DATA CONTROLLER CONTACT INFORMATION
Ozeki Legal Technologies, Inc.
100 Shoreline Highway, Building B, Suite 100-116, Mill Valley, CA 94941
privacy@ozeki.ai
Ozeki Privacy Policy
Ozeki, Inc. (“Ozeki” or “we” or “us”) is committed to your privacy. This Privacy Policy (“Policy”) explains relevant rights and describes how Ozeki collects, uses and discloses your personal information when you use the Ozeki website and domain name, any other linked pages, features, content, software applications, and any other services we offer from time to time in connection with any of the above (collectively, the “Service”) and your rights with respect to the Personal Data we use.
Definitions
“Personal Data” as defined by GDPR Article 4 means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
A “Visitor” is someone who merely browses our website. A “Customer” is someone who has registered with us to use or buy our services and products. The term “User” collectively refers to both Visitors and Customers.
Scope
This privacy policy applies to Visitors to our website and those that buy our service(s). Provisions may be different per accessing party.
Your Consumer Rights
When using our Service and submitting Personal Data to us, you may have certain rights under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other laws. Depending on the legal basis for processing your Personal Data, you may have some or all of the following rights:
The right to be informed. You have the right to be informed about what Personal Data we collect from you, where we source it from, our purpose for collecting it, who we share it with (if anyone), and how it’s processed.
The right to equal service. You have the right to not be denied equal access to the Service solely because you exercised your privacy rights.
The right to access. You have the right to get confirmation that your Personal Data is being processed, and you may also exercise the right to access it.
The right to rectification. You have the right to have your Personal Data corrected if it is inaccurate or incomplete.
The right to deletion. You have the right to request the removal or deletion of Personal Data if there is no compelling reason for us to continue processing it.
The right to restrict processing. You have a right to ‘block’ or restrict the processing of your Personal Data. When your Personal Data is restricted, we are permitted to store it, but not to process it further.
The right to data portability. You have the right to request and receive the Personal Data you have provided to us for your own personal use. We will provide your data to you within 90 days of your request. To request your Personal Data, please contact us using the information at the top of this privacy notice.
The right to object. You have the right to object to us processing your Personal Data for the following reasons:
- Processing was based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- Direct marketing (including profiling);
- Processing for purposes of scientific/historical research and statistics; and
- Rights in relation to automated decision-making and profiling.
The right to request restricted processing of sensitive personal information. The CCPA designates certain Personal Data as especially sensitive, such as account logins, financial information, precise geolocation, genetic data, government identifiers such as Social Security Numbers, biometric data such as race, age, gender or sexual orientation, and personal beliefs such as religious stance and union membership (collectively, “Sensitive Personal Data”). You have the right to request Ozeki process this Sensitive Personal Data only as much as is necessary to provide the Service, and no further.
The rights of those under 18. If we discover that we have collected Personal Data from an individual under 18, we will take steps to remove that information from our systems. Please refer below to ‘Children Privacy’ for further information.
Information Collected by Ozeki
The Service is available to its customers and each customer’s respective users. In order to provide the Service, Ozeki collects information from its customers that may include Personal Data of its customers’ own users. We also collect certain information directly from individuals. Generally, you control the amount and type of information that you provide to us when using our website.
Information You Provide Voluntarily. When a user registers for an account with us, accesses our Service, or updates their profile with us, we collect certain information directly from that user, including name, email address, mailing address, phone number, billing information, purchase information, company name, job title, industry, as well as other information you may voluntarily submit to us (e.g., through support channels).
Users may login to Ozeki using their account credentials from certain other supported service providers. You may use your Google®, Slack®, Github® or other third party login credentials we may support to sign in to Ozeki (“SSO credentials”). We will collect and store your user ID included in your SSO credentials. We may also collect information you voluntarily supply to us regarding your personal preferences and interests. If you use your SSO credentials to access the Service, you understand that some content and/or information stored by these third party service providers associated with the SSO credentials (“Third Party Account Information”) may be transmitted into your account with us if you authorize such transmissions, and that Third Party Account Information transmitted to our Service is covered by this Policy.
