Privacy Policy

1. INFORMATION WE COLLECT

We collect the following types of information:

a. Information You Provide to Us

• Account registration data, such as your name, email address, phone number, and organization.
• Billing information, such as payment method and billing address.
• Customer support requests or feedback submitted by you.
• For managed organization accounts, employee roster details, job title, role description, organization and team memberships, and organization- or team-provided briefing context.

b. Information Collected Automatically

• Usage Data: Information about your interactions with our Services, such as IP address, device type, browser type, pages visited, and time spent.
• Cookies and Similar Technologies: We use cookies and other tracking technologies to enhance your experience and analyze usage. You can control cookies through your browser settings.

2. HOW WE USE INFORMATION

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Services;
• To process transactions and send you related information;
• To communicate with you about updates, security alerts, and support;
• To improve and personalize your experience;
• To monitor and analyze trends and usage;
• To comply with legal obligations.

3. ORGANIZATION-MANAGED ACCOUNTS

An organization may provision and administer one managed role for an employee. Organization owners and administrators can view that managed role's inputs and latest briefing. Team and organization profiles are also used as context when generating the managed briefing.

Employees may create separate personal roles that are not visible to their employer. The source text of an employee's personal general profile is also hidden from the employer, although that private context may influence the generated managed briefing. Because the employer can view the managed briefing, it may contain conclusions informed by that private context.

We record audit metadata when an organization administrator opens a managed profile or latest briefing. When an employee is removed, managed organization data is ordinarily archived for 90 days before deletion; the employee's separate personal account and roles are not deleted for that reason.

4. SHARING OF INFORMATION

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who help us operate our Services (e.g., hosting, analytics, payment processors), under confidentiality agreements.
• Legal Compliance: When required by law, regulation, subpoena, or court order.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

5. DATA RETENTION

We retain your information as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

6. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. YOUR RIGHTS

Depending on your location and applicable laws, you may have the following rights:

• The right to access the personal data we hold about you;
• The right to request correction or deletion of your personal data;
• The right to object to or restrict processing of your data;
• The right to data portability;
• The right to withdraw consent (if processing is based on consent).

To exercise any of these rights, please contact us using the contact information below.

8. INTERNATIONAL TRANSFERS

If you are located outside of the United States, your information may be transferred to and processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

9. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If we learn we have collected such data, we will take steps to delete it.

10. THIRD-PARTY LINKS

Our Services may contain links to other websites not operated by Tazama.AI. We are not responsible for the privacy practices or content of third-party sites.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (e.g., by email or through the Services). Your continued use of the Services after the changes become effective constitutes your acceptance.

12. CONTACT US

If you have any questions about this Privacy Policy or our data practices, you may contact us at support@tazama.ai.