PRIVACY POLICY

We respect your privacy and are committed to protecting your Personal Information. This Privacy Policy (the “Policy”) outlines how Chaoswale Private Limited (“Company” or "us" or "we" or "our") and its affiliates and our third-party service providers collect, use, store, process, transfer, and disclose your information through our website https://chaotix.ai/ (“Website”), our mobile application “Chaotix” (“App”), our Services and any of our other websites, mobile or digital applications, or any other services we offer from time to time by or in connection therewith (collectively referred to as the “Platform” or “Chaotix”). At our Platform, we offer a creative and interactive space where Users can generate, edit, remix, and share short-form games, along with related content like avatars, audio, and visuals, and connect with others through game links, chats, and comments (the “Services”). By reviewing this Policy, you will gain a comprehensive understanding of your privacy rights and choices.

Your access to and/or utilisation of our Platform and/or Services signifies your agreement to be governed by this Policy. By providing us with your Personal Information, you expressly consent to the use and disclosure of your Personal Information as outlined in this Policy. This Policy, along with the Terms of Use, is applicable to your use of the Services, and you explicitly agree and acknowledge to read the Privacy Policy in conjunction with the Terms of Use.

Please note that the capitalised terms not defined in this Policy are defined in the Terms of Use.

The term “Personal Information” shall mean any information that relates to an identified or identifiable individual or entity. This may include, but is not limited to, information that you voluntarily provide to us (such as your name, email address, phone number, or professional details) and information that we collect automatically through your use of our Website or Services (such as IP address, location, device identifiers, browser type, and usage data). “Personal Information” shall include equivalent terms in other Data Protection Laws, such as the GDPR-defined term “Personal Data,” as the context requires.

By accessing and utilising the Platform and/or Services, or furnishing your Personal Information, you explicitly agree and acknowledge that you accept the terms delineated in this Policy. The terms 'you', 'your', or ‘User’ in the context of this Policy collectively pertain to the Creators, Editors, players or any individual or entity utilising our Platform, whether for personal use or on behalf of others.

By visiting the Platform or providing your information, you expressly agree to be bound by this Privacy Policy and agree to be governed by the privacy laws, including but not limited to the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules), and the Digital Personal Data Protection Act (DPDPA), 2023, General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant regulations governing data protection and privacy.

IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS SET FORTH IN THIS PRIVACY POLICY, PLEASE REFRAIN FROM ACCESSING AND/OR USING OUR PLATFORM.

1. TO WHOM DOES THIS POLICY APPLY?

This Policy is inclusive and applies to all Users of our Platform and/or Services, irrespective of their browsing intent or their extent of utilising the Services offered on our Platform.
The applicability of this Policy extends to users regardless of the device type used for accessing our Platform and/or Services, whether it be a laptop/desktop or a mobile/tablet device.
You acknowledge that you are an eligible user as per Clause 2.1 of the Terms of Use. If you are below or between the ages of 13-18, or 16-18 (as applicable), and below the contractual age determined by the Applicable Laws of your country, you confirm that you are using the Platform with the consent of a parent or legal guardian. If you do not meet these criteria, please refrain from using our Platform and Services or providing Personal Information to us.
We do not knowingly collect Personal Information from individuals mentioned in Clause 1.3 above, without verifiable parental consent, in compliance with applicable Data Protection Laws. If we discover that we have unintentionally collected Personal Information from such an individual without appropriate consent, we will take steps to delete such information as soon as possible.

