We at AffectLayer, Inc. d/b/a Chorus.ai (“AffectLayer”) respect your privacy rights. This Privacy Policy describes how we collect, use and handle personal information when you use our platform, website(s), app(s), data analytics software and other services (collectively, the “Services”). By using, participating in, or accessing our Services, you acknowledge that you accept and consent to the practices and policies described in this Privacy Policy.
Scope
This Privacy Policy contains provisions relating to the following data privacy principles, all of which are described hereunder in greater detail:
This Privacy Policy outlines AffectLayer’s general position and its practices about its commitment to implement the foregoing principles, including the types of Personal Data that we collect, the purpose and use of the Personal Data and the notice and choice that affected data subjects have regarding our use of their Personal Data, their ability to correct that information, and the internal contact mechanism to make inquiries and/or lodge a complaint about our adherence to the principles. This Privacy Policy does not address additional local privacy requirements that the Company may need to adhere to.
Legal Status
AffectLayer, Inc. will be the Controller of your Personal Data that is provided, collected and/or processed pursuant to this Privacy Policy for purposes of AffectLayer being able to respond to requests for information or service, conclude a business transaction, provisioning the service, or otherwise for AffectLayer’s legitimate business interests. In contrast, AffectLayer will be a Processor of data that is inputted into the service when an enterprise customer of AffectLayer uses the Service. If you have any questions about whether any of the foregoing applies to you, please contact us using the information set forth in the “Contact Us” section below.
What Information We Collect & Why
We collect and use the following information to provide, secure and improve our Services and as otherwise described in this Privacy Policy:
Account Information. We collect various forms information from visitors of our website and users of our Services like your name, title, company, email address, location, phone number, payment information, account and website activity, IP addresses, cookies identifiers, and other information you provide that will or may identify you (collectively, the “Personal Data”). Some of our Services let you access your accounts and related information with other service providers. We may use, process and transmit your Personal Data to render our Services, to contact you and allow others on your team to contact you through the Services, to tell you about new products and features, to respond to customer care and other inquiries, and to process and fulfill your transactions and other requests.
Collection from Minors. AffectLayer does not knowingly collect personal information from minors who are under the age of 16 through the Services. If a parent or guardian becomes aware that his or her child has provided us with personally identifiable information without his/her consent, then he or she should contact AffectLayer as described below. If we become aware that a child under the age of 16 has provided us with personally identifiable information, we will delete such information from our files. Further, the Children’s Online Privacy Protection Act (“COPPA”) requires parental consent for collection of data from children younger than the age of 13 years old. For tips on protecting children's privacy online, generally, please view the U.S. Federal Trade Commission (“FTC”) website at http://www.ftc.gov/privacy/privacyinitiatives/childrens.html.
Services Information. Our data analytics tools and capabilities enable our enterprise customers to collect, store, analyze and share the contents of audio, video, image and text-based communications such as phone calls, video calls, emails, chats, webinars and meetings, along with associated data and documentation. These recordings and analysis thereof may also contain personal information, such as names, titles, and contact information. We may reproduce, analyze, summarize and disclose these files, recordings and any results of our Services with such customers and their relevant personnel and other team members, and customers may share this information with their personnel and others. You may choose to give us access to additional user contacts to make it easy for you to do things like share and collaborate, send messages, and invite others to use the Services. If you do, we may store those contacts within our systems for you to use.
If you provide us with any personally identifiable information about another person, whether through a telephone conference recording or otherwise, you represent and warrant that (1) you have that person’s consent to do so; (2) such person has given explicit consent (a) for us to collect, process, use and store such information as set forth in this Privacy Policy and any commercial agreement you have entered into with us, and (b) for any other ways you may use that information; and (3) you are responsible for ensuring that your (and any of your personnel or representatives, if applicable) use, control, processing and treatment of such information and any of your legal policies relating thereto are in compliance with all applicable laws, rules and regulations.
Usage Information. We collect information related to how you use the Services, including actions you take in your account, such as accessing and sharing files and reports. This helps us provide you with additional features, and to personalize, monitor and improve the Services. We also collect information from and about the devices you use to access the Services, such as IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services.
