Privacy Policy

1. Introduction

This Website privacy policy (“Website Privacy Policy”) provides information on the collection, storage, use, sharing, disclosure, and transfer (“Processing”) by CompanyDNA AI Inc., 2093 Philadelphia Pike #5021, Claymont DE 19703, United States (“CompanyDNA”, “we”, “our”, or “us”) of information that relates to an identified individual or to an identifiable individual, as defined under applicable data protection laws (“Personal Data”) in connection with visitors (“Visitors” or “you”) of this website (the “Website”). It also provides you with information about your privacy rights in relation to such Processing of your Personal Data.

2. Scope of the Website Privacy Policy

This Privacy Policy applies solely to the Processing of Visitors' Personal Data in connection with their visit to our Website. Processing activities performed by CompanyDNA AI Inc. in relation to our products are governed by our Platform Privacy Policy.

3. Who is responsible for processing your personal data?

For the purpose of the Personal Data Processing activities identified under this Website Privacy Policy, CompanyDNA AI Inc. is deemed the Data Controller and is responsible for processing your Personal Data under applicable data protection laws, particularly those of the United States and other relevant legal regulations.

If you have any questions about this Website Privacy Policy or about our data protection practices, you can contact us. See how to contact us below in Section 12.

4. Which Personal Data do we process about you and how?

CompanyDNA AI Inc. collects and processes your Personal Data when you contact us through the email address indicated on our Website or when you navigate on our Website. Such Personal Data can include:

When you contact us through the email address indicated on our Website or request information:

- Identification and contact data (including first and last name, email address, and phone number)

- Any other Personal Data you voluntarily choose to provide in the requests you send to us

When you visit or interact with our Website:

Unique identifiers

IP address, cookie IDs, device IDs, web beacons, pixels, and other similar technologies (as described in our “Cookies Policy")

Device and technical data

Domain server, type of device/operating system/browser used to access the Website, local and language settings; session logging, heatmaps and scrolls; screen resolution, ISP, referring or exit pages; and the date and time of your visit.

Analytics data

Web page interactions (clicks, browsing, zooms, and other interactions), referring web page/source through which you accessed the Website, and statistics associated with the interaction between device or browser and the Website.

5. Why do we use your Personal Data?

We process your Personal Data for various purposes, including administering our Website, developing and improving the performance of our Website, and responding to your requests. These purposes are based on our legitimate interest, compliance with applicable laws, and your consent, where required. Below is a summary of the purposes for which we process your Personal Data, along with the legal basis for this processing:

Compliance with a legal obligation

- Administer and protect our Website, prevent and investigate fraud and other misuses

- Analyze, develop, improve, and optimize the use, function, and performance of our Website, respond to your requests or when you contact us. Customize or personalize your experience

- Respond to requests from regulators, law enforcement authorities, other government officials, or data subject requests

- Resolve disputes and defend against legal claims

Legitimate interest Consent

- Analyze, develop, improve, and optimize the use, function, and performance of our Website, respond to your requests or when you contact us. Customize or personalize your experience

6. How long do we keep your Personal Data?

Your Personal Data will be stored in accordance with applicable data protection laws and data protection authorities' guidelines to the extent necessary for the processing purposes set out in this Website Privacy Policy and in accordance with our Data Retention Policy. Below you will find a summary of the data retention periods related to each purpose of processing:

Administer and protect our Website, prevent and investigate fraud and other misuses

For the duration of the Website's existence and then in archives as required by applicable law or regulation

Customize or personalize your experience

- 13 months

Analyze, develop, improve, and optimize the use, function, and performance of our Website

- 13 months

Respond to your data protection requests and requests or communications from law enforcement authorities or other government officials

- For the time necessary to respond to the request or communication and then in archives as required by applicable law or regulation

Resolve disputes and defend against a legal claim

- In case of a dispute, until the settlement of the dispute; in case of a legal claim, for the duration of the proceedings and until the ordinary and extraordinary means of recourse are exhausted with regard to the decision rendered.