2. WHAT IS THE INFORMATION THAT WE COLLECT FROM YOU?

To utilise our Services, you must download the App from an official app store compatible with your mobile device (e.g., Google Play Store or Apple App Store).
Upon installing the App, you need to complete the one-time sign-in process with us by setting up a user account (the “Account”). To utilise our Services, we collect certain Personal Information from you. This may include, but is not limited to, the following:
1. Basic Information: You are required to provide basic information such as name, username, date of birth, and gender (optional);
2. Contact Information: such as email address;
3. Verification Data: If you sign up or log in using third-party platforms, such as Google, we may receive authentication data such as your name, email address, and profile picture as permitted by your privacy settings on such platforms;
4. Sensitive Information: If uploaded or shared by you, we may collect biometric information such as voice recordings or facial likenesses (e.g., from selfies or voice notes submitted for game creation purposes). Such information is collected only with your explicit consent and handled in accordance with applicable Data Protection Laws.
5. Game-Creation Related Data: This includes prompts, commands, or inputs provided to create or modify games, including text, images, and audio, AI-generated avatars (either selected from templates or custom-generated using uploaded data), gameplay content, user-generated levels, and remix data, and any other content you voluntarily contribute through the creation or editing of games
6. Recruitment Information: If you apply for a job at our Company through the careers page on our Platform, we may collect specific Personal Information, including your full name, email address, contact number, LinkedIn profile, and any other information provided in your resume;
7. Social Media Platforms: If you subscribe to our blog and newsletters or contact us through social media platforms, including but not limited to Discord, Instagram, etc., we may collect and process your Personal Information available on these platforms through various third-party data analytics and social media management service providers. This may include your name, email address, and phone number as provided on your social media profiles;
8. Additional Information: It includes, without limitation, when you participate in promotions, educational programs, comment on other Users’ games, or share your experience with us;
9. Communication with us: This can include any communication that you send to us, including communications for any inquiries, technical support, etc;
10. Device Identification data: This includes information that may assist us in identifying your device, including browser type and version, your operating system, etc;
11. Other Data: This can include the following, based on your interaction with the Platform and/or Services-
  1. Number of times you access our Platform and/or Services;
  2. The length of time you spent on the Platform;
  3. Your engagement patterns, including the time when you became active and have continued to be active on the Platform;
  4. In-app actions and interactions;
  5. Other similar statistics we may collect with the intention of improving the user experience of the Platform.
You agree to provide us with your Personal Information whenever you use our Services by performing any of the following functions:
1. Accessing and utilising our Platform and/or Services by means of any web browser or mobile, or any other device;
2. Creating an Account and playing games on the App;
3. Inquiring about our Services through our Platform;
4. When you engage with our social media, careers, newsletter, or promotional activities;
5. Initiating and maintaining correspondence with us;
6. Creating or remixing games using AI tools, which includes inputting data, receiving AI-generated outputs, and engaging with personalised game creations and insights.
You understand and agree that all Personal Information, sensitive or otherwise, collected through our Platform is provided solely by the User. We do not collect any personal or sensitive information without the User’s explicit input and consent. Users are responsible for the accuracy and completeness of the information they provide. By using our Platform and Services, you acknowledge that you are bound by the terms and policies of our third-party service providers. We prioritise user privacy and security by relying on trusted third-party service providers, and we encourage Users to review and understand the policies of these platforms to protect their interests.
Further, you understand and acknowledge that we provide advanced AI Tools within the Platform to enhance your experience and enable features such as game creation, content generation, and personalisation. These tools operate using APIs and services provided by third-party providers. While we handle your Personal Information in accordance with this Privacy Policy, the processing of data, including inputs and outputs, by such third-party providers is subject to their own privacy policies and terms. We encourage you to review those policies to understand how your data may be handled. By using our AI-powered features, you acknowledge and agree to be bound by the terms and privacy practices of these third-party service providers, as further described in Clause 5 of this Policy.
We strive to take extra precautions to ensure that such Personal Information is kept secure and confidential, and we will only retain this data for as long as necessary for the purposes for which we collect it, as per the permissible laws of the land.
This Policy will not apply to any unsolicited information provided by you through the Platform or through any other means. This includes but is not limited to information posted on any public areas of the Platform and other social media. All such unsolicited information shall be deemed to be non-confidential, and we will be free to use and disclose such unsolicited information without limitation.
We shall not be liable for any loss or damage sustained by you as a result of any disclosure (inadvertent or otherwise) of any Personal Information concerning your payment-related information in the course of any online transactions or payments made for any Services offered through the Platform. For this purpose, we recommend that you go through the terms of service of third-party service providers.
Access to your Personal Information is limited to employees, agents, partners, and third parties, who we reasonably believe will need that information to enable us to provide Services to you. However, we are not responsible for the confidentiality, security, or distribution of your own Personal Information by our partners and third parties (who have their own privacy policies) outside the scope of our agreement with such partners and third parties.
When you use our Platform, we collect and store your information, which is provided by you from time to time. In general, you can browse the Platform without telling us who you are or revealing any Personal Information about yourself. Once you give us your Personal Information, you are not anonymous to us. Where possible, we indicate which fields are required and which fields are optional. You always have the option to not provide information by choosing not to use a particular service, product, or feature on the Platform.

