Privacy Policy

Last updated: October 2, 2024

Our approach to privacy

Casepal ai, inc. ("casepal", "we", "our", or "us") are committed to respecting your privacy. This privacy policy sets out how we collect and process your personal information in the course of operating our business.

We collect data about users of our websites, blogs, mobile sites, or applications; about individuals who attend events organized or hosted by us; and about our clients (where these are natural persons) or their employees, agents, and representatives (collectively referred to as "you" in this privacy policy).

We may collect data that identifies or is associated with you ("personal information") when you access our websites, blogs, mobile sites, applications, widgets, and other interactive features, when you register or attend an event organized or hosted by us, or when you otherwise contact us ("public services").

We may also collect personal information about you when we provide software licensing services/products ("licensing services") to you, your employer, or any other person who has authorized you to communicate with us regarding the provision of services.

Region-specific disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions, or states. Please refer to the following disclosures that may be applicable to you:
- If you are a resident of the state of California in the United States, please click here for additional California-specific privacy disclosures.
- If you are based in the European economic area (“EEAˮ), please click here for additional EEA-specific privacy disclosures.
- If you reside in Singapore, please click here for additional Singapore-specific privacy disclosures.

Data controller

Casepal AI, inc. Is the data controller of the personal information we hold about you The EU General Data Protection Regulation 2016/679 (“EU GDPRˮ) requires organizations that are subject to the EU GDPR and are not established in the EEA to designate a representative in the EEA to act on its behalf regarding EU GDPR compliance and to deal with any supervisory authorities or data subjects in this respect. Similarly, the UK GDPR (which is the UK law version of the EU general data protection regulation by virtue of section 3 of the European Union (withdrawal) Act 2018 and as amended by schedule 1 to the data protection, privacy, and electronic communications (amendments etc.) (EU exit) regulations 2019) also requires organizations which are subject to the UK GDPR and are not established in the UK, to designate a representative in the UK to act on its behalf regarding UK GDPR compliance, and to deal with any supervisory authorities or data subjects in this respect. Annex 1 specifies the appointed a representative in accordance with the EU/UK GDPR to act on its behalf if, and when, they undertake data processing activities which engage the applicable law.

Personal information we collect about you and how we use it

Information you provide to us

We collect personal information about you when you voluntarily submit information directly to us when you access, use, or receive the Public Services or the Licensing Services. This can include information you provide to us when you submit an enquiry through our website, register for and/or attend an event, correspond with us by phone, email, or otherwise, subscribe to our mailing lists,client alerts, newsletters, or other forms of marketing communications, provide information requested by us to comply with our professional obligations, or in connection with our provision of the licensing services.

If you choose not to provide personal information, we may not be able to provide some or all of the Public Services or Licensing Services to you or respond to your other requests. When you use the Public Services, the categories of information we collect may include:

- Contact Information
- Business Information
- Employment Information
- Location Information
- Information provided by third parties
- Your comments and opinions that you express when you comment on a blog post, contact us by email, mail, or phone.

We use this information to operate, maintain, and provide you with the features and functionality of the public services, to address your questions and concerns, to personalize your content so that it is relevant to the city or country you are using your device in, to contact you, including sending you news, alerts, and marketing communications, and to help us develop new products and services. When you use Licensing Services, the categories of information we collect may also include:

- Identification Information
- Instructions and Information about
- Payment and transaction information

We use this information to provide you with the Licensing Services in accordance with our agreements, to communicate with you, to comply with our professional or legal obligations, and to facilitate our internal business operations.

The table in Annex 2 further sets out the categories of personal information we collect about you when you use Public Services and how (for which purpose) we use that information. The table also lists the legal basis that we rely on to process personal information.

The table in Annex 3 further sets out the categories of personal information we collect about you when you use the Licensing Services and how (for which purpose) we use that information. The table also lists the legal basis that we rely on to process personal information.

We may also process your personal information when you apply for a position with us or otherwise provide information in relation to a role or work placement at Casepal AI, Inc.

Information we collect about you automatically

We may also automatically collect personal information concerning your access and use of our websites, blogs, mobile sites, applications, widgets, and other interactive features (the "Online Services") and information about the device you use to access the Online Services. For example, we may collect:

- Information about how you view the Online Services (e.g., the pages you view, the links you click);
- Information about your browser and usage patterns (e.g., your IP address, browser type, and language) and
- Information about the device you use to access the online services (e.g., device identifier, device type, model and manufacturer)

We use this information to present our online service to you on your device, determine news, alerts, and other products and services that may be of interest to you for marketing purposes, and monitor and improve our online services and business.

