AI Apps Privacy Policy
At MacPaw, we care about the privacy of your data and are committed to protecting it. This Privacy Policy explains what information we collect about you while you use our software products set forth in this AI Apps Terms of Service, why, what we do with that information, and how we handle that information. We’ll also explain what choices you have with respect to the information.
DEFINITIONS
Capitalized terms used in this Privacy Policy and not otherwise defined shall have the meanings provided below:
Data Processor - a natural or legal person, public authority, agency or other body which processes personal data on behalf of MacPaw.
Personal Data - any information relating to an identified or identifiable natural person.
Processing/Processed - any operation on Personal Data, whether automated or not.
APPLICABILITY OF THIS PRIVACY POLICY
This Privacy Policy applies to MacPaw Way Ltd’s or our affiliates’ (hereinafter “we”, “us”, “our” or “MacPaw”) desktop and mobile applications specifically mentioned in this AI Apps Terms of Service (collectively, the “Products”).
The main body of this Privacy Policy sets out the general terms applicable to the processing of personal data across our Products, including general information about how we collect, use, disclose, retain, and protect personal data.
Where we offer a specific Product, we will provide supplemental privacy policies and incorporate the links thereto in this Privacy Policy. Such supplemental privacy policies form part of this Privacy Policy and provide additional details relevant to the particular Product, including, where applicable, the categories of personal data processed, purposes of processing, lawful bases relied upon, categories of recipients, retention periods, and any other product-specific privacy information.
In the event of any inconsistency between this Privacy Policy and a supplemental privacy policy, the supplemental privacy policy shall prevail with respect to the relevant Product indicated in the supplemental privacy policy.
INFORMATION WE COLLECT AND RECEIVE
We collect and receive information about you in various ways, depending on how you interact with our Products. The types of information we collect may vary depending on the specific Product you use and may include information you provide directly to us, information collected automatically through your use of the Product, and information obtained from third parties.
USE OF INFORMATION AND LEGAL BASIS
We use personal data to provide, operate, maintain, improve, secure, and support our Products. Depending on the relevant Product and the nature of the interaction, we may use personal data to:
provide and manage the Products;
create and administer accounts (when created by you);
process transactions and provide customer support;
communicate with users;
improve functionality, performance, and user experience;
maintain security and prevent fraud or misuse;
comply with legal and regulatory obligations;
establish, exercise, or defend legal claims; and
send marketing or promotional communications where permitted by law.
Depending on the specific Product and the processing activity, we may process personal data based on one or more applicable legal bases, including performance of a contract, compliance with legal obligations, legitimate interests, consent, and other legal bases permitted under applicable law.
COLLECTION OF INFORMATION FROM CHILDREN
MacPaw does not knowingly collect Personal Data from children under the age of 13. If we determine we have collected Personal Data from a child younger than 13 years of age, we will take reasonable measures to remove that information from our systems. If you are under the age of 13, please do not submit any Personal Data through the Products. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Policy by instructing their children never to provide Personal Data through the Products without their permission.
HOW WE SHARE AND DISCLOSE INFORMATION
We only disclose Personal Data to third parties when:
We use service providers who assist us in meeting business operations needs, including hosting, delivering, and improving our Products. We may also use service providers for specific services and functions, including email communication, customer support services, and analytics. These service providers may only access, process, or store Personal Data pursuant to our instructions, according to the applicable data protection legislation and to perform their duties to us.
We have your explicit consent to share your Personal Data (if required).
We believe it is necessary to investigate potential violations of the terms, to enforce those terms, or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats against persons, property, or the systems on which we operate our Products.
We determine that the access, preservation, or disclosure of your Personal Data is required by law to protect the rights, property, or personal safety of MacPaw and users of our Products, or to respond to lawful requests by public authorities, including national security or law enforcement requests.
We need to do so in connection with a merger, acquisition, bankruptcy, reorganization, sale of some or all of our assets or stock, public offering of securities, or steps in consideration of such activities (e.g., due diligence). In these cases some or all of your Personal Data may be shared with or transferred to another entity, subject to this Privacy Policy.
We may disclose Non-Personal Data publicly and to third parties – for example, in public reports about word usage, to partners under agreement with us, or as part of progress reports we may provide to users.
MacPaw does not share your Personal Data/personally identifiable information with third parties for the purpose of enabling them to deliver their advertisements to you.
MacPaw does not sell or rent your Personal Data.