Cookies and other technologies. We use technologies like cookies and pixels to provide, improve, protect and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. In addition, when visitors come to our site, third parties (such as AdRoll) may place cookies on your browser for targeted advertising purposes. If you would like to opt out of receiving targeted advertising, please email privacy@chorus.ai.
Choice. You can always opt not to disclose information to us, but keep in mind that some information may be needed to create an account or take advantage of some of our features. You may also be precluded from using certain features, tools and aspects of our Services if you elect not to provide us with certain information that we may request.
With Whom We Share Your Information
Other users. Our Services display information contained within your Personal Data like your name, team name, and email address to other users in places like your user profile and sharing notifications. When you register your account with an email address on a domain owned by your employer or organization, we may help your team members find you and your team by making some of your basic information—like your name, team name, and email address—visible to other users on the same domain. This helps us show your teams you can join, and helps other users share files and folders with you.
Other applications. You or your team administrators can also give or direct us to give third parties access to your information and account – for example, via third party CRM platforms. We may also share your personal information with third parties as requested or directed by you through the Services (e.g. sharing contact information with a third-party conference calling service provider). Please remember that such third party’s use of your information will be governed by their privacy policies and terms and we are not responsible for their acts or omissions. Similarly, this Privacy Policy does not reflect the privacy practices of how our customers may use information they collect using our Services (e.g. to analyze and improve their sales team members’ effectiveness in their sales discussions), and it is up to them to determine whether a non-disclosure agreement or other terms should be entered into with their prospects, customers, and other third parties with whom they may share information, however, we expect them to comply with all applicable laws. AffectLayer does not monitor, review or specifically comment on its customer’s privacy policies or their compliance with their respective privacy policies.
Team Admins and Team Members. If you are a member of a team, your administrator may have the ability to access and control your team account, and your Personal Data may be shared with your other team members and others. Please refer to your organization’s internal policies if you have questions about this. If you are not a team member but interact with a team member (e.g., by joining a shared folder or accessing reports shared by that user), members of that organization may be able to view the name, email address, IP address, and other information that was associated with your account at the time of that interaction.
Anonymized Data. We may anonymize or aggregate your Personal Data so that you are not individually identified (“Anonymized Data”), and we may use such Anonymized Data to improve our Services. We also may also provide Anonymized Data to our partners, who may use that information in anonymized form to understand how often and in what ways people use our Services so that they, too, can provide you with an optimal online experience. However, we will never disclose aggregate usage information to a partner in a manner that would identify you personally as an individual except as required to perform the Services or as otherwise set forth in this Privacy Policy.
Vendors; Affiliates. AffectLayer uses certain trusted third parties (for example, providers of datacenters, support tools and IT services) to help us provide, improve, protect, and promote our Services. From time to time we may need to share your data with these parties. We may also share your Personal Data with our affiliated entities and personnel both in the United States and globally. These third parties will access your information only to perform tasks on our behalf in compliance with this Privacy Policy. We may and our customers may share information as discussed above and throughout this Privacy Policy, but we won’t otherwise sell your Personal Data to advertisers or other third parties.
Processing of Your Personal Data
As we’ve noted above, AffectLayer will use your Personal Data only in accordance with our Privacy Policy. If you do not wish us to continue using your Personal Data in this manner, you can request that your account be deactivated by contacting us as specified in the “Contact Us” section.
We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity (i.e. processing that is necessary for the performance of a contract with you, such as your user agreement with us that allows us to provide you with the Products) and our “legitimate interests” or the legitimate interest of others (e.g. our users),
We process Personal Data when you use our Services for purposes such as:
At the present time, AffectLayer has no plans to sell any Personal Data that it collects, whether as controller or processor. If that should change, we will make sure to comply with the provisions of this Privacy Policy which pertain to modifying this policy.
Data Subject Rights
You have certain rights with respect to your Personal Data as set forth below. Please note that in some circumstances, AffectLayer may not be able to fully comply with your requests, or we may ask you to provide us with additional information in connection with your request, which may include providing us with more Personal Data if we need to verify your identity or the nature of your request. In such situations, however, we will still respond to let you know of our decision. To make any of the following requests, contact us using the contact details referred to in the “Contact Us” section of this policy. Your rights consist of the following:
As noted above, under certain circumstances we will not be able to fulfill your request, such as if it interferes with our regulatory obligations, affects legal matters, we cannot verify your identity, or it involves disproportionate cost or effort, but in any event we will respond to your request within a reasonable timeframe and provide you an explanation. In order to make such a request of us, please contact our Privacy Team at privacy@chorus.ai.