3. HOW DO WE COLLECT THE INFORMATION?

We employ various methods to gather information, ensuring a comprehensive understanding of User interactions and preferences. The collection of Personal Information is facilitated through the following processes:
1. Information you give us: When you provide us with the information referred to in Clauses 2.2 through the methods outlined in Clause 2.3;
2. Social Media Management: We collect and analyse publicly available Personal Information through various tools to understand how Users engage with our social media channels and interactions. This information helps us identify trends in User behaviour, optimise our content strategy, and improve our social media presence. The data collected may include metrics such as interaction frequency, engagement patterns, and demographic details of our audience. We ensure that the data is used only for the purposes outlined in this Policy, maintaining strict confidentiality and compliance with applicable Data Protection Laws. The insights gained enable us to enhance our social media efforts to better cater to User preferences and deliver a more engaging experience;
3. Session Management: We study session metrics to understand how Users interact with the Platform. This helps us learn the average time Users spend on the Platform and when they prefer to engage. We use tools like Google Analytics (or alternatives) to collect anonymous data, including the number of views, how long Users stay, screen views, button clicks, and where they're visiting from. This data allows us to optimise the User experience, making informed enhancements to cater to User preferences and behaviours;
4. User analytics: We analyse User behaviour and preferences by collecting and analysing Personal Information within the Platform to track and ensure accuracy, promptly identify any unauthorised transactions, and detect fraudulent activities, allowing us to take immediate corrective action. For this purpose, we integrate and utilise marketing automation tools, including but not limited to Mixpanel and Google Analytics. Please note that you are subject to such third-party marketing tools, and it is your responsibility to read and understand their terms and conditions.
In addition to direct User interactions, we utilise various data collection methods to enhance User experience and optimise App functionality. These methods assist in tracking User preferences, providing personalised experiences, and improving the performance of our App. Users have the option to manage their data preferences through their device settings. Below are the categories of data collection methods used in our App, along with a description of what they are used for:
1. Essential Data Storage: These mechanisms are essential for running our App and keeping it secure. They also help us comply with applicable regulations and keep your details safe and private. Examples include storing authentication tokens and app settings.
2. Functional Data Storage: These mechanisms remember preferences such as your region or country, preferred language, and accessibility options like large font or high-contrast pages. They ensure the app functions according to your preferences every time you use it.
3. Performance Tracking: These mechanisms tell us how you and other Users use our App. We aggregate and analyse this data to improve the performance and functionality of our services. Examples include tracking screen views, button clicks, and usage patterns.
4. Event Tracking: Through this mechanism, our App can define custom events to track specific actions taken by Users, such as creating a game, completing a level in a game or sharing content.
5. Log Files: Our servers automatically collect information sent by Users' devices, known as log files. This data may include IP addresses, device information, operating systems, browser type, and timestamps. Log files are instrumental in analysing trends, administering the Platform, and diagnosing technical issues;
6. Location Data: As part of our Services, we may also collect precise geolocation data, including GPS signals, device sensors, Wi-Fi access points, and cell tower IDs. We collect this type of data if you grant us access to your location. You can withdraw your consent at any time by disabling the GPS or other location-tracking functions on your device.
7. Third-Party SDKs: We integrate third-party Software Development Kits (SDKs) to provide additional functionality, such as analytics and advertising. These SDKs may collect information about your device, app usage, and interactions to help us understand User behaviour and deliver targeted content.
8. Advertising Identifiers: We use the Identifier for Advertisers provided by your iOS device for advertising purposes, such as Google AdMob. Google AdMob uses IDFA under the guidelines laid out in the iOS Developer Program License Agreement. These identifiers help us deliver personalised ads and track the effectiveness of our advertising campaigns.