The table in Annex 4 further sets out the categories of personal information we collect about you automatically and how and for which purpose we use that information. The table also lists the legal basis that we rely on to process personal information.

Recipients of personal information

As required in accordance with how we use it, we will share your personal information with the following:

- Service providers and advisors. Third-party vendors and other service providers that perform services for us on our behalf, which may include providing mailing or email services, tax and accounting services, payment processing, data enhancement services, fraud prevention, web hosting, or analytic services.
- The public. When you use our public services, content, and information that you post on message boards, blogs, or other services on our website, or that you allow us to make public may be available to other visitors to our websites and to the general public. When you use our legal services, to the extent you have given us consent to do so, we may also share your name and the company you work for together with comments and feedback on our legal services.
- Social media networks. When you use our public services, content that you share through social media may be shared with your social media account provider and your friends, followers, or contacts on the connected social network.
- Law enforcement, regulators and other parties, for purposes required by law or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) comply with legal process; (c) respond to requests from public or government authorities, including public or government authorities outside your country of residence; (d) enforce the terms of our agreement (being, as applicable, our terms of use agreement for public services or the terms of our client engagement letter for legal services) and pursue available remedies or limit the damages that we might sustain; (e) protect the security or integrity of the public services or legal services (as applicable); and/or (f) exercise or protect our rights, privacy, safety or that of our affiliates, clients, you or others.

Marketing and advertising

From time to time, we may send you updates, alerts, news, and mailings relating to seminars or events that we think may be of interest to you.

Most messages we send will be by email. For some messages, we may use the personal information we collect about you to help us determine the most relevant marketing information to share with you.

If you are in the EEA, we will only send you marketing messages if you have given us your consent to do so. If you do not want to receive messages from us, you will be able to inform us of your wishes when we first collect your contact details or by refusing or withdrawing your consent. You can also change your preferences at a later date by clicking on the unsubscribe link at the bottom of our messages.

Please note that if you opt out of or do not grant consent to receive marketing-related messages from us, we may still send you non-marketing messages, such as communications relating to the provision of licensing services.

Your personal information may also be shared with any affiliates of Casepal AI, Inc., who may also use this information for the same purposes outlined in this privacy notice.

Storing and transferring your personal information

Retention periods. We will store your personal information for no longer than necessary for the purposes set out in annexes 2, 3, and 4 and in accordance with our legal obligations and legitimate business interests.

Security. We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, change, or damage.

International transfers of your personal information. As a corporation with international reach, our affiliates and service providers are located around the world. The personal information we collect may, therefore, be transferred to and stored in countries outside of the jurisdiction you are in. Any international transfers of your personal information are made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European commission or in accordance with the requirements prescribed under the Singapore personal data protection act (“PDPAˮ), as the case may be. If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of this Privacy Policy.

EEA-specific disclosures

If you are a resident of the EEA, or if you are receiving Public Services or Licensing Services from, or otherwise engaging with Casepal AI Inc. as an affiliate in the EEA, under EU law, you have the following rights with respect to your personal information that we hold:

- Right of access. You have the right to access and obtain a copy of your personal information.
- Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use or to request the transfer of your personal data to another person.
- Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
- Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
- Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
- Right to object. You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason. If you are a resident of France, you also have the right to set guidelines for the retention and communication of your personal information after your death.

If you wish to exercise one of these rights, please contact us at privacy@casepal.co.

You also have the right to lodge a complaint to your local data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. Residents in other jurisdictions may also have similar rights to the above.

Please contact us at privacy@casepal.co If you would like to exercise one of these rights, we will comply with any request to the extent required under applicable law.

Singapore-specific disclosures

If you are a resident of Singapore, or if you are receiving Public Services or Licensing Services from, or otherwise engaging with a casepal affiliate in Singapore, under Singapore law, you have the following rights in respect of your personal information that we hold:

- Right of access. You have the right to obtain:
- Your personal information that is in our possession or under our control; and
- Information about the ways in which that personal information has been or may have been used or disclosed by us within a year before the date of your request.

- Right of correction. You have the right to correct an error or omission in the personal information we hold about you.
- Right to withdraw consent. You have a right to withdraw consent in respect of the collection, use or disclosure of your personal information for any purpose by us. Upon withdrawal of such consent, we may not be able to provide some or all of the public services or legal services to you or respond to your other requests.
- Right to portability. You have the right, in certain circumstances, to request the transfer of your personal information in our possession or under ourcontrol to another organization in a structured, commonly used, machine-readable format.

If you wish to exercise one of these rights, please contact us at privacy@casepal.co.