Legal Requests/Disclosures
We may access, preserve and disclose your information to third parties if we determine that such disclosure is reasonably necessary to (a) comply with the law, legal requests or court orders; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse or address security or technical issues relating to our Services or our users; or (d) protect and enforce our rights and the rights, property and safety of our users and others.
How We Store Your Information
Security. We have personnel and third parties dedicated to keeping your information secure and testing for vulnerabilities. We also continue to work on features to keep your information safe in addition to things like Single Sign-On user authentication, and encryption of data in transit and at rest. However, no means of transmission over the internet or electronic storage is 100% secure, and while we endeavor to use commercially reasonable means to protect personal information, we cannot guarantee its absolute security. If you access our Services via a third-party CRM platform or Cloud calendar (GSuite, Outlook 365), you should also protect your account with secure account credentials and prevent unauthorized access to your account and personal information].
Retention. Subject to the rights of users set forth above, we’ll retain information for as long as we need it to provide you the Services or to comply with applicable law. If you discontinue the service, this information can be deleted upon request. But please note: (1) there might be some latency in deleting this information from our servers and back-up storage; (2) we will not delete Anonymized Data and may continue to use it as describe in this Privacy Policy; and (3) we may retain information if necessary to comply with our legal obligations, resolve disputes, manage security risks, or enforce our agreements.
International Transfers; Standard Contractual Clauses
We are a global company, with offices and operations in numerous countries. We may store personal information about you in the European Economic Area (the “EEA”) and in in other countries and territories. To facilitate our global operations, we may transfer and access such personal information from around the world, including from other countries in which AffectLayer has operations. Please note that these data transfer practices may vary based on customer location and the applicable Service being used.
We have taken appropriate safeguards to ensure that your personal data will remain protected in accordance with this Privacy Policy. For instance, we have implemented the European Commission’s Standard Contractual Clauses for transfers of personal data, which requires the protection of personal data processed from the European Economic Area in accordance with European Union data protection laws (a copy of which can be obtained at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32010D0087). Our Standard Contractual Clauses can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners.
Accountability for Onward Transfers.
AffectLayer shall enter into contracts to ensure that any third party to whom Personal Data may be disclosed is aware of and adheres to the principles contained in this Privacy Policy and/or is otherwise compliant with applicable laws and regulations mandating an adequate level of privacy protection. In all circumstances, AffectLayer shall ensure by contract that any such third party (a) is aware of the principles contained in this Privacy Policy; (b) is subject to laws providing the same level of privacy protection as is required by these principles; and (c) has contractual safeguards in place to protect the Personal Data. We shall also, upon notice, take reasonable and appropriate steps to stop and remediate unauthorized processing by third parties.
AffectLayer is not required to identify the sources of personal data when such identification is not possible through reasonable efforts, or where the rights of persons other than the affected data subject would be violated. If there are compelling grounds to doubt the legitimacy of a data subject’s request for rectification, amendment or deletion of his or her Personal Data, we may require further justifications before performing the Data Subject’s request. We are not required to notify third parties to whom the Personal Data has been disclosed of any rectification, amendment or deletion when such notification involves a disproportionate effort or unreasonable burden.
Security
AffectLayer undertakes reasonable and appropriate administrative, technical and physical measures to protect the confidentiality, integrity and availability of Personal Data, whether in electronic or tangible, hard copy form. We shall also take reasonable steps to protect Personal Data from loss, misuse and unauthorized access, disclosure, alteration and destruction.
Links to Third Party Websites
Through our Services, you may connect to third party websites via hyperlinks, and the connections may or may not be obvious. We are not responsible for the collection, use, maintenance, sharing or disclosure of data and information by such third parties. We encourage you to be aware of the varied privacy policies of Web sites that you visit.