Cookies: We utilise cookies, which are small text files stored on your device’s hard drive by web browsers. These cookies help us and third parties identify Users, track preferences, analyse usage patterns, and optimise the Website’s functionality to provide a customised experience. Cookies enable us to store preference information and understand browsing activities. You may manage cookie preferences through your browser settings. Below is the limited list of the categories of cookies we use, along with their purposes:
1. Strictly Necessary Cookies: These cookies are needed to run our Website, to keep it secure when you are accessing the Website, and to obey regulations that apply to us. They also help us keep your details safe and private;
2. Functional Cookies: These cookies are used for remembering things such as your region or country, your preferred language, accessibility options like large font or high-contrast pages;
3. Performance Cookies: These cookies tell us how you and our other users use our Website. We combine all this data together and study it. This helps us to improve the performance of our Services and/or the Website;
4. Session Cookies: We use session cookies, which are stored temporarily during your browsing session and deleted when you close your browser or application. These cookies support Website functionality and help us analyse usage, including pages visited, links clicked, content viewed, and time spent on each page.
5. Analytics Cookies: Analytics cookies collect data about your use of the Website, allowing us to improve its performance. These cookies provide aggregated information to monitor site functionality, track page visits, identify technical issues, analyse user traffic, and measure the effectiveness of our advertising, including emails sent to you.
6. Purpose of Cookies We Use: We utilise Personal Information obtained through cookies to enhance the speed, security of your interaction with us, and overall user experience. These cookies serve various purposes, including but not limited to:
  1. Preferences: Cookies enable the Website to remember information that alters the site’s behaviour or appearance, such as your preferred language or geographic region. By retaining your preferences, we can customise and present advertisements and other content tailored to you.
  2. Security/Optimisation: Cookies play a crucial role in maintaining security by verifying Users, preventing fraudulent use of Services, and safeguarding User data from unauthorised access. Specific types of cookies assist in blocking various types of attacks, such as attempts to pilfer content from Website forms.
  3. Processing: Cookies contribute to the efficient functioning of the Website, allowing us to deliver the Services expected by visitors and/or Users. These cookies facilitate tasks like navigating web pages and accessing secure sections of the Website.
  4. Analytics and Research: Cookies aid in comprehending how individuals utilise our Services, enabling us to enhance them for a better User experience. This data-driven insight helps us refine and improve our offerings.
Web Beacons, Pixel Tags, and Trackers: We may employ Web Beacons, Pixel tags, and trackers, which are tiny graphic images and/or small blocks of code placed on mobile apps, ads, or in the emails that allow us to determine whether you performed a specific action. When you access these pages or when you open an email, you let us know that you have accessed the Platform or opened the email. These tools help us measure responses to our communications and improve our promotions.
Metadata: When you interact with our AI-powered tools while creating games using voice, text, or images, we may collect certain metadata to enhance and optimise the service experience. This includes details such as interaction timestamps, query types, response times, technical data (e.g., IP addresses, device identifiers), and usage patterns. This metadata helps us optimise platform functionality, improve AI accuracy, and enhance your overall experience. All such data is used strictly for operational and performance enhancement purposes, and not for profiling or targeted advertising unless specifically disclosed.
Information from Other Sources: We may collect Personal Information from other sources, including but not limited to:
1. If a User or any third party submits a complaint about you, we may receive information relating to the specific complaint made in order to understand and, where relevant, address the complaint; and
2. To the extent permitted by Applicable Law, we may receive additional information about you, such as references, demographic data, and information to help detect fraud and safety issues from (i) third-party service providers, other third parties, and/or partners, or (ii) Users and any other individuals, entities, and authorities, and combine it with information we have about you. For example, we may receive background check results or fraud warnings from identity verification service providers for use in our fraud prevention, security investigation, and risk assessment efforts. We may receive information about you and your activities on and off the Platform, including from Users of our Platform, members of the public, governmental, public, or tax authorities, or about your experiences and interactions with our partners. We may receive health information, including, but not limited to, health information related to contagious diseases.