Interest-based advertising

We permit third-party online advertising networks, social media companies, and other third-party services to collect information about your use of our online services over time so that they may play or display personalized or interest-based ads on our online services, on other websites, apps, or services you may use, and on other devices, you may use. Typically, though not always, the information used for interest-based advertising is collected through cookies or similar data collection technologies. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research. Depending on your location as detected from your IP address, we may offer you a “cookie bannerˮ through which you can exercise certain control over the use of cookies on the online services. As an alternative, or if the cookie banner is not displaying, you may exercise control by following the opt-out instructions below.

We also may use certain forms of display advertising and other advanced features through Google Universal Analytics, such as remarketing with Google Analytics, Google Display Network impression reporting, the DoubleClick campaign manager integration, and Google Analytics demographics and interest reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the online services. You may opt out of certain Google advertising products by visiting the Google Ads preferences manager, currently available at https://google.com/ads/preferences. You can learn more about Googleʼs practices with Google Analytics by visiting Googleʼs privacy policy at http://www.google.com/policies/privacy/partners.

You can also view Googleʼs currently available opt-out options at https://tools.google.com/dlpage/gaoptout.We support the self-regulatory principles for online behavioral advertising (principles) published by the Digital Advertising Alliance (DAA). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest-based advertising purposes. More information about these principles can be found at https://youradchoices.com/. If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow the instructions:

- In the united states, please visit: https://youradchoices.com/, or https://optout.networkadvertising.org/
- In the EEA, please visit: http://www.youronlinechoices.com/
- In Canada, please visit: https://youradchoices.ca/

When you elect to opt-out through these sites, they will place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements. Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all your browsers and devices, you will need to opt-out on each browser on each device you actively use. If you delete cookies on your device generally, you will need to opt out again. And some of these opt-outs may not be effective unless your browser is set to accept cookies.

If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again. If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at https://youradchoices.com/appchoices.

Please note that when you opt-out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services. It means that the online ads that you see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-party opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention, as well as any other purpose permitted under the DAAʼs principles.

Links to third-party sites

The public services may, from time to time, contain links to and from third-party websites, including those of other users and news publications. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

Our policy towards children

Our public services and legal services are not directed at persons under 18, and we do not knowingly collect personal information from children under 18. If you become aware that your child has provided us with personal information without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

Changes to this policy

We may update this privacy policy from time to time, so you should review this page periodically. When we change this privacy notice in a material way, we will update the "last updated" date at the top of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

Notice to you

If we need to provide you with information about something, whether for legal, marketing, or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on the online services. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this privacy notice.

Contacting us

Questions, comments, and requests regarding this privacy notice are welcome and should be addressed to privacy@casepal.co.

Annex I- Data Controller

Annex II - Personal Information we collect when you use the Licensing Services

Category of personal information How we use it (purpose of use) Legal basis for the processing
Contact information. Personal information such as your name, phone number, address, email address. We use this information to deal with enquiries and complaints made by or about you relating to the Public Services. The processing is necessary for our legitimate interests, namely administering the Public Services and dealing with enquiries and complaints relating to the Public Services.
We use this information to operate, maintain, and provide to you the Public Services. The processing is necessary for our legitimate interests, namely administering the Public Services and dealing with enquiries and complaints relating to the Public Services.
We use this information to communicate with you, including sending service-related communications. The processing is necessary for our legitimate interests, namely administering the Public Services and communicating with you in connection with the Public Services.
We use this information to send you statements and invoices in relation to any agreement between us to provide you with any part of the Public Services. The processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Employment information. Such as information about your employing entity, business unit, manager, and management reporting structure, job title, function, and the nature of your duties and responsibilities. We use this information to tailor content provided to you through our Public Services, including notifications, news, alerts, and marketing communications. The processing is necessary for our legitimate interests, namely to tailor our service to the user.
We use this information to monitor and improve the Public Services. The processing is necessary for our legitimate interests, namely to improve our Public Services.
Comments and opinions. When you contact us directly (e.g., by email, phone, mail) or when you post on message boards, blogs, or complete an online form, we record your comments and opinions. We use this information to address your questions, issues, and concerns. The processing is necessary for our legitimate interests, namely administering the Public Service and dealing with enquiries and complaints relating to the Public Services.
We use this information to improve our Public Services. The processing is necessary for our legitimate interests, namely to inform the development of new features of the Public Services and improve them generally.
We use this information to determine products and services that may be of interest to you. The processing is necessary for our legitimate interests, namely to inform our direct marketing.
Location information. Other than information you choose to provide, we do not collect information about your precise location. Your device’s IP address may help us determine an approximate location. We may use an approximate location to ensure content made available to you through our Public Services is relevant to the city or country you're using your device in. The processing is necessary for our legitimate interest, namely to tailor our service to the user and improve our service generally.
Information provided by social networks you connect to the Public Service. If you connect a social network (e.g., LinkedIn or Facebook) to our Public Services, we will collect personal information from that network based on your privacy settings. We will use the personal information provided to assist you in sharing content from our Public Services with your friends, followers, or contacts on the connected social network. The processing is necessary for our legitimate interest, namely to tailor our service to the user and improve our service generally.
Preferences. Preferences set for notifications, marketing communications, and how our website is displayed. We use this information to provide notifications, send news, alerts, and marketing communications, and provide our Public Services in accordance with your choices. The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications.
We use this information to ensure that we comply with our legal obligation to send only those marketing communications to which you have consented. The processing is necessary for compliance with a legal obligation to which we are subject.
Information provided by third parties. From time to time, we may receive information about you from third parties and other users. We may combine this information with the information we collect from you directly. We use this information to contact you, send advertising or promotional materials, or personalize the Public Services. The processing is necessary for our legitimate interests, namely to tailor our service to the user and improve our service generally.
All personal information set out above. We use all the personal information we collect to operate, maintain, and provide to you the features and functionality of the Public Services. The processing is necessary for our legitimate interest, namely to administer and improve the Public Services.

