Privacy Policy

Effective Date: November 17, 2023

1. Introduction This Privacy Policy outlines the terms governing the collection, utilization, and sharing of data associated with your use of our services, collectively referred to as the "Service," which includes the Website, Widget, and API. Please review this Privacy Policy before utilizing the Service. By using the Service, you agree to comply with the Terms of Service, which incorporates the provisions of this Privacy Policy. EchoBot ( "Company") operates the Service, and we process your data to enhance and provide the Service. Your use of the Service constitutes your consent to the collection and handling of information as per this policy. Unless otherwise specified in this Privacy Policy, the terminology used herein aligns with our Terms of Service. 2. Definitions API: Refers to the EchoBot application programming interface integrated with the User's software. Cookies: Denote small files stored on your Device, which includes computers and mobile devices. Data Controller: Designates the entity, either natural or legal, responsible for determining the purposes and means of processing personal data. In the context of this Privacy Policy, we act as a Data Controller for your data. Data Processors (or Service Providers): Refer to natural or legal entities that process data on behalf of the Data Controller. We may employ various Service Providers to enhance data processing efficiency. Data Subject: Represents any living individual to whom Personal Data pertains. Personal Data: Encompasses data concerning an identifiable living individual, obtained directly or indirectly through our possession or likely to come into our possession. Service: Collectively signifies the Website, Widget, and/or API, depending on the scope designated for a particular User. Usage Data: Encompasses data automatically collected, either generated during the use of the Service or within the Service infrastructure itself, such as the duration of a page visit. User: Signifies the individual utilizing our Service, corresponding to the Data Subject who is the subject of Personal Data. Website: Refers to the web pages found at echobot.ai. Widget: Denotes an EchoBot widget that may be implemented on the User's website. 3. The Data Controller EchoBot acts as the Data Controller for your Personal Data. 4. Information Collection and Use We collect various types of data for different purposes to enhance and provide our Service. 5. Types of Data Collected Personal Data When using our Service, we may request specific personally identifiable information ("Personal Data") for contact and identification purposes, including: 1. Email address 2. First name and last name 3. Cookies and Usage Data Usage Data Additionally, we may gather information that your browser sends when visiting our Service or accessing it via a Device ("Usage Data"). This may include data such as your computer's Internet Protocol address (e.g., IP address), browser type, browser version, pages visited on our Service, visit time and date, time spent on these pages, unique Device identifiers, and other diagnostic information. Accessing the Service via a Device may also provide information such as the Device type, unique Device ID, Device IP address, operating system, browser type, unique Device identifiers, and additional diagnostic data. Tracking Cookies Data We employ cookies and similar tracking technologies to monitor activity on our Service and store certain information. Cookies consist of small data files, potentially containing an anonymous unique identifier, which are sent to your browser from a website and stored on your Device. Additional tracking technologies, such as beacons, tags, and scripts, are used to collect and monitor information, aiding in the improvement and analysis of our Service. You can configure your browser to reject all cookies or notify you when a cookie is being sent. However, declining cookies may restrict access to certain sections of our Service. Our use of cookies includes: 1. Session Cookies: Utilized for operating our Service 2. Preference Cookies: Used to remember your preferences and settings 3. Security Cookies: Employed for security purposes 4. Advertising Cookies: Utilized to serve relevant advertisements based on your interests 6. Use of Data EchoBot employs the collected Personal Data for various purposes, including but not limited to: 1. Maintaining and providing our Service 2. Informing you about Service changes 3. Enabling participation in interactive Service features at your discretion 4. Providing customer support 5. Gathering analysis and valuable information for Service improvement 6. Monitoring Service usage 7. Detecting, preventing, and addressing technical issues 8. Fulfilling other purposes as specified when information is provided 9. Executing obligations and enforcing rights from contracts between you and us 10. Sending notices about your account and/or subscription 11. Providing news, special offers, and general information about goods, services, and events 12. Any other purposes as specified at the time of data provision 7. Retention of Data We will retain your Personal Data for the period required to fulfill the purposes outlined in this Privacy Policy. Personal Data may be retained for compliance with legal obligations, resolution of disputes, and enforcement of our legal agreements and policies. Personal Data processed with your consent will be stored until the relevant consent is withdrawn, and any claims arising from the Service have expired. Usage Data is typically retained for a shorter duration, except when used to enhance security or improve Service functionality or when legally obligated to extend data retention. 