Privacy Policy

Personal Data We Collect

We may collect a variety of personal data from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use the full extent of the Site, or we may not be able to respond to your request, if that personal data is necessary for that purpose or if we are legally required to collect it.

Personal Data You Provide to Us

Contact and Inquiry Information. When you contact us, request information or a demo, or otherwise reach out to us through the Site, we collect the personal data you provide, such as your name, email address, phone number, company, job title, and the contents of your message.

Communications. If you contact us directly, we may receive personal data about you, such as your name, email address, and the contents of a message or attachments that you send to us. When you sign up for news and updates, we collect your email address and any other personal data you provide. When you communicate with us online, our third-party vendors may receive and store these communications on our behalf.

Email Engagement. When we send you emails, we may use embedded pixels or similar technologies to learn whether and when you open them and whether you click links in them, along with related Location Information and Device Information (described below), so that we can understand engagement and improve our communications.

Events. If you register for or attend an event that we host or sponsor, we may collect your name, contact information, company, job title, and any other information you choose to provide.

Careers. If you apply for a job with us, we collect the contact information, resume, and other information you choose to provide, such as your education and employment history, as well as information from references and from any recruiting platform you use to apply.

Personal Data We Receive From Other Sources

We may receive personal data about you from third parties and combine it with personal data we already hold. These sources may include business contact and data enrichment providers, event co-hosts, marketing and recruiting partners, and publicly available sources such as professional networking sites and company websites.

Personal Data We Collect Automatically

Location Information. We may collect and infer your general location (such as your city, region, or country), including from your internet protocol (IP) address. We do not collect your precise geolocation through the Site.

Device Information. We may receive information about your device and software, including IP address, device type, device identifiers, web browser type and version, and operating system version.

Usage Information. We automatically receive information about your interactions with the Site, such as the pages you view, the links you click, the website that referred you, the time you spend on pages, and the dates and times of your visits.

Information from Cookies and Similar Technologies. We and our third-party partners collect information using cookies, pixels, beacons, local storage, and similar technologies (collectively, “Cookies”), as described in the Cookies and Analytics section below.

Cookies and Analytics

We use Cookies to operate the Site and enable its basic functions, remember your preferences, distinguish you from other visitors, understand how visitors use the Site, and measure and improve the Site and our communications.

We use analytics services, such as Google Analytics, to collect and process analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices at https://www.google.com/policies/privacy/partners/ and can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout.

Most browsers let you block or delete Cookies through their settings. If you do, some parts of the Site may not work properly. Where applicable law requires your consent for non-essential Cookies, we will ask for it before setting them, and you may withdraw that consent at any time.

How We Use the Personal Data We Collect

We use the personal data we collect:

• To provide, operate, maintain, secure, debug, and improve the Site;

• To understand how visitors use the Site and to develop and improve our products, services, and technology;

• To communicate with you, respond to your inquiries and requests, provide information you request, and otherwise provide support;

• For marketing and advertising purposes, such as sending you news and updates about our products, services, and events, and developing promotional materials that may be relevant, valuable, or otherwise of interest to you;

• To evaluate job applicants and manage our recruiting;

• To generate de-identified, anonymized, or aggregated data that we may use for any lawful purpose;

• To find and prevent fraud, abuse, and security incidents, resolve disputes, and respond to trust and safety issues;

• For compliance purposes, including enforcing our Terms of Use and other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and

• For other purposes for which we provide notice at the time the information is collected.

How We Disclose the Personal Data We Collect

We do not “sell” personal data or “share” personal data for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. We may disclose personal data as follows:

Affiliates. We may disclose personal data we receive to our subsidiaries and affiliates for the purposes described in this Privacy Policy.

Vendors and Service Providers. We may disclose personal data to vendors and service providers that help us operate the Site and our business, such as providers of hosting, email, customer relationship management, analytics, recruiting, and customer support services.

Analytics Partners. We disclose personal data to analytics providers as described in the Cookies and Analytics section above.

Professional Advisors. We may disclose personal data to our lawyers, accountants, auditors, insurers, and other professional advisors in the course of the services they provide to us.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose personal data if we believe doing so is required or appropriate to:

• Comply with law enforcement requests and legal process, such as a court order or subpoena;

• Respond to your requests;

• Protect your, our, or others’ rights, property, or safety;

• Protect against legal liability; or

• Investigate fraud or other unlawful activity.

For the avoidance of doubt, we may disclose personal data if you submit unlawful or objectionable content through the Site.

Merger, Sale, or Other Asset Transfers. We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your personal data with your permission.

Your Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Please note that if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Cookies. You can manage Cookies as described in the Cookies and Analytics section above.

Do Not Track. There is no accepted standard on how to respond to “Do Not Track” signals, and we do not respond to such signals.

