Answering App Privacy Policy
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of processing, or on behalf of which such information is collected, and that does business in the State of California.
- CCPA and/or CPRA refers to the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020.
- Company (referred to as “the Company”, “We”, “Us” or “Our” in this Agreement) refers to AnswerBot by Umbrella Micro Enterprises Inc. of 1330 6th Ave. New York, NY, 10019.
- Consumer, for the purpose of CCPA/CPRA, means a natural person who is a California resident, as defined by law.
- Cookies are small files placed on Your device by a website, containing details of Your browsing history.
- Data Controller refers to the Company as the legal person determining the purposes and means of processing Personal Data, under GDPR.
- Device means any device that can access the Service such as a computer, cellphone, or tablet.
- Do Not Track (DNT) is a concept promoted by the U.S. Federal Trade Commission for allowing users to control tracking of online activities.
- GDPR refers to the EU General Data Protection Regulation.
- Personal Data is any information relating to an identified or identifiable individual.
- Service refers to the Website.
- Service Provider means any person processing data on behalf of the Company, including third-party companies facilitating or providing Service.
- Third-party Social Media Service refers to any social network website through which a User can log in to use the Service.
- Usage Data refers to data collected automatically, either generated by use of the Service or from Service infrastructure.
- Website refers to AnswerBot, accessible from AnswerBot.ai.
- You means the individual accessing or using the Service, or the legal entity on behalf of which such individual is accessing or using the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide certain personally identifiable information, including:
- Email address
- First and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
Usage Data
Usage Data is collected automatically when using the Service, including information such as Your Device’s IP address, browser type and version, pages of our Service visited, time and date of Your visit, time spent on pages, unique device identifiers, and other diagnostic data.
When accessing the Service by mobile device, We may collect certain information including type of mobile device, unique ID, IP address, mobile operating system, and mobile browser type.
Information from Third-Party Social Media Services
The Company allows You to create an account and log in to use the Service through Third-party Social Media Services such as Google, Facebook, Instagram, Twitter, and LinkedIn. If You register through a Social Media Service, We may collect Personal Data already associated with that account, including Your name, email address, activities, or contact list.
SPECIFIC INFORMATION ABOUT WHAT THIRD-PARTY AI MODELS WE USE AND WHAT DATA IS SHARED WITH THEM
We utilize the following AI models to add certain capabilities to AnswerBot:
GPT3.5, GPT4, GPT4o, Claude, Llama and Mistral: These models are used as the underlying LLM of our voice agents that carry out the conversation based on user’s prompts or uploaded knowledge.
Whisper and Deepgram’s Nova model for transcription.
What data is shared with these models?
With LLMs (GPT3.5, GPT4, GPT4o, Claude, Gemini, Llama and Mistral), we share the information the following information:
- Agent prompt
- Agent knowledge
- Agent name and behavior prompt
Based on the above information, LLMs are expected to generate responses that drive the agent’s conversations.
With transcription models (Whisper and Deepgram), we share user’s spoken audio to be able to convert it to text, so an LLM can understand and generate appropriate responses.
How the models use this data and what impact it might have on users?
LLMs use the data to generate appropriate responses in a conversation, and not for training the models. A base prompt is provided to guard rail the responses, therefore there is no impact on the users.
Do users have any options to control or opt out of data sharing with AI models?
No, because the app uses AI models to provide its core functionality.
How do we ensure responsible and ethical use of data by these models?
We review and make sure the terms and privacy policies of any third-party AI models we use share our data with, and we are confident the data is not used for any other purpose other than generating conversational responses.
Listed below are all the privacy policies of the third-party AI models we use:
- OpenAI (https://openai.com/policies/privacy-policy/)
- Anthropic (https://support.anthropic.com/en/collections/4078534-privacy-legal)
- Google (https://cloud.google.com/gemini/docs/discover/data-governance)
- Groq for Llama and Mistral (https://wow.groq.com/wp-content/uploads/2024/05/Groq-Privacy-Policy_Final_30MAY2024.pdf)
- Deepgram (https://deepgram.com/privacy)
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track activity on Our Service. Cookies can be “Persistent” or “Session” Cookies, used for purposes such as:
- Necessary Cookies: Essential for providing the Website and its features.