8. Transfer of Data Your data, including Personal Data, may be transferred and maintained on computers located outside your jurisdiction, subject to varying data protection laws. If you are located outside the United States and provide information to us, note that we transfer and process data, including Personal Data, in the United States. We will undertake reasonable steps to ensure secure data handling in accordance with this Privacy Policy. No Personal Data transfers to organizations or countries will occur without adequate controls, including data security, as mandated by applicable laws. When transferring Personal Data across jurisdictions, we implement contractual safeguards in line with Article 46(2)(c) of the GDPR. 9. Disclosure of Data We may disclose Personal Data you provide under the following circumstances: 1. When required by law or in response to valid requests by public authorities 2. In the event of a merger, acquisition, or asset sale involving us or our subsidiaries 3. To our subsidiaries, affiliates, employees, contractors, service providers, and other third parties assisting our business 4. For the purpose you provided it 5. For displaying your company's logo on our Website 6. With your consent for any other applicable scenarios We do not sell or otherwise share your Personal Data, except as described in this Privacy Policy. 10. Security of Data The security of your data is paramount to us, although no method of internet transmission or electronic storage is completely secure. We employ suitable administrative, technical, and physical safeguards to prevent accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use of the Personal Data you provide. Measures include maintaining backup copies and granting access to Personal Data only to authorized personnel. 11. Your Data Protection Rights Under General Data Protection Regulation (GDPR) If you are a resident of the European Union (EU) and European Economic Area (EEA), you are entitled to certain data protection rights under GDPR. We endeavor to facilitate your exercise of these rights, which encompass: 1. Access to your Personal Data by requesting its sharing and/or sending a copy of all your Personal Data processed by us 2. Rectification of inaccurate Personal Data by indicating the data requiring correction 3. Erasure of your Personal Data; we retain the right to refuse erasure in specific circumstances provided by law 4. Restriction of processing of your Personal Data by indicating the data to be restricted 5. Objection to processing of your Personal Data conducted based on your particular situation 6. Withdrawal of consent for processing your Personal Data, effective solely for processing based on consent 7. Lodging a complaint with a supervisory authority, primarily in the EU member state of your habitual residence, place of work, or place of alleged infringement if you believe processing of Personal Data concerning you infringes GDPR To exercise these rights, please email us at support@echobot.ai. Kindly note that we may require identity verification before responding to your requests. Some necessary data may be required for Service provision. 12. Your Data Protection Rights under the California Privacy Protection Act (CalOPPA) CalOPPA is a state law mandating commercial websites and online services to publish a privacy policy. Its scope extends beyond California, requiring any entity in the United States (and potentially worldwide) operating websites collecting personally identifiable information from California consumers to prominently display a privacy policy, disclosing the information collected and shared with individuals. CalOPPA stipulates the following: 1. Users can visit our site anonymously. 2. Our Privacy Policy link, containing the word "Privacy," is easily accessible on the specified page of our website. 3. Users are notified of any privacy policy changes on our Privacy Policy Page. 4. Users can modify their personal information by emailing us at support@echobot.ai. We respect Do Not Track signals and do not track, plant cookies, or utilize advertising when a Do Not Track browser mechanism is enabled. Do Not Track allows you to inform websites of your preference not to be tracked, and you can enable or disable it in your web browser's Preferences or Settings page. 13. Service Providers We may engage third-party entities and individuals to facilitate our Service ("Service Providers"). These Service Providers support us in providing, analyzing, or performing Service-related functions. These third parties have access to your Personal Data solely to fulfill these tasks on our behalf, with obligations to refrain from disclosing or using it for other purposes. 14. Analytics We may employ third-party Service Providers to monitor and analyze Service usage. Google Analytics Google Analytics, offered by Google, is a web analytics service tracking and reporting website traffic. Google uses collected data to monitor Service usage and shares it with other Google services. The data may be used to personalize ads in Google's advertising network. More information on Google's privacy practices is available at: https://policies.google.com/privacy?hl=en. Review Google's data protection policy for additional details: https://support.google.com/analytics/answer/6004245. 15. Payments If we offer paid products and/or services within the Service, we use third-party payment processing services (e.g., payment processors). We neither store nor collect your payment card details. These details are directly provided to our third-party payment processors, whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to PCI-DSS standards established by brands like Visa, Mastercard, American Express, and Discover, ensuring secure payment information handling. Payment processors we work with include: 1. Stripe - View Stripe Inc.'s Privacy Policy at: https://stripe.com/us/privacy. 16. Links to Other Sites Our Service may include links to external sites not operated by us. Clicking on third-party links directs you to their respective sites, and we recommend reviewing their Privacy Policy. We have no control over or responsibility for the content, privacy policies, or practices of third-party sites or services. 17. Children's Privacy Our Service does not address anyone under the age of 16 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. 18. Changes to This Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating "effective date" at the top of this page, unless another type of notice is required by the applicable law. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it. 19. Contact Us If you have any questions about this Privacy Policy, please contact us at support@echobot.ai.