Annex III - Personal Information we collect when you use the Licensing Services

Category of personal information How we use it (purpose of use) Legal basis for the processing
Contact information. Personal information such as your name, phone number, address, email address. We use this information to provide you or the client with Licensing Services in accordance with our agreement with you or with the client. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Licensing Services.
We use this information to communicate with you in connection with the provision of Licensing Services, including sending statements and invoices and dealing with enquiries and complaints. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Licensing Services.
Identification information. Proof of identity such as a copy of official government identification. We use this information to verify the identification of individuals receiving the Licensing Services. The processing is necessary for compliance with a legal obligation.
We use this information to facilitate our internal business operations, including compliance with professional obligations. The processing is necessary for our legitimate interests, namely preventing fraud and ensuring compliance with professional obligations.
Employment information. Information about your employing entity, business unit, job title, and responsibilities. We use this information to tailor and provide you or the client with Licensing Services. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Licensing Services.
Instructions, comments, and opinions. When you contact us directly, we will record your comments and opinions. We use this information to provide Licensing Services in accordance with our client's instructions and respond to your questions and concerns. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Licensing Services.
Payment and transaction information. Payment information such as your credit card or bank account details. We use this information to facilitate transactions made in connection with the Licensing Services. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests, namely administering the Licensing Services and preventing fraud.
Location information. Information that you provide such as your address or country of residence. We may use this personal information to facilitate internal business operations. The processing is necessary for our legitimate interest, namely to comply with professional obligations.
Information provided by third parties. Information we may receive about you from clients or third parties. We may use this information to contact you or provide Licensing Services in accordance with client instructions. Where you are the client, the processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.
Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Licensing Services.
All personal information set out above. We use this information to comply with legal or professional obligations, such as court orders or requests by regulators. The processing is necessary for compliance with a legal obligation.
We use this information to facilitate internal business operations and ensure compliance with legal obligations. The processing is necessary for our legitimate interests, namely preventing fraud and fulfilling professional obligations.

Annex IV – Personal Information Collected Automatically

Category of personal information How we use it (purpose of use) Legal basis for the processing
Information about how you access and use the Online Services. For example, the website you came from and the website you go to when you leave, how frequently you access the Online Services, and the actions you take. We use this information to present our Online Service to you on your device. The processing is necessary for our legitimate interests, namely to tailor our Online Services to the user.
We use this information to determine news, alerts, and other products and services that may be of interest to you for marketing purposes. The processing is necessary for our legitimate interests, namely to inform our direct marketing.
We use this information to monitor and improve our Online Services, business, and to help us develop new products and services. The processing is necessary for our legitimate interests, namely to improve our Online Services, monitor and resolve issues, and for the detection and prevention of fraud.
Information about your device. We also collect information about the device you use to connect to our Online Services, including type of device, operating systems, browsers, and unique device identifiers. We use this information to present our Online Service to you on your device. The processing is necessary for our legitimate interests, namely to tailor our Online Services to the user.
We use this information to determine news, alerts, and other products and services that may be of interest to you for marketing purposes. The processing is necessary for our legitimate interests, namely to inform our direct marketing.
We use this information to monitor and improve our Online Services, business, and to help us develop new products and services. The processing is necessary for our legitimate interests, namely to improve our Online Services, monitor and resolve issues, and for the detection and prevention of fraud.