- Cookies Policy/Notice Acceptance Cookies: To identify if users have accepted cookies.
- Functionality Cookies: To remember choices You make.
- Tracking and Performance Cookies: Used to track information about traffic to the Website and how users use the Website.
- Use of Your Personal Data
The Company may use Personal Data for purposes including providing and maintaining the Service, managing Your account, contacting You, and managing Your requests.
We may also share Your personal information with Service Providers, affiliates, business partners, and in certain business transactions.
Retention of Your Personal Data
The Company will retain Your Personal Data only as long as necessary for purposes outlined in this Privacy Policy, or to comply with legal obligations.
Transfer of Your Personal Data
Your information may be transferred to, and maintained on, computers located outside of Your jurisdiction where data protection laws may differ.
Delete Your Personal Data
You have the right to delete or request deletion of Personal Data collected by Us. Please contact Us for assistance in deleting your data if necessary.
Disclosure of Your Personal Data
The Company may disclose Personal Data under certain circumstances such as business transactions, legal obligations, or protecting rights and property.
Security of Your Personal Data
While We strive to use commercially acceptable means to protect Your Personal Data, we cannot guarantee its absolute security.
Analytics
We may use third-party Service providers, such as Google Analytics and Firebase, to monitor and analyze use of our Service.
Payments
For payment processing, we use third-party services such as Stripe, which adhere to PCI-DSS standards.
GDPR Privacy
We process Personal Data under conditions such as consent, legal obligations, and legitimate interests. You have GDPR rights to access, correct, delete, and transfer your data.
CCPA/CPRA Privacy Notice
This privacy notice section for California residents supplements Our Privacy Policy and applies solely to all visitors, users, and others residing in California.
Categories of Personal Information Collected
Categories collected include identifiers, internet activity, commercial information, and sensitive personal information.
Use and Disclosure of Personal Information
We may use personal information for business and commercial purposes, including operating our Service, fulfilling requests, and responding to law enforcement requests.
Your Rights under the CCPA/CPRA
You have rights under CCPA/CPRA to know, delete, and correct your data, as well as opt out of data sales.
Exercising Your CCPA/CPRA Data Protection Rights
To exercise these rights, please contact Us at support@umbrellaus.com
Children’s Privacy
We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and aware that Your child has provided Us with Personal Data , please contact Us at support@umbrellaus.com.
Links to Other Websites
Our Service may contain links to other websites. We strongly advise You to review the Privacy Policy of each site you visit, as We have no control over these external sites.
Google Calendar Integration related privacy policy
Our application integrates with Google Calendar to provide enhanced features and functionalities. By connecting your Google Calendar to our application, you consent to the collection, use, and storage of your Google Calendar data as outlined below:
Data Collected
When you connect your Google Calendar account, we may collect and process the following types of data:
Calendar event details, such as event titles, descriptions, dates, times, participants, and locations.
Metadata related to your calendar (e.g., calendar IDs and time zone information).
How We Use Your Data
The data collected from Google Calendar is used solely to provide and improve the following features:
- Sending notifications or reminders related to your events.
- Other functionalities explicitly described within the application.
Data Sharing
We do not share your Google Calendar data with third parties unless required by law or to fulfill the functionality of the application (e.g., sending event invitations to participants).
All data sharing is conducted in compliance with Google's API Services User Data Policy.
Data Storage and Security
We store your Google Calendar data securely and only for the duration necessary to provide the service.
Access to your data is restricted to authorized personnel and safeguarded with industry-standard security measures.
Your Control and Rights
You can revoke our application's access to your Google Calendar at any time through your Google Account Permissions page.
If you choose to disconnect your Google Calendar account, we will no longer collect or process your calendar data, and previously collected data may be deleted upon request, as outlined in our data retention policy.
Compliance with Google’s Policies
Our integration complies with Google’s API Services User Data Policy, including the Limited Use requirements, ensuring that your data is only used to provide or improve features within the application.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time, notifying You of changes on this page and by email, where applicable.
Contact Us
If you have any questions about this Privacy Policy, You can contact us by email: support@umbrellaus.com