do not sell Personal Data for business or commercial purposes, but we may share personal information or aggregated information with a third party for a business purpose. When we do so, we enter a contract that describes the purpose and requires the recipient to keep that personal information confidential and not use it for any purpose except the agreement.

If you wish to exercise your rights concerning our third party’s disclosure aspects, please refer below to the “Exercising Your Rights” section below.

Consumer Rights

• The CPRA grants California consumers specific rights in connection with the Personal Data collected by businesses, as described below:
• Right to Know: You have the right to know the categories and specific pieces of Personal Data we have collected about you in the previous 12 months.
• Right to Deletion: You have the right to request that we delete any Personal Data we have collected about you.
• Right to Request Information: You have the right to request information about our collection, sale, and disclosure of your Personal Data from the previous 12 months.
• Right to Opt-out of the Sale of Personal Data: You have the right to opt-out of the sale of Personal Data we have collected about you. As of the date of this Policy, we do not sell the Personal Data we have collected about you.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CPRA rights. We will not treat you differently for exercising any of the above rights.

Exercising Your Rights

To exercise any of the CPRA rights above, don’t hesitate to contact us by emailing at privacy@versatile.ai. We will fulfill your request within 45 days of receiving your request. Some of these rights may be subject to limitations and qualifications, such as where fulfilling the request would conflict with federal, state, or local law, regulatory inquiries, subpoenas, or our ability to defend against legal claims. We will verify your request using your email address. If you’ve created an account with us, we will also verify your request using the information associated with your account, including billing information.

Note that we cannot respond to your request if we cannot verify your identity and confirm the Personal Data related to you. Making a verifiable consumer request does not require you to create an account with us. If you wish to use an authorized agent to submit a request to opt-out on your behalf, you must provide the authorized agent with written permission signed by you. We may deny a request from an authorized agent if the agent cannot provide to us your signed authorization demonstrating that they have been authorized to act on your behalf.

If you do not wish for our online third-party partners or us (such as advertising networks) to sell or share your personal information with others, please click on the “Do Not Sell or Share My Personal Information” link to contact us with questions or to exercise your right to opt-out.

16 . US State-Specific Privacy Law Notices Privacy Notice for California Residents ‍

We hereby inform Visitors and Users that are California residents (in this section “You”, “Your”), of the following rights (by virtue of the CCPA) with respect to the Processing of your Personal Data: To learn more about the Personal Data we collect, including the specific Personal Data categories collected, sources of collection, our purposes for collection, and the categories of service providers with whom we share Personal Data, please see the headlines above. We do not sell Personal Data for business or commercial purposes, but we may share personal information or aggregated information with a third party for a business purpose. When we do so, we enter a contract that describes the purpose and requires the recipient to keep that personal information confidential and not use it for any purpose except the agreement. If you wish to exercise your rights concerning our third party's disclosure aspects, please refer below to the "Exercising Your Rights" section below.
Consumer Rights
The CCPA grants California consumers specific rights in connection with the Personal Data collected by businesses, as described below:
‍Right to Know: You have the right to know the categories and specific pieces of Personal Data we have collected about you in the previous 12 months.
‍Right to Deletion: You have the right to request that we delete any Personal Data we have collected about you.
Right to Request Information:‍ You have the right to request information about our collection, sale, and disclosure of your Personal Data from the previous 12 months.
‍“Shine the Light” Law: Under California’s “Shine the Light” law (Cal. Civ. Code §1798.83), you have the right to request information regarding whether and how we disclose your Personal Data to third parties for their direct marketing purposes. This right allows you to request and receive a list of the third parties, if any, that we have shared Personal Data with for such purposes, along with the types of Personal Data disclosed.
Right to Opt-Out of the Sale and Sharing of Personal Data: California consumers have the right to opt-out of the sale and sharing of their Personal Data, including for cross-context behavioral advertising. You may also limit the use of your sensitive personal information. Although Versatile does not engage in the sale or sharing of Personal Data, if you have concerns or wish to exercise your rights, please contact us using the information provided below. Additionally, we do not sell the Personal Data of minors, as our Services are not intended for individuals under the applicable age threshold.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CPRA rights. We will not treat you differently for exercising any of the above rights. Under the California Online Privacy Protection Act (CalOPPA), our service does not respond to Do Not Track (DNT) signals. However, third-party operators integrated with our service may collect information about your browsing activities. You can manage your tracking preferences by adjusting the settings on your web browser or mobile device to notify websites and apps that you do not wish to be tracked. For detailed instructions on configuring these settings, please refer to the help documentation provided by your browser or device.
Exercising Your Rights
To exercise any of the CPRA rights above, don't hesitate to contact us by emailing at privacy@versatile.ai. We will fulfill your request within 45 days of receiving your request. Some of these rights may be subject to limitations and qualifications, such as where fulfilling the request would conflict with federal, state, or local law, regulatory inquiries, subpoenas, or our ability to defend against legal claims. We will verify your request using your email address. If you've created an account with us, we will also verify your request using the information associated with your account, including billing information. Note that we cannot respond to your request if we cannot verify your identity and confirm the Personal Data related to you. Making a verifiable consumer request does not require you to create an account with us. If you wish to use an authorized agent to submit a request to opt-out on your behalf, you must provide the authorized agent with written permission signed by you. We may deny a request from an authorized agent if the agent cannot provide to us your signed authorization demonstrating that they have been authorized to act on your behalf. If you do not wish for our online third-party partners or us (such as advertising networks) to sell or share your personal information with others, please click on the "Do Not Sell or Share My Personal Information" link to contact us with questions or to exercise your right to opt-out.
Privacy Notice for Texas Residents‍ As a resident of Texas, you are entitled to specific privacy rights regarding your personal information under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024. This law grants you rights to access, correct, delete, and obtain your personal data, subject to certain exceptions. Please review the following information to understand your privacy rights and how to exercise them. The TDPSA applies to individuals who are Texas residents acting in an individual or household context. It does not extend to individuals acting in a commercial or employment context. If you are a Texas resident, you can make requests regarding your personal information, and we will honor such requests as required by law. In cases where we are unable to comply with your request, in whole or in part, we will provide you with an explanation of our reasons. How to Exercise Your Rights As a Texas resident, you can exercise the following rights concerning your personal information:
Access Your Personal Information: You have the right to request access to the personal information we have collected about you.
‍Correct Your Personal Information: You may request that we correct any inaccuracies in the personal information we hold about you.
‍Delete Your Personal Information: You can request the deletion of your personal information, subject to certain legal exceptions.
‍Opt Out of Targeted Advertising: You have the right to opt out of the processing of your personal information for the purpose of targeted advertising.
‍Opt Out of the Sale of Personal Information: You can request that we do not sell your personal information to third parties.