Information We Collect Automatically. We may automatically collect the following information about your use of our Service through cookies, web beacons, and other technologies: type of mobile device, information pertaining to your web browser, your domain name, your browser type and operating system, web pages you view, links you click, your IP address, the length of time you use our Service, the referring source that led you to our site, ads you clicked on, search terms you have entered, access time, and any device identifier. We may combine this information with other information that we have collected about you, including, where applicable, your username, name, and other Personal Data. Please see the section “Cookies and Other Tracking Mechanisms” for more information. In addition, if you are using our player application, we collect the license key associated with the player to confirm that it is associated with a valid subscription to our Service.
Location Information. In addition, we may collect different types of information about your location, including general information (e.g., IP address, zip code), and may use that information to customize the Service with location-based information and features. If you access the Service through a mobile device and you do not want your device to provide us with location-tracking information, you can disable location-tracking functions on your device, provided your device allows you to do this.
You can choose not to provide us with any or all of the information we specify or request, but then you may not be able to register with us or to take advantage of some or all of the Service.
Information Obtained From Third Parties. From time to time, we receive Personal Data about you from third party sources, but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your Personal Data to us. The types of information we collect from third parties include company name and number of employees and we use the information we receive from these third parties to maintain and improve the accuracy of the records we hold about you.
How We Use Your Personal Information
We use the information that we gather about you for the following sorts of purposes:
- To provide the Service to you, to communicate with you about your use of our Service, to respond to your inquiries, to fulfill your orders, and for other customer service purposes.
- To tailor the content and information that we may send or display to you, to offer location customization, or to otherwise personalize your Service experience.
- For marketing and promotional purposes. For example, we may use your email address to email you about information we think may interest you in accordance with your marketing preferences. We may also use the information that we learn about you to help determine when and how to advertise our services on third party platforms, or to customize how we market the Service to you.
- To better understand how users access and use our Service in order to improve our Service, respond to user preferences, and for other research and analytical purposes. For example, Ozeki may collect and analyze data metrics relating to the provision, use and performance of the Service and related Ozeki technology (collectively, “Service Metrics”). Insights drawn from Service Metrics may be disclosed to you and other users of the Service in connection with your respective use of the Service. If Ozeki discloses insights drawn from Service Metrics, then all such disclosed Service Metrics will be anonymized and aggregated, will not identify Customers or their users, and will not be disclosed in a manner permitting a third party to determine Customer’s or Customer’s users’ identity.
- To diagnose technical problems.
- To ensure and maintain the security of the Service.
- To provide products and services you have requested or purchased from us.
- To contact you with updates to our website, products or services.
- To resolve other problems and disputes.
- As required or otherwise permitted by applicable law, this Policy, or as disclosed to you at the point of collection.
How We Share Your Information
Ozeki shares your Personal Data with the following third-party recipients:
Service Providers. In certain situations, we employ other companies and people to perform tasks on our behalf and share your information with them to provide that service as listed below:
Except as stated in this Policy or unless we inform you otherwise, our agents do not have any right to use the Personal Data we share with them beyond what we deem necessary to assist us in performing such tasks.
Other Users. Certain profile information, including a user’s username and any user-uploaded content, may be visible to other users invited to share in the account. This is to facilitate user interaction within the Service, to address your request for our services, or to otherwise enable Service features.
Third Party Sites and Applications. Businesses or third party websites we work with may provide services to you through the Service (either alone or jointly with us). We do not control the policies and practices of third party websites or businesses, even if they may be affiliated or partnered with us or the Service, so if you choose to take part in any transaction or service relating to a third party website or business, please review all relevant privacy and other policies of such website or business.
Affiliates. We may disclose the Personal Data we collect from you to our affiliates or subsidiaries. If so, their use and disclosure of your Personal Data will be subject to this Policy and necessary privacy laws.
Business Transactions. We may disclose Personal Data in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Policy.
Legal Requirements and Protection. Ozeki may disclose your Personal Data if required to do so by law or other legal process, or if we believe that it is reasonably necessary to comply with a law or other legal process. Ozeki may also disclose your Personal Data to protect the safety of any person; to address fraud, security or technical issues; to investigate violations of or otherwise enforce our Terms; to protect us from legal action or third party claims, including you and/or other users; or to protect Ozeki’s rights or property.
Aggregate and/or Non-identified Information. Ozeki may disclose aggregate and/or anonymized information collected through the Service and the use and disclosure of such information by Ozeki or third parties is not subject this Policy.
Others. Ozeki may disclose your Personal Data to any other person with your consent.