4. WHY DO WE COLLECT YOUR INFORMATION?

You agree and acknowledge that we shall collect your information only for lawful and legally permissible purposes, which are as follows:
1. Contractual Necessity: We process your Personal Information to fulfil our contractual obligations to you. This includes actions such as creating and maintaining your Account, enabling access to our Platform, providing game-building and gameplay features, and delivering related Services;
2. User Authentication: We collect your information to help us identify you as and when you access the Platform, when you register an Account with us or log in, or when you utilise our Services;
3. Creation of Games: We collect Personal Information, including avatars, prompts, audio-visual content, and inputs shared by you, to enable and enhance your game creation and customisation experience on the Platform;
4. Research and development: We will utilise Personal information to deliver the Services and to develop, test, and enhance the quality and usability of both the Platform and Services. Our primary approach will involve de-identifying this information before utilisation, and subsequently integrating it with de-identified browser and device data for these purposes;
5. AI-powered Services: We collect and process your data, including prompts, media, and interactions, to provide AI-powered features such as game generation, avatar creation, editing tools, and personalised suggestions. Additionally, we review performance-related data to monitor the effectiveness of these services, detect technical issues, and make necessary improvements to enhance user experience.
6. Communicate with you: We use your Personal Information to communicate with you concerning our Services via different channels (e.g., by phone, e-mail, chat);
7. Fraud Prevention and Credit Risks: We use your Personal Information to prevent and detect fraud and abuse to protect the security of our Users;
8. Troubleshoot Problems: We use your Personal Information to provide functionality, analyse performance, fix errors, and improve the usability and effectiveness of the Platform and/or Services;
9. Compliance with law: To be able to perform any contractual and legal obligation;
10. Enhancing User Experience: To analyse User behaviour and preferences for improving our Services and User experience, and to be able to provide location-specific services, if any;
11. Enhanced Advertising and Marketing Efforts: In our efforts to provide, personalise, measure, and enhance our advertising and marketing endeavours, we engage in several key activities. Firstly, we utilise User information to send promotional and marketing messages, tailoring them to suit individual preferences and interests. Additionally, we strive to customise and optimise advertising on various platforms to ensure relevance and effectiveness. Furthermore, we may administer referral programs, rewards, surveys, sweepstakes, contests, and other promotional activities to engage Users and foster community participation. Through the analysis of User characteristics and preferences, we aim to send targeted promotional messages that resonate with each User segment. Finally, we extend invitations to Users for events and relevant opportunities, enriching their overall experience with our Platform; and
12. Providing alerts/notifications: To effectively communicate with you through emails/SMS/notifications through the Platform to inform you about any other new apps or services that we may from time to time develop with the help of third-party service providers such as Firebase. As you are also bound by the policies of such third parties, please ensure that you read and understand the policies of these third-party service providers, as outlined in Clause 5 of this Policy..
In the course of operating the Platform and/or Services, we collect and utilise Personal Information in accordance with our Privacy Policy.
You consent to us processing your Personal Information in specific situations by us, particularly where it is required to deliver our Services. Wherever Data Protection Laws require us to collect and process certain Personal Information based on your consent, we will obtain this consent at the time of data collection. Your Personal Information may also be disclosed on our Platform if authorised by you for the purpose of utilising our Services. Additionally, we may communicate with you through various means, including messaging, calls, or emails, through third-party service providers to facilitate the performance of our Services where necessary. Furthermore, your Personal Information may be processed to the extent required to comply with legal obligations.

5. WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH AND WHY?

To facilitate our Services and enhance user experience, we may share Personal Information with the following entities:

Users: When you create, share, or participate in a game, chats, or interactive experience on the Platform, certain information, such as your username, avatar, and any content you have publicly posted or made available, may be visible to other Users. This sharing is essential to enable gameplay, collaboration, and community engagement features on the Platform. Additionally, if you interact with another User’s game by remixing, liking, or commenting, your username and interaction history may be visible to that User.

Third-party Service Providers:

We engage the services of third-party service providers to carry out various functions on our behalf, such as AI capabilities, data analysis, postal and email communications, hosting services, storage, customer service, and marketing assistance. These third-party service providers have access to the necessary Personal Information to fulfil their functions. However, they are strictly prohibited from using it for any other purposes. Moreover, they are obligated to process the Personal Information in compliance with applicable privacy laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other Data Protection Laws. While we do not own or control these third parties, when you interact with them and choose to use their services, you are providing your information to them.
You acknowledge that our AI-powered features are enabled through third-party API integrations, including but not limited to OpenAI, Segmind, Fal, and Flux. These third-party providers process the prompts, media, and interactions you input in order to generate responses and deliver AI functionalities. While we do not directly share your Personal Information with these providers, your inputs may be accessed and processed by them as part of their service delivery. To the best of our knowledge, these providers do not retain or use your data for model training or improvement unless explicitly stated in their respective privacy policies or required by law. Most providers, such as OpenAI, process input data solely for operational needs such as abuse monitoring, service reliability, and diagnostics. We encourage you to review the individual policies of these providers listed above to understand how your data may be handled during your use of AI-powered tools on our Platform.

Your use of these services is subject to the policies of those providers, including but not limited to the following:

Service Providers	Purpose/Function	Links
Render	Storage and processing	https://render.com/
Amazon EC2	Cloud Storage and backend hosting	https://aws.amazon.com/ec2/
Netify	Frontend Hosting	https://www.netlify.com/
Firebase	Authentication, messaging, notifications	https://firebase.google.com/terms/
Google Analytics	Analytics	https://policies.google.com/?hl=en-US
Mixpanel	Analytics	https://mixpanel.com/home/
Open AI	AI-powered services	https://openai.com/, https://openai.com/api/
Segmind	AI-powered services	https://www.segmind.com/
Fal	AI-powered services	fal.ai
Flux	AI-powered services	https://www.flux.ai/p/

