Privacy Policy

Last updated: 21st August 2020
InscribeAI, Inc. ("Inscribe", “InscribeAI”, “We”, “Us”) has created this Privacy Policy (“Policy”) in order to set out how we collect, use, and disclose personal information through the InscribeAI websites located at https://inscribe.ai/ (the “Websites”) and our InscribeAI web application and API, which we make available to our clients for document analysis and detection of document fraud (the “Platform” and together with our Websites, the “Services”). The privacy of our users is of great importance to us. By using the Services in any manner or providing Personal Information to InscribeAI, you acknowledge that you accept the practices and policies outlined in this Policy and you hereby consent to the collection, use and disclosure of your Personal Information in accordance with this Policy.

1. Application of this policy
This Policy covers our collection, use and disclosure of information about identifiable individuals (“Personal Information”), particularly those individuals who use our Services (“Users”), as well as our clients (“Clients”) and prospective clients.

This Policy does not apply to the practices of companies that we do not own or control, including those practices of our Clients or third-party organizations with which you choose to share Personal Information. You should review the applicable privacy policy of any company with which you do business.

2. Collection of personal information
2.1 Client Users of the Services
In order to use certain aspects of the Services, representatives of our Clients may be required to have a valid InscribeAI account to log in to the Platform (“Account”). We may collect the following types of Personal Information to set up and provide you with your Account: name, email address, business phone number, and business address.

2.2 Business Partners and Prospective Clients
InscribeAI collects certain Personal Information about prospective clients, including contact name, company name, contact email address, business phone number, and business address. This Personal Information is used to confirm the identity and authorization of the person requesting our services on behalf of the prospect or current client, as well as to communicate with the company in respect of the InscribeAI products and services.

2.3 Client Customers, Employees and other Individuals
The InscribeAI Services are made available to our Clients who may use the Services to process Personal Information related to their own customers, employees and/or other individuals (“Client Data Subjects”). The types of Personal Information related Client Data Subjects that may be stored or processed by the InscribeAI Services will depend on the documents with which the Client is using the Services. For example, Clients may process bank statements, tax forms, utility bills, or invoices through the Services, in which case the Personal Information contained in those documents will be processed and stored by InscribeAI.

3. Use of personal information
3.1 Clients, Business Partners and Prospective Clients
We use names and contact information of our Clients, business partners and prospective clients in order to:
- manage access to and use of InscribeAI Services;        
- setup invoicing and billing procedures;        
- carry out customer management, including contracts, orders, deliveries, invoices, and follow-ups;
- constitute a file of registered members, users, Clients and prospects;        
- communicate updates related to our Services;        
- solicit and manage Clients’ opinions of InscribeAI products;        
- provide commercial and service use statistics for Clients, such as the number and type of documents uploaded for User Accounts; and        
- provide customer support related to the Services.

We also use contract information to send promotional and marketing communications to our Clients and prospective Clients in accordance with anti-spam laws. Individuals can opt out of receiving e-mail marketing at any time.

3.1 Use of Client Data Subjects’ Personal Information
When we receive Personal Information about our Client’s Data Subjects, we only use and process that Personal Information in order to provide the Services to our Clients.

3.3 Prohibition on the sale of personal data
InscribeAI does not sell or lease out Personal Information to third parties.

4. Storage location and transfer of personal information
InscribeAI stores its data, including Personal Information, on servers located in Canada, the United States and Europe, including through the use of our third-party service providers, including our sub-processors (https://inscribe.ai/subprocessors). By submitting information, you agree to this transfer, storing or processing of your Personal Information by our sub-processors in Canada, the United States and Europe. You acknowledge and agree that your Personal Information may be accessible to law enforcement and governmental agencies in Canada, the United States and European nations under lawful access regimes or court order.

5. Disclosure of personal information with third parties
5.1 Service Providers and Business Partners
We may from time to time employ other companies and people to perform tasks on our behalf and need to share Personal Information with them to provide the Services. Unless we tell you differently, such third parties do not have any right to use the Personal Information we share with them beyond what is necessary to assist us. This includes third-party companies and individuals employed by us to facilitate our InscribeAI Services. For a current list of our third-party sub-processors, please see https://inscribe.ai/subprocessors.

5.2 Business Transfers
If we (or substantially all of our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information may be made available or otherwise transferred to the new controlling entity, where permitted under applicable law.

5.3 With Your Consent
If we need to use or disclose any Personal Information in a way not identified in this Privacy Policy, we will notify you and/or obtain your express consent as required under applicable privacy laws.