Our Use of Cookies and Other Tracking Mechanisms
We and our third party service providers use cookies and other tracking mechanisms to track information about your use of our Service. We may combine this information with other Personal Data we collect from you (and our third party service providers may do so on our behalf).
Cookies. Cookies are alphanumeric identifiers transferred to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Service, while others are used to enable a faster log-in process, to allow us to track your activities on our Service, or to otherwise enable Service features. Most web browsers automatically accept cookies, but you can edit your browser options to block them. The ‘help’ portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our site who disable cookies will be able to browse certain areas of the site, but some features may not function.
Clear GIFs, pixel tags and other technologies. Clear GIFs (also known as web beacons, web bugs or pixel tags) are tiny graphics with a unique identifier, similar to cookies. But while cookies are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs to, among other things, track the activities of site visitors, manage content, and compile statistics about site usage. We or our service providers may also use clear GIFs in HTML customer emails to help track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
LSOs. We or third party partners may use Local Storage Objects (LSOs) using technologies such as HTML5 or Flash to collect and store information. Various browsers may offer management tools for removing HTML5 LSOs. To learn about managing Flash LSOs, please click here.
Third-party Analytics. We use third party analytics tools, such as Google Analytics, to collect, monitor and analyze collected information to improve functionality and user-friendliness, and better tailor the Service to our visitors’ needs. Accordingly, usage data is shared with Google, which has its own privacy policy addressing how it uses such information. We encourage you to review this privacy policy to understand how Google uses such information.
California Do-Not-Track Disclosure
Currently, the analytics portion of the Service recognizes browser “do-not-track” requests, but other portions of the Service do not. You may, however, disable certain tracking as discussed above (e.g., by disabling cookies). For more information about tracking, please click here.
Interest-Based Advertising
We use third parties such as network advertisers to serve advertisements on third-party websites or platforms such as social media. For example, we may use Google, LinkedIn, and Facebook to serve advertisements on third-party websites. This enables us and these third parties to target advertisements based on your interests. Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), LSOs and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party technologies are governed by each third party’s specific privacy policy, not this one. We may provide these third-party advertisers with information, including Personal Data, about you.
Users in the United States may opt out of many third-party ad networks. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and choices regarding having information used by NAI members.
Users in the European Union may also opt out of many third-party ad networks. For example, you may go to the European Interactive Digital Advertising Alliance (“EDAA”) Your Online Choices Page for information about opting out of interest-based advertising and choices regarding having information used by EDAA members.
Opting out from one or more companies listed on the DAA Consumer Choice Page, the NAI Consumer Opt-Out Page or the EDAA Your Online Choices Page will opt you out from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our website or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA, NAI, or EDAA-related websites, your opt out may not be effective. Additional information is available on the DAA’s website at www.aboutads.info, the NAI’s website at www.networkadvertising.org, and the EDAA’s website at www.youronlinechoices.com/goodpractice.
Legal Basis For Our Use (EEA and UK visitors only)
We are committed to compliance with the EU General Data Protection Regulation (“GDPR”) applicable to the European Economic Area (“EEA”), and compliance with UK data protection law. If you are a resident from the EEA or UK, our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it.
To the extent that we process Personal Data subject to GDPR, or applicable data protection provisions within the UK, we will collect Personal Data from you only where we have your consent to do so, where we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Data from you.
If we ask you to provide Personal Data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Data is mandatory or not (as well as of the possible consequences if you do not provide your Personal Data).
Similarly, if we collect and use your Personal Data in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
If you need further information concerning the legal basis on which we collect and use your Personal Data for any specific processing activity, please contact us at privacy@ozeki.ai.
Additional Notice for Canadian Residents
Canadian residents may have additional rights under Canadian law. Please see the information provided by the Office of the Privacy Commissioner of Canada for additional details.
You, and we, confirm that it is our wish that this Policy and all other related policies be drawn up in English. Vous reconnaissent avoir exigé la rédaction en anglais du présent document ainsi que tous les documents qui s’y rattachent.
Security
We have implemented appropriate physical and organizational security measures to protect collected information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, such as limiting access to select employees and contractors who have a need to know this information for purposes of their job, encrypting data in transit, encrypting certain sensitive information (such as passwords) at rest, and training employees on privacy and security issues. Please be aware that despite our best efforts, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
Transfer of Personal Information to the United States
If you are located outside of the United States, please note that your Personal Data will be transferred to and processed in the United States, which may not have the same level of data protection as your home country. We have taken appropriate safeguards to ensure that the recipient of your Personal Data provides a sufficient level of protection, and to require that your Personal Data will remain protected in accordance with this Policy. These include entering into data processing agreements and implementing the European Commission’s Standard Contractual Clauses in accordance with Art. 46 GDPR for transfers of Personal Data with our third-party service providers and partners. Further details can be provided upon request.