Employees and Independent Contractors: Employees and independent contractors of the Company have access to Personal Information strictly on a need-to-know basis for their job functions or contractual obligations. They comply with this Policy and are trained to protect Personal Information. Confidentiality obligations prohibit unauthorised disclosure or misuse of Personal Information. We monitor compliance and may enforce disciplinary action for breaches, ensuring appropriate security measures are in place to safeguard all accessed Personal Information.
Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honour this Policy. Affiliates may include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Business Transfers: If we reorganise or sell all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your information to the successor entity. If we go out of business or enter bankruptcy, your information would be an asset transferred or acquired by a third party. You acknowledge that such transfers may occur and that the transferee may decline to honour commitments we made in this Policy.
Legal Compliance:
1. We may disclose your information to courts, law enforcement, governmental or public authorities, tax authorities, authorised third parties, or other Users, if and to the extent we are required or permitted to do so by law or where disclosure is reasonably necessary to: (i) comply with our legal obligations, (ii) comply with a valid legal request, such as a subpoena or court order, or to respond to claims asserted against Company, (iii) respond to a valid legal request relating to a criminal investigation to address alleged or suspected illegal activity, or to respond to or address any other activity that may expose us, you, or any other of our Users to legal or regulatory liability, (iv) enforce and administer our agreements with users, including our Terms, additional legal terms, and policies, (v) respond to requests for or in connection with current or prospective legal claims or legal proceedings concerning the Company and/or third parties, in accordance with Applicable Law, or (vi) protect the rights, property or personal safety of the Company, its employees, its user, or users of the public. Notwithstanding the above, you understand that before responding to any request for Personal Information, we conduct a thorough legal review to ensure the request complies with Applicable Laws, is specific, and is valid under the relevant legal framework. Requests that do not meet these criteria will not be processed. We reserve the right to seek clarification or additional information from the requesting authority if needed to validate the request.
2. Where legally required or permissible according to Applicable Law, we may disclose user information to relevant tax authorities or other governmental agencies, depending on where you are based, for the purpose of the tax authorities’ determination of proper compliance with relevant tax obligations.
3. Furthermore, we adhere to a strict data minimisation policy, disclosing only the minimum amount of Personal Information necessary to comply with lawful requests. Before responding to any request, we thoroughly assess its scope to ensure only information specifically relevant and necessary to fulfil the legal requirement is disclosed. Additionally, any data irrelevant to the specific request is redacted or withheld. If data must be disclosed, it is shared in aggregate or anonymised form wherever possible to safeguard individual privacy.
4. We maintain detailed documentation of all requests from public authorities for user information to ensure accountability and transparency. This includes, without limitation,
  1. the nature and content of the request,
  2. verification of the requesting authority's credentials,
  3. legal basis cited in the request (e.g., court orders, subpoenas, statutory authority),
  4. internal legal review processes, including opinions sought from legal counsel,
  5. specific information disclosed (if any) and the date of disclosure,
  6. any communication with the requesting authority, including objections or clarifications sought, and
  7. steps taken to comply with jurisdiction-specific laws and regulations.
5. Where appropriate and/or legally required, we may notify the User about legal requests, unless: (i) providing notice is prohibited by the legal process itself, by court order we receive, or by Applicable Law, or (ii) we believe that providing notice would be futile, ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon or harm to us, our Users, or expose us to a claim of obstruction of justice. If a request for Personal Information is deemed unlawful, overly broad, or lacking in sufficient legal basis, we will take appropriate measures to challenge or refuse the request. This may include engaging with the requesting authority to clarify the scope of the request or initiating or participating in legal proceedings to challenge the request where warranted.
Service Improvement: We may share certain aggregated, anonymised information with third parties (for example, for Google Analytics) in order to assess the Platform usage and information pertaining to the ease of navigation.
Advertisements: We use third-party advertising companies to serve ads when you visit our Platform. These companies may use information (not including your name, address, email address, or telephone number) about your visits to the Platform and other websites in order to provide personalised advertisements about goods and services of interest to you.
Collaborations: We may share your Personal Information with reputable partners to facilitate joint initiatives, promotions, or integrated services; and
Growth and Expansion: As our Platform evolves and expands, there may be instances where sharing Personal Information with new entities or parties becomes necessary for the enhancement of our Services. Any such sharing will be carried out with the utmost consideration for user privacy and in accordance with relevant legal frameworks.

We do not ever sell or rent your Personal Information without your express approval.
We do not share Personal Information with advertisers or third-party sites displaying our interest-based ads. However, advertisers may infer user interests from interactions with ads and might provide us with demographic information to enhance ad relevance. Advertisers can serve ads directly to your browser, receiving your IP address, and may use cookies to evaluate ad effectiveness. We do not control these cookies or the practices of third-party advertisers, so please refer to their privacy policies for more information.
We are not responsible for the actions of third parties with whom you share personal or sensitive data, and we have no authority to manage or control third-party solicitations. If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the third party directly.
We may also de-identify or aggregate information and convert it into non-personal information so that it can no longer reasonably be used to identify you (“De-identified Information”). We use and retain De-Identified Information for any of the purposes described in Clauses 4 and 5 of this Policy. We will maintain and use De-Ident Identifying Information in de-identified form and will not attempt to re-identify the information, except to confirm our de-identification processes or unless required by law.
De-identified Information that cannot be able to personally identify particular individuals is referred to as anonymised information. Additionally, De-identified Information that can identify individuals only if it is combined with another, separate piece of information is referred to as pseudonymized information.
Where possible, we will aim to collect, store, and use anonymised information as a first preference, and if not, then pseudonymized information. Please note that we may retain anonymised information for analytic and service development purposes.
We may share aggregated, anonymised information to