5.4 For Legal Reasons
InscribeAI may disclose Personal information if we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, or in order to enforce or apply our Client contracts and other agreements; or to protect our rights, property, or safety, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. All disclosures will be made in accordance with applicable laws.

6. Cookies
InscribeAI uses cookies to record log data. We use both session-based and persistent cookies.

Cookies are small text files sent by us to your computer and from your computer or mobile device to us each time you use our Services. They are unique to your account or your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.

Some cookies are associated with a user Account. InscribeAI uses session cookies containing encrypted information to allow the system to uniquely identify a User Account while the User is logged in. This information allows InscribeAI to process your online transactions and requests. Session cookies help us make sure you are who you say you are after you’ve logged in and are required in order to use the InscribeAI Services.

Other cookies are not tied to a User Account but are unique and allow us to carry out site analytics and customization, among other similar things. InscribeAI uses persistent cookies, that only InscribeAI can read and use, to identify the fact that you are a InscribeAI user and track the webpages you view and use. If you access Services through your browser, you can manage your cookie settings there but if you disable some or all cookies you may not be able to use Services.

Finally, we use third parties like Google Analytics for website analytics, including who visit the websites, such as the date and time, the search engine where the visitor comes from, the number of visits, etc. You may opt-out of third party cookies from Google Analytics on its website.

Our third-party partners also employ clear gifs, images, and scripts that help them better manage content on our site.

You may be able to instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Review your browser settings to set how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Services and we recommend that you leave them turned on.

7. Security
The security of your Personal Information is important to us. We use commercially reasonable efforts to store and maintain your Personal Information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.

8. Retention
We will keep your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you.  Where we are processing Personal Information on behalf of our Clients, we will retain the Personal Information for as long as we are contractually obliged to do so.

You can request that InscribeAI delete your Personal Information at any time. However, we may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, non-personally-identifiable data, account recovery, or if required by law. All retained Personal Information will remain subject to the terms of this Privacy Policy.

9. Access, correction and accuracy
You have the right to access the Personal Information we hold about you in order to verify the Personal Information we have collected in respect to you and to have a general account of our uses of that information. Upon receipt of your written request, we will provide you with a copy of your Personal Information, although in certain limited circumstances, and as permitted under law, we may not be able to make all relevant information available to you, such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access and modifications in a timely manner.

We will make every reasonable effort to keep your Personal Information accurate and up to date, and we will provide you with mechanisms to update, correct, delete or add to your Personal Information as appropriate. As appropriate, this amended Personal Information will be transmitted to those parties to which we are permitted to disclose your information.  Having accurate Personal Information about you enables us to give you the best possible service.

10. Residents of the European Economic Area (“EEA”)
InscribeAI generally processes Personal Information in order to fulfill contracts we have with our Clients and Users and to pursue our legitimate business interests. Otherwise, InscribeAI will obtain consent from an individual in respect of processing of Personal Information if required by law to do so.

Further, individuals located in the EEA have certain rights under European law (including under the General Data Protection Regulation) with respect to Personal Information, including the right to request access to, obtain, correct, amend, delete, or limit the use of your personal data. Individual Users, Clients or prospective customers located in the EEA who wish to exercise these rights, should contact InscribeAI using the contact information below in Section 13 to exercise these rights. However, where InscribeAI is a data processor of personal data on behalf of our Client (the data controller), the request may be forwarded to the applicable data controller.

Individuals also have the right to make complaints to regulatory authorities in respect of our privacy practices.

11. Residents of California Privacy Rights
Subject to certain limitations, the California Consumer Privacy Act provides California consumers the right to request to know more details about the categories or specific pieces of Personal Information we collect (including how we use and disclose this Personal Information), to delete their Personal Information, to opt out of any “sales” of Personal Information that may be occurring, and to not be discriminated against for exercising these rights. InscribeAI does not sell (as that term is defined in the CCPA) the Personal Information we collect.

California consumers may make a request pursuant to their rights under the CCPA by contacting us at the contact information listed below.

12. Changes to this policy
We may amend this Policy from time to time. Use of Personal Information we collect is subject to the Policy in effect at the time such information is collected, used or disclosed. If we make material changes or changes in the way we use Personal Information, we will notify you by posting an announcement on our Websites or Platform or sending you an email prior to the change becoming effective. You are bound by any changes to the Policy when you use the Services after such changes have been first posted.

13. Contact
If you would like to access, correct, amend or delete any Personal Information we have about you, register a complaint, or simply want more information about our Privacy Practices, please contact our Privacy Officer at:
James Eggers
Privacy Officer
team@inscribe.ai