DATA STORAGE AND TRANSFER
Information submitted to MacPaw may be transferred to, processed, and stored in the Republic of Cyprus, United Kingdom of Great Britain and Northern Ireland, the United States of America and Ukraine. Data stored and processed by MacPaw may sometimes be moved between these zones (in a secure manner).
Where applicable, we may transfer personal data to countries outside the country in which it was collected, including to countries that may not provide the same level of data protection as your jurisdiction. In such cases, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include, where relevant, an adequacy decision issued by the European Commission, or appropriate safeguards such as standard contractual clauses, approved transfer mechanisms, or other legally recognized safeguards. Where required by law, information about these safeguards and how to obtain a copy of them will be made available upon request.
DATA RETENTION
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including to provide and operate the Products, comply with legal, regulatory, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, and establish, exercise, or defend legal claims.
Retention periods may vary depending on the type of personal data, the relevant Product, the nature of the relationship with the individual, and applicable legal requirements. When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it in accordance with applicable law and our retention policies.
SAFEGUARDS
When you give us Personal Data, we take steps to make sure that it’s treated securely.
Once we receive your data, we protect it on our servers using a combination of technical, physical, and logical security safeguards. The security of the data stored locally in any of our Products installed on your computing device requires that you make use of the security features of your device. We recommend that you take the appropriate steps to secure all computing devices that you use in connection with Products.
MacPaw takes the security of your data very seriously and works to protect your data from loss, misuse and unauthorised access or disclosure.
All staff and officers who handle Personal Data are aware of this Privacy Policy and have been given training in how to correctly collect, process, store and delete data. MacPaw holds a log of when staff training was undertaken and updates it on an annual basis.
YOUR RIGHTS
You have the following rights in respect to your Personal Data, including the right to access, correct, or delete Personal Data we process through your use of the Product.
You can:
- Have your Personal Data corrected or deleted. You may ask us to correct information you think is inaccurate or completely delete all information that we hold about you by emailing: [email protected]
- Access your Personal Data report by submitting a request at [email protected] . This report will include Personal Data we have about you, provided to you in a structured, commonly used, and portable format.
- Object to us processing your Personal Data. It is your right to lodge an objection to the processing of your personal data by emailing: [email protected] if you feel the “ground relating to your particular situation” applies. The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interest, rights and freedoms, or the processing is for the establishment, exercise or defence of a legal claims.
- Ask us to stop using your Personal Data, including when we use your Personal Data to send you marketing emails. We only send marketing communications to you with your prior consent, and you may withdraw your consent at any time by clicking the “unsubscribe” link found within MacPaw emails and changing your contact preferences. Please note you will continue to receive transactional messages related to our Product, even if you unsubscribe from marketing emails.
- Complain to a regulator. If you’re based in the European Economic Area (EEA) and think that we haven’t complied with data protection laws, you have a right to lodge a complaint with your local supervisory authority.
- Request to know more details about the categories or specific pieces of Personal Data we collect (including how we use and disclose this information), to delete their Personal Data, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
DATA PROTECTION OFFICER
To communicate with our Data Protection Officer, please email [email protected].
CHANGES TO OUR PRIVACY POLICY
We may need to update this Privacy Policy to keep pace with changes in our Products, our business, and laws applicable to us and you. We will, however, always maintain our commitment to respect your privacy. We will notify you of any material changes that impact your rights under this Privacy Policy by email (to your most recently provided email address) or post any other revisions to this Privacy Policy, along with their effective date, in an easy-to-find area of the sites, so we recommend that you periodically check back here to stay informed of any changes. Please note that your continued use of MacPaw’s the Products after any change means that you agree with, and consent to be bound by, the new Privacy Policy. If you disagree with any changes in this Privacy Policy and do not wish your information to be subject to it, you will need to stop using the Products.
CONTACT US
You may contact us with any questions relating to this Privacy Policy by e-mailing: [email protected].
Supplemental Privacy Policy Applicable to Vexel
Effective Date: June 02, 2026
This supplemental privacy policy applies to the processing of personal information by Vexel and should be read in conjunction with the main body of the AI Apps Privacy Policy.
Vexel is a native macOS text-to-speech desktop application. Users can type or paste text, select a voice and language model, and the app generates synthesized speech audio.