7. When and with whom do we share your Personal Data?

Your Personal Data is shared for business purposes within CompanyDNA AI Inc. and with third parties such as service providers, and, upon request and in line with legal requirements, with government, judicial, and law enforcement entities.

In connection with one or more of the purposes outlined in the Sections above, we may disclose your personal data to:

- CompanyDNA subsidiaries and affiliated companies:

We may share, disclose, and transfer your Personal Data with current and future subsidiaries and affiliated companies for all purposes mentioned in Section 5 above.

- Service providers:

We may share your Personal Data with third parties to perform services complementary to our own, including hosting, data analytics, consulting, development, support, marketing, and advertising, as well as data and cyber security services. Our service providers may perform the services on our behalf, under our instructions, in accordance with our agreement and in compliance with appropriate technical and organizational security measures to protect your Personal Data.

- Other third parties:

We may disclose your Personal Data to third parties, including government authorities or public authorities, courts, intergovernmental, or supranational bodies for legal processes where we believe that access, use, preservation, or disclosure of the information is reasonably necessary, including:
   - To comply with laws, regulations, legal processes, or to respond to lawful requests;
   - To enforce or apply our agreements;
   - To protect the rights, interests, property, or safety of CompanyDNA, our customers, you, and others;
   - In connection with claims, disputes, or litigation;
   - To protect you and others from fraudulent, abusive, or unlawful use of the Website, and other fraudulent activity.

Such disclosure or access may occur if we believe in good faith that we are legally compelled to do so or that it is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing.

8. How do we transfer your Personal Data globally?

Your Personal Data may be accessed, processed, and stored in countries where CompanyDNA AI Inc. or its service providers operate, including countries outside of the European Economic Area (EEA).

CompanyDNA has implemented safeguards to ensure an adequate level of data protection when your Personal Data is transferred to countries outside the EEA, such as:

- an adequacy decision from the European Commission;
- the European Commission’s Standard Contractual Clauses for the transfer of Personal Data.

9. How do we secure your Personal Data?

We use industry-standard physical, procedural, and electronic security measures to protect your Personal Data held with us and our service providers. These measures are regularly updated to take into account the current state of technology.

10. What are your privacy rights and how can you exercise them?

Subject to applicable data protection laws, including the GDPR and other relevant regulations, you have privacy rights concerning the Personal Data we process about you:

- Request confirmation that we are processing your Personal Data;
- Request access to the Personal Data we process about you;
- Request that we delete, update, or correct the Personal Data we hold about you;
- Request that we restrict how we use your Personal Data;
- Request that we apply the right to data portability, where applicable;
- Object to our processing of your Personal Data;
- Withdraw the consent that you have given us to process your Personal Data, where we process it based on your consent;
- Lodge a complaint with the relevant data protection authority regarding our processing of your Personal Data.

To exercise one or more of the rights mentioned above, please contact us as outlined in Section 12 below.

11. Children’s Privacy

Our Website is not designed to attract children under the age of 16. We do not knowingly collect Personal Data from children and do not wish to do so. If we learn that a person under the age of 16 is using our Website, we will prohibit and attempt to block such use and will make reasonable efforts to promptly delete any Personal Data stored with us regarding such a person. If you believe that we might have any such data, please contact us as outlined in Section 12 below.

12. How to contact us?

You may contact us regarding this Website Privacy Policy or our Processing of your Personal Data at privacy@companydna.ai. You can also contact our Data Protection Officer at dpo@companydna.ai.

13. Updates and Amendments to this Website Privacy Policy

The “Effective Date” at the top of this webpage indicates when this Website Privacy Policy was last revised. We may update and amend this Website Privacy Policy from time to time. Any changes will become effective when we post a revised version of this Website Privacy Policy on this Website. Your use of our Website is subject to the terms in the version of this Website Privacy Policy that is posted on this Website at the time of your visit, and we encourage you to review this Website Privacy Policy any time you visit our Website.

14. External Links

We are not responsible for the privacy practices of other websites that our Website may contain links to. We encourage you to pay attention when you leave our Website for the website or application of a third party and to read the privacy policies of each and every website or service you visit.