Accessing Your Personal Information and Exercising Your Privacy Rights
Through the Account page of the Ozeki website, you may access, and, in some cases, edit or delete the following information you have provided to us: name, company, phone number, email address and billing information.
The information you can view and update may change as the Service changes. If you have any questions about viewing or updating information we have on file about you, please contact us at privacy@ozeki.ai.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Accessing, correcting, updating or requesting deletion. If you wish to access, correct, update or request deletion of Personal Data not directly accessible on the Ozeki website, you can do so at any time by contacting us at privacy@ozeki.ai. When an access request is made, we will meet it without undue delay and no later than one calendar month from receipt. However, we may keep your Personal Data as needed to enforce our agreements and to comply with any legal obligations.
Objecting to processing, restricting processing, or requesting portability. If you are a resident of the European Union, you can object to processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data. Again, you can exercise these rights by contacting us at privacy@ozeki.ai.
Opting out. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To opt-out of other forms of marketing or data collection activities, please contact us at privacy@ozeki.ai. It may take up to 10 business days for us to process your opt-out request.
Withdrawing consent. If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
Filing complaints. You have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area are available here.)
CCPA Exceptions For Privacy Requests. There are a number of exceptions in the CCPA that allow a business to retain Personal Data even when you have requested deletion. These exceptions include:
- Completing the transaction for which your information was collected, providing goods or services you have requested, or performing a contract you have entered into with the business.
- Detecting any security incidents and protecting against malicious, fraudulent, or illegal activity.
- Exercising any legal rights.
- Complying with other laws or legal obligations.
- Engaging in public or peer-reviewed research, if the deletion of your information is likely to impede the achievement of the research and so long as the business has your consent.
- Using your information for lawful internal purposes consistent with the context in which your Personal Data was collected.
You may read more about the reasons why your information may still be retained, or why your privacy requests may be denied, in the Cal. Civ. Code section 1798.105(d) and in the Cal. Civ. Code section 1798.145.
Children's Privacy
Our Service is not designed for children under 18, and Ozeki does not want to collect Personal Data from children under 18 or knowingly allow such persons to register with the Service. If we discover that we have collected Personal Data from a child under 18, we will take steps to remove that information from our systems. If you believe that we might have any information from or about a child under 18, please contact us at privacy@ozeki.ai.
Links to Third-Party Websites
We are not responsible for the practices employed by third-party websites linked to or from the Service, nor the information or content they contain. Please remember that when you use a link to go from the Service to a third-party website, our Policy is no longer in effect. Your browsing and interaction on any third-party website, including those linked on our website or Service, is subject to that third-party website’s own rules and policies.
Data Retention
We retain Personal Data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with services you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your Personal Data, or you have requested we delete your information, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.
Use of Your Credit Card
You may have to provide a credit card or some kind of financial information to buy products and services from our website. We use third-party billing services and have no control over these services. We use commercially reasonable efforts to make sure your credit card number is kept strictly confidential by using only third-party billing services that use industry-standard encryption to protect your credit card number from unauthorized use. However, you understand that we are in no way responsible for any misuse of your credit card number.
Updates to this Policy
We may amend this Policy from time to time, so please be sure to check back periodically. If we make any changes to this Policy that materially affect our practices with regard to past Personal Data we have collected from you, we will make reasonable efforts to share what changed and provide our rationale for the change(s). After updates occur, use of information we collect now is subject to the Policy in effect when that information is used. If we are required by applicable data protection laws to seek your consent to any changes in use of your Personal Data described in our updated Privacy Policy, then we will do so.
Consent
By using our Service, you consent to our website privacy policy.
Business Transfer
If ownership of all or substantially all of Ozeki changes, or we undertake a corporate reorganization (including a merger or consolidation), you expressly consent to Ozeki transferring your information to the new owner or successor entity so that we can continue providing our services. If required, Ozeki will notify the applicable data protection agency in jurisdiction of such a transfer in accordance with the notification procedures under applicable data protection laws.