INFORMATION WE COLLECT AND RECEIVE
Please note that Vexel requires no user account, no login, and no email address. The categories of Personal Data processed by MacPaw includes:
Input text. When you initiate speech synthesis, the text you have typed or pasted is used to generate the audio output. This text is required to deliver the core feature of the product. Depending on what you type, input text may incidentally contain personal data; however, we do not require or encourage you to enter personal data, and the text is transmitted with an anonymous session identifier only - no account, name, or device identity is attached.
Anonymous session identifier. A randomly generated UUID is created per session and transmitted alongside each generation request. This identifier is not linked to any individual, account, or device identifier. It is used solely to associate requests within a single session for the purposes of delivering the service.
Voice and sampling parameters. Your selected voice identifier and any customised synthesis parameters (temperature, top-k, top-p, penalties, seed) are transmitted as part of each generation request. These are purely technical configuration values.
Additionally, the following data is stored exclusively on your device and is never transmitted to MacPaw’s servers:
Generation history. The record includes the input text, voice selection, synthesis parameters, a reference to the generated audio file, duration, and timestamp.
Generated audio files. Synthesised audio is saved locally as WAV files. No audio is retained server-side.
Project and session metadata. Project names, session titles, creation dates, and icon symbols are stored locally. If you name a project or session after a person, that name may constitute personal data; it is never transmitted.
Voice preference per model. Your selected default voice is saved on your device.
Product Usage Data. Aggregated information collected about how you interact with Product. This data helps developers, product managers, and businesses understand usage patterns, optimize features, identify issues, and improve the overall user experience. It also helps to understand your behavior, improve UX and performance of the Product(s).
Technical & Diagnostic Data. Information automatically collected about your device and the Product's operation (e.g. app version, OS version, device model and architecture, available memory and disk space, locale/timezone, and an anonymous device identifier), as well as crash diagnostics (e.g. stack traces, exception details, and recent in-app events leading up to a crash).
USE OF INFORMATION AND LEGAL BASIS
Purpose of Processing | Category of Data | Legal Basis |
To synthesise speech audio and provide the the core function of the Product | Input text | Art. 6(1)(b) — Performance of a contract |
To associate TTS (text-to-speech) requests within a session for service delivery | Anonymous session UUID | Art. 6(1)(b) — Performance of a contract |
To configure and deliver synthesis as specified by the user | Voice ID and sampling parameters | Art. 6(1)(b) — Performance of a contract |
To provide generation history, replay, and project management features within the app | Generation history | Art. 6(1)(b) — Performance of a contract |
To allow playback and export of synthesised audio; stored exclusively on the user's device | Generated audio files | Art. 6(1)(b) — Performance of a contract |
To enable project and session organisation within the app | Project and session metadata | Art. 6(1)(b) — Performance of a contract |
To remember the user's preferred voice per model across sessions | Voice preference per TTS model | Art. 6(1)(b) — Performance of a contract |
To enable per-character voice assignment in screenplay-formatted text. | Input text | Art. 6(1)(b) — Performance of a contract |
To analyze aggregated usage data to improve the Product's features, performance, and UX, fix bugs, and prevent fraud | Product Usage Data | Art. 6(1)(f) — Legitimate interests |
To monitor stability and performance, diagnose and fix crashes, errors, and bugs, and make technical improvements to the Product | Technical & Diagnostic Data | Art. 6(1)(f) — Legitimate interests |
HOW WE SHARE AND DISCLOSE INFORMATION
Cloud Processing: requests are transmitted to the applicable AI model provider solely for the purpose of fulfilling Your request. MacPaw can see the AI model used for each request, but does not view or store the content of Your messages or inputs. Data is processed by the applicable AI model provider and is not stored by MacPaw beyond what is necessary for service operation.
On-device AI processing: Certain functionality may be performed directly on your device. For example, Apple’s macOS built-in `NaturalLanguage` framework is used to detect the language of the user's input and auto-select the matching TTS model. In such cases, no data is transmitted to external servers for this specific processing.
The following service providers process data specifically in connection with Vexel. All providers act as Data Processors and are bound by contractual obligations consistent with the applicable data protection laws:
Provider | Role and purpose | Data | Transfer Mechanism |
|---|---|---|---|
Respeecher, Inc.* (USA) | Text-to-speech (TTS) generation engine - cloud processing of TTS synthesis requests | Input text, voice and sampling parameters, anonymous session UUID | Standard Contractual Clauses as approved by the European Commission |
Functional Software, Inc. (dba Sentry) (USA) | Error monitoring and crash analytics | Technical & Diagnostic Data | EU-US Data Privacy Framework |
AI cloud providers available via Setapp AI+ | Voice catalog retrieval, TTS generation,cast voice suggestions; routing TTS generation to be processed by Respeecher | Input text, voice and sampling parameters, anonymous session UUID | Transfer mechanism depends on the AI cloud provider and may include the Standard Contractual Clauses approved by the European Commission or, where applicable, the EU-U.S. Data Privacy Framework. |
DATA RETENTION
We retain your personal data only as long as necessary for the purposes described in this supplemental notice (or as required by law). In general:
- Input text: up to 30 days.