Social Media Widgets
Our Services include social media features, such as the Facebook Like button (and widgets, such as the Share this button or interactive mini-programs that run on our site). These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing it
Change of Entity Form
If we are involved in a reorganization, merger, acquisition or sale of our assets, bankruptcy or similar event, your information may be transferred as part of the evaluation of and consummation of that deal. We will notify you (for example, via a message to the email address associated with your account) of any such deal where we are not the surviving entity of such transaction, and outline your choices.
Right to Modify
We may revise this Privacy Policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will make reasonable efforts to notify you. This Privacy Policy may be updated from time to time for reasons such as operational practices or regulatory changes, so we recommend that you review our Privacy Policy when returning to our website. By using the Services after any changes, you acknowledge your agreement to such changes and that use of information collection is subject to the Privacy Policy in effect when such information is used. If you have opted not to receive legal notices or emails from us, or have not provided your email address to us, the legal notices we send to you will still govern your use of the Services.
For California Visitors
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to: privacy@chorus.ai AffectLayer, Inc., 465 California, Suite 600, San Francisco, CA 94104.
For Australia Visitors
In addition to complying all other applicable laws, AffectLayer has adopted the Australian Privacy Principles (the “APPs”) contained in the Privacy Act 1988 (Cth) (the “Privacy Act”). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Data. A copy of the APPs may be obtained from the website of The Office of the Australian Information Commissioner. It is worth noting that sensitive information is defined in the Privacy Act to include a variety of information, including “Biometric information that is to be used for the purpose of automated biometric identification or verification” — in other words, your voice recordings collected when you utilize the Services are Sensitive Information under the Privacy Act. Sensitive information will be used by us only: (1) for the primary purpose for which it was obtained, which is to monitor your usage and enable various search tools in connection with your usage of the Services; (2) for a secondary purpose that is directly related to the primary purpose; and (3) with your consent; or where required or authorized by law.
Access and Contact
Through your account settings, you may access, and in some cases, edit or delete certain information you provide to us. The information you may view, update or delete may change as the Services change.
If your Personal Data has been provided to us by one of our customers, please contact that customer to request any access to, correction of, or removal of your information.
Inquires or Concerns
Affect Layer uses a self-assessment approach or outside compliance review to assure compliance with this Policy and periodically verifies that this Privacy Policy is accurate, comprehensive for the information intended to be covered, is completely implemented and accessible and is in conformity with the principles set forth in this Policy.
You may always request access to the data you submit to Affectlayer and/or a summary of the data that we’ve collected about you. Please direct those requests to either the ‘contact us’ feature on our website or by sending an email to privacy@chorus.ai, and we will do our best to provide a prompt response to your question. In addition, Affectlayer’s Chief Technology Officer is responsible for overseeing compliance with this Privacy Policy. You can also reach this individual by sending an email to privacy@chorus.ai.
Affectlayer commits to the resolution of complaints about your privacy and our collection or use of your Information. We have also committed to resolve any complaints pursuant to the Privacy Principles by European Union citizens relating to this Privacy Policy, and those which cannot be resolved directly with Affectlayer, through the JAMS Dispute Resolution Framework as our Independent Recourse Mechanism (“IRM”). You may contact JAMS by visiting https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS are provided to you at no cost. Note for EU residents -- under certain conditions, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
If you have any questions or complaints regarding this Privacy Policy, please contact us as described above. We will investigate your question, respond to your inquiry, and attempt to resolve any concerns as quickly as practicable. If you do not receive acknowledgement of your complaint, or if your complaint is not satisfactorily addressed by Affectlayer, then please contact JAMS, as described above. In addition to the foregoing, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. Affectlayer is subject to the investigatory and enforcement powers of the FTC.
COOKIES
Do you use any other user tracking technologies? We use additional technologies to help track user activities and preferences. For example, we use web beacons (also known as clear gifs, pixel tags or web bugs). Web beacons are tiny graphics (about the size of period) with a unique identifier that are embedded invisibly on web pages or emails. They are used to track user activities and communicate with cookies. You cannot opt out of web beacons used in webpages, but you can limit their use by opting out of the cookies they interact with. You can opt out of web beacons used in emails by setting your email client to render emails in text mode only. Finally, we use local storage to facilitate certain functions, but we do not retain the data captured via local storage.