If you wish to exercise any of your rights under the TDPSA or to appeal any decision regarding a request to exercise your rights, you can contact us directly at privacy@versatile.ai. We are committed to responding to all requests in accordance with the law and to ensuring that your privacy rights are respected.

Privacy Notice for Virginia Residents This Virginia Privacy Notice supplements the Versatile Privacy Policy and applies to the personal data of Virginia residents, in compliance with the VCDPA, effective January 1, 2023. This notice applies to natural persons who are residents of Virginia acting only in an individual or household context. It does not apply to natural persons acting in a commercial or employment context. Selling, Targeted Advertising, and Profiling
We do not sell personal data to third parties. We do not process personal data for targeted advertising purposes (as defined under the VCDPA). However, you can opt out of all advertising cookies via the cookie preference center, linked here.We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.Your Rights Subject to the VCDPA and other applicable laws, you have the following rights concerning your data processed by Versatile:
‍Deletion: You have the right to request that Versatile erase your personal data, and Versatile will erase such data unless it is reasonably necessary to maintain your personal data in accordance with VCDPA §59.1-582.
‍Correction: You have the right to request that Versatile correct inaccurate personal data, taking into account the nature and purpose of processing the information.
‍Access: You have the right to request access to or obtain a copy of the personal data that Versatile holds about you.
‍Non-discrimination: Versatile will not discriminate against a consumer because the consumer exercised any of their rights under applicable laws. Please contact us at privacy@versatile.ai if you wish to exercise your rights or appeal any decision regarding a request to exercise your rights.

Privacy Notice for Oregon Residents This notice supplements Versatile's Privacy Policy and applies exclusively to Oregon residents. It explains how we collect, use, and share your personal data in accordance with the OCPA. As a “Controller,” the types of personal data we collect are based on your interactions with us and the information you voluntarily provide. Additionally, we may collect data from other sources or new types of data after providing notice and obtaining your consent, as required by the OCPA. For a detailed description of the specific categories of personal data we process, please refer to the section titled "The Types of Personal Data That We Collect" in our Privacy Policy. Your Rights Under the OCPA
Right to Access:‍ You have the right to request access to the personal data we collect about you, including information about the purposes of collection and the third parties we share it with.
Right to Deletion:‍ Under certain circumstances, you can request the deletion of personal data collected from you. If there is a legal reason we cannot fulfill your request in full, we will explain it in our response.
Right to Opt-Out of Sale:‍ While we do not sell personal data, you have the right to opt out of the sale of your personal data should this change in the future.
Right to Obtain a Copy:‍ You may request a copy of your personal data in a portable format.
Right to Opt-Out of Targeted Advertising:‍ You have the right to opt out of targeted advertising based on your personal data. To exercise this right, please contact us as outlined below. How to Exercise Your Rights To exercise any of these rights, please contact us via email at:
privacy@versatile.ai.
Please provide sufficient information to help us locate your data, including any relevant email addresses or other details associated with your interactions with us.Authentication ProcessTo protect your personal data and comply with the OCPA, we will use an authentication process to verify your identity before fulfilling your request. If you use an authorized agent to submit a request on your behalf, we may require evidence of the agent's authority, such as a power of attorney or other authorization documentation.Response Timing and FormatWe will respond to your request within 45 days of receiving it. If we need more time (up to an additional 45 days), we will inform you of the reason for the extension. Responses will be provided either electronically or by mail, according to your preference.Non-DiscriminationWe will not discriminate against you for exercising your OCPA rights.

17 . CONTACT US

For further information about this Policy, please contact us at: privacy@versatile.ai.

If you have any concerns relating to this Policy, please contact us and we will make good-faith efforts to address your concerns. We are usually able to resolve privacy questions or concerns promptly and effectively. If you are not satisfied with the response you receive from us, you may escalate concerns to the applicable privacy regulator in your jurisdiction. Upon request, we will provide you with the contact information for that regulator.