- Anonymous session UUID: up to 30 days.
- Voice and sampling parameters: up to 30 days.
- Generation history: retained locally on your device until you delete it.
- Generated audio files: retained locally on your device and deleted automatically when the associated generation record is deleted.
- Project and session metadata: retained locally on your device until you delete the project or session.
- Voice preference per model: until you uninstall the application.
Supplemental Privacy Policy Applicable to AgenToDo
Effective Date: July 24, 2026
This supplemental privacy policy applies to the processing of personal information by AgenToDo and should be read in conjunction with the main body of the Privacy Policy.
AgenToDo is a native task-management application for macOS and iOS/iPadOS built by MacPaw, featuring an AI-assisted command bar.
INFORMATION WE COLLECT AND RECEIVE
Please note that AgenToDo requires no MacPaw user account and no login, and MacPaw does not operate a backend that stores your task database.
Randomly generated identifiers. We process a random installation identifier generated on your device and a per-launch session identifier.
Account identifier used solely to recognise the same user across your own devices.
The Randomly generated identifiers and the Account identifier contain no name, email, or Apple ID.
User request and content data. When you use the AI command bar or other AI features, your natural-language request, relevant task content, and recent conversation context are transmitted to the AI provider you have selected in order to generate a response and propose changes for your confirmation. When sending a command, the application may also transmit data from the apps on your device for the purposes of executing your request. To process your User request and content data, it will be transmitted to an external AI provider. Please note that MacPaw does not store or have access to your tasks.
Calendar and contacts data. If you grant the application access to your calendar and/or contacts, this data is used to provide and improve features that depend on it, such as scheduling, planning, and referencing people in your tasks.
Location data. If you grant the application access to your approximate location, this data is used to provide and improve features that depend on it, such as reminding you about a task when you arrive somewhere, filtering the task list by proximity or inferring recurring place/task associations.
Text and speech data. If you use voice commands or text-to-voice features, such data may be processed by Respeecher.
Read.ai data. If you choose to connect your Read.ai account (macOS), the application retrieves your meeting transcripts and summaries, together with your Read.ai account email, from your own Read.ai account in order to bring them into your tasks.
Product usage data. These events describe which features were used and their outcomes and are engineered so that no task titles, notes, AI prompts or responses, file names, or other user content can be attached. Product usage data is collected unless you opt out. You may disable product analytics at any time in the application settings.
Crash and error diagnostics. If crash reporting is enabled, crash stack traces, exception types, thread state, operating system version, hardware model class, and application version are transmitted to our crash reporting provider, together with a stable error category and technical context for handling errors. The integration is configured not to send personally identifiable information and user content is excluded.
Technical data. Platform (macOS/iOS), distribution channel, app version, and a coarse OS version bucket.
USE OF INFORMATION AND LEGAL BASIS
Purpose of Processing | Category of Data | Legal Basis |
|---|---|---|
To provide the core task-management functionality of the application | User request and content data, Randomly generated identifiers, Technical data, Calendar and contacts data | Art. 6(1)(b) — Performance of a contract |
To keep your data in sync across your devices via your own iCloud, and to enable project sharing | User request and content data, Account identifier | Art. 6(1)(b) — Performance of a contract |
To interpret your natural-language commands, answer your requests, and propose task changes for your confirmation (AI features, at your request) | User request and content data, Calendar and contacts data | Art. 6(1)(b) — Performance of a contract |
To enable you to use voice commands or text-to-voice features | Text and speech data | Art. 6(1)(b) — Performance of a contract |
To import your meeting transcripts and summaries when you connect your Read.ai account | Read.ai data | Art. 6(1)(b) — Performance of a contract |
To analyze usage data to improve the application's features, performance, and UX | Product usage data, Randomly generated identifiers | Art. 6(1)(a) — Consent |
To provide location-based features | Location data | Art. 6(1)(a) — Consent |
To detect, diagnose, and fix crashes and errors in order to maintain the stability and security of the application | Crash and error diagnostics, Technical data, random installation identifier | Art. 6(1)(f) — Legitimate Interests |
HOW WE SHARE AND DISCLOSE INFORMATION
iCloud / Apple: syncs your task data across your devices and enables project sharing, all through your own iCloud account.