Your Privacy Rights

Depending on where you live, applicable law may give you rights regarding your personal data. These may include the right to:

• Access: confirm whether we process your personal data and obtain a copy of it;

• Correction: ask us to correct inaccurate personal data;

• Deletion: ask us to delete your personal data;

• Portability: receive your personal data in a portable format;

• Objection or Restriction: object to, or ask us to restrict, certain processing, including processing for direct marketing;

• Withdrawal of Consent: where we rely on your consent, withdraw it at any time, without affecting processing that took place before you withdrew it; and

• Opt-Out: opt out of the sale of personal data, targeted advertising, or certain types of profiling.

These rights vary by jurisdiction and are subject to exceptions and limitations under applicable law. We will respond to requests to the extent required by the law that applies to you. If no such law applies to you, we may consider your request, but we are not obligated to grant it.

How to Submit a Request. To submit a request, email us at privacy@cananai.com with “Privacy Request” in the subject line and tell us where you live. We may need to verify your identity before responding, which may require you to provide additional information. Where permitted by applicable law, you may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authority and may verify your identity directly with you.

Appeals. Where applicable law gives you the right to appeal our decision on your request, you may do so by emailing privacy@cananai.com with “Appeal” in the subject line. If you are not satisfied with the outcome of your appeal, you may contact your state attorney general.

Non-Discrimination. We will not discriminate against you for exercising any rights you have under applicable law.

Complaints. If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

Additional Information for U.S. State Residents

To the extent a U.S. state comprehensive privacy law, such as the California Consumer Privacy Act (“CCPA”), applies to our processing of your personal data, the following additional information applies.

In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described above:

• Identifiers, such as name, email address, phone number, IP address, and device identifiers;

• Professional or employment-related information, such as company and job title and, for job applicants, employment and education history;

• Internet or other electronic network activity information, such as Usage Information and information collected through Cookies;

• General geolocation data, such as city, region, or country inferred from your IP address; and

• Inferences drawn from the above, such as your likely interest in our products and services.

We disclose each of these categories for business purposes to the categories of recipients described in the How We Disclose the Personal Data We Collect section above. We do not sell or share personal information, including the personal information of consumers we know to be under 16 years of age. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you. We retain each category of personal information as described in the Retention section below.

Additional Information for EEA, UK, and Swiss Residents

Controller. Canan AI is the controller of the personal data described in this Privacy Policy. You can contact us using the details in the Contact Information section below.

Legal Bases. We process your personal data on the following legal bases:

• Contract: where processing is necessary to take steps you request before entering into a contract with us, or to perform a contract with you, such as responding to a demo request or considering your job application;

• Legitimate Interests: where processing is necessary for our legitimate interests, and those interests are not overridden by your rights and interests, such as operating, securing, and improving the Site; understanding how visitors use the Site; communicating with business contacts about our products and services; recruiting; preventing fraud; and establishing, exercising, or defending legal claims;

• Consent: where we have asked for your consent, such as for non-essential Cookies and certain marketing communications where consent is required by law; and

• Legal Obligation: where processing is necessary to comply with our legal obligations.

International Data Transfers. When we transfer personal data from the EEA, the UK, or Switzerland to a country that has not been found to provide an adequate level of protection, we rely on lawful transfer mechanisms, such as the standard contractual clauses approved by the European Commission and their UK and Swiss equivalents, or on derogations permitted by applicable law. You may request information about these safeguards by contacting us.

Third Parties

The Site may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any data you disclose to these third parties. We encourage you to read their privacy policies before providing any data to them.

Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to respond to you, maintain our business records, comply with our legal obligations, resolve disputes, and enforce our agreements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and applicable legal requirements. When we no longer need personal data for these purposes, we delete it or keep it in a form that does not permit identifying you, unless we are required by law to keep it for a longer period.

Security

We make reasonable efforts to protect your data by using security measures designed to safeguard the data we maintain. However, because no electronic transmission or storage of data can be entirely secure, we can make no guarantees as to the security or privacy of your data.

Children’s Privacy

We do not knowingly collect, maintain, or use personal data from children under 18 years of age, and no part of the Site is directed to children. If you learn that a child has provided us with personal data in violation of this Privacy Policy, then you may alert us at privacy@cananai.com.

International Visitors

The Site is hosted in the United States (“U.S.”). If you choose to use the Site from the EEA, the UK, or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing.

Changes to this Privacy Policy

We will post any adjustments to this Privacy Policy on this page, and the revised version will be effective when it is posted. If we make material changes, we may also provide additional notice, such as by posting a notice on the Site.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@cananai.com or write to us at Canan AI, Attention: Privacy, 8 The Green, Suite G, Dover, DE 19901.