The following service providers process data specifically in connection with AgenToDo. All providers act as Data Processors and are bound by contractual obligations consistent with the applicable data protection laws:
Provider | Role and purpose | Data | Transfer Mechanism |
|---|---|---|---|
Google LLC (USA) | Cloud storage provider - stores product analytics and usage information. | Product usage data, randomly generated identifiers | The EU-U.S. Data Privacy Framework. |
AI cloud providers available via Setapp AI+ and displayed in the app AI settings | AI cloud providers - processes your requests (including relevant task content and conversation context) and generates the responses. | User request and content data | Transfer mechanism depends on the AI cloud provider and may include the Standard Contractual Clauses approved by the European Commission or, where applicable, the EU-U.S. Data Privacy Framework. |
Functional Software, Inc. d/b/a Sentry (USA) | Crash reporting provider - receives crash reports and handled-error diagnostics used to identify and fix defects. | Crash and error diagnostics, Technical data, random installation identifier | The EU-U.S. Data Privacy Framework. |
Respeecher, Inc. (USA) | Voice processing provider - processes your text input into synthesised voice output (TTS) and receives the voice commands | Text and speech data | Standard Contractual Clauses as approved by the European Commission |
DATA RETENTION
We retain Personal Data for as long as necessary to achieve the purposes described in this supplemental privacy policy, unless a longer retention period is required or permitted by applicable law. The specific retention period depends on factors such as the nature of the personal data, the purposes for which it is processed, contractual requirements, applicable legal and regulatory obligations, and the need to establish, exercise, or defend legal claims.
We store your Personal Data:
- For the fulfillment of our contractual obligations and providing services under the AI Apps Terms of Use, we keep your data for the duration of the contractual relationship with you. To find out more, please refer to the AI Apps Terms of Use.
- When we process your data for the purposes of exercising your rights as the data subject and respond to your access requests, we will retain your data for 5 years.
- When we process your data for the purpose of establishing, exercising, or defending against legal claims, we will keep the data for as long as it is necessary to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the competent supervisory authority.
Upon expiration of data storage, we will securely destroy your data in accordance with our internal policies and applicable laws and regulations.
If you believe that we are keeping your data illegally, please send the respective notice request to [email protected]. We will review your request at our earliest convenience and delete your data unless we are required by law to keep it for a longer period, or unless we can demonstrate legitimate grounds for processing that override your interests, rights, and freedoms. If deletion is impossible, we will securely store your personal data and isolate it from any further processing until deletion is permitted.
Supplemental Privacy Policy Applicable to KeyComposer
Effective Date: 24 July 2026
This supplemental privacy policy applies to the processing of personal information by KeyComposer and should be read in conjunction with the main body of the AI Apps Privacy Policy.
KeyComposer is a native presentation application for macOS built by MacPaw which generates and refines editable slide decks from your text prompts using large language models.
INFORMATION WE COLLECT AND RECEIVE
Please note that KeyComposer requires no MacPaw user account and no login, and MacPaw does not store your decks, templates, or prompt history.
Identifiers. We process a random installation identifier generated on your device on first launch and stored locally, and a per-launch session identifier. These identifiers are not derived from your hardware or Apple ID, contain no name or email. The installation identifier is regenerated if you reinstall the application, so a reinstalled application cannot be linked to data collected previously.
User request and content data. When you generate or refine a deck, your prompt text, generation parameters, refinement instructions, the content of the deck being refined, imported template content, and any images you provide for analysis are transmitted to the AI provider serving your request in order to generate a response. Depending on the feature and the availability of Apple on-device models, this processing may occur entirely on-device or be transmitted to an external AI provider. Please note that MacPaw does not store or have access to your decks.
Product usage data. These events record feature usage and outcomes, such as whether a deck was generated, its number of slides, generation time, selected export format, or whether an error occurred. They are designed not to include prompt text, deck or slide content, refinement instructions, deck or template names, file names or paths, or search queries. Where the length of a prompt or instruction is recorded, only the character or word count is transmitted, never the text itself. You can turn product analytics off at any time in Settings → Diagnostics.
Crash and error diagnostics. If crash reporting is enabled, crash stack traces, exception types, thread state, operating system version, hardware model class, and application version are transmitted to our crash reporting provider, together with a stable error category and technical stage context for handling errors.The report may also include debugging context about your requests, including the metadata describing your recent activity (events related to the use of features, request timing, and status). The integration is configured not to send personally identifiable information and user content is excluded. You can turn crash reporting off at any time in Settings → Diagnostics.
Technical data. Application version and build, a coarse operating system version, distribution channel, and the availability tier of on-device intelligence, attached to analytics events.
Feedback data. If you choose to complete an optional survey, we collect the responses you provide about your experience using the application. We may also collect your email address if you choose to provide it so that we can follow up with you. Participation in the survey is voluntary, and you may choose not to participate.
USE OF INFORMATION AND LEGAL BASIS
Purpose of Processing | Category of Data | Legal Basis |
To provide the core deck creation, editing, and export functionality of the application | User request and content data, Identifiers, Technical data | Art. 6(1)(b) — Performance of a contract |
To interpret your prompts, generate slide decks, and produce refinements and suggestions for your confirmation | User request and content data | Art. 6(1)(b) — Performance of a contract |
To import and apply brand templates you provide | User request and content data | Art. 6(1)(b) — Performance of a contract |
To analyze usage data to improve the application’s features, performance, and UX | Identifiers, Product usage data, Technical data | Art. 6(1)(a) — Legitimate interests |
To detect, diagnose, and fix crashes and errors in order to maintain the stability and security of the application | Crash and error diagnostics, Technical data | Art. 6(1)(f) — Legitimate interests |
To collect and analyze your feedback in order to understand user satisfaction and improve the application | Feedback data | Art. 6(1)(a) — Consent |
HOW WE SHARE AND DISCLOSE INFORMATION
On-device AI processing: Certain functionality, including refinement suggestions and the extraction of parameters from your prompt, may be performed directly on your device using Apple’s on-device models where available, in which case that content does not leave your Mac.
The following service providers process data specifically in connection with KeyComposer. All providers act as Data Processors and are bound by contractual obligations consistent with the applicable data protection laws:
Provider | Role and purpose | Data | Transfer Mechanism |
|---|---|---|---|
Google LLC (USA) | Cloud storage provider - stores product analytics and usage information. | Product usage data, Identifiers | The EU-U.S. Data Privacy Framework. |
AI cloud providers available via Setapp AI+ | AI cloud providers - processes your requests (including relevant task content and conversation context) and generates the responses. | User request and content data | Transfer mechanism depends on the AI cloud provider and may include the Standard Contractual Clauses approved by the European Commission or, if applicable, the EU-U.S. Data Privacy Framework. |
Functional Software, Inc. d/b/a Sentry (USA) | Crash reporting provider - receives crash reports and handled-error diagnostics used to identify and fix defects. | Crash and error diagnostics, Technical data | The EU-U.S. Data Privacy Framework. |
SurveyMonkey Inc. (USA) | Survey provider — hosts the optional feedback surveys and collects and stores your responses. | Feedback data | The EU-U.S. Data Privacy Framework. |
DATA RETENTION
We retain Personal Data for as long as necessary to achieve the purposes described in this supplemental privacy policy, unless a longer retention period is required or permitted by applicable law. The specific retention period depends on factors such as the nature of the personal data, the purposes for which it is processed, contractual requirements, applicable legal and regulatory obligations, and the need to establish, exercise, or defend legal claims.
We store your Personal Data:
- For the fulfillment of our contractual obligations and providing services under the AI Apps Terms of Use, we keep your data for the duration of the contractual relationship with you. To find out more, please refer to the AI Apps Terms of Use.
- When we process your data for the purposes of exercising your rights as the data subject and respond to your access requests, we will retain your data for 5 years.
- When we process your data for the purpose of establishing, exercising, or defending against legal claims, we will keep the data for as long as it is necessary to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the competent supervisory authority.
Upon expiration of data storage, we will securely destroy your data in accordance with our internal policies and applicable laws and regulations.
If you believe that we are keeping your data illegally, please send the respective notice request to [email protected]. We will review your request at our earliest convenience and delete your data unless we are required by law to keep it for a longer period, or unless we can demonstrate legitimate grounds for processing that override your interests, rights, and freedoms. If deletion is impossible, we will securely store your personal data and isolate it from any further processing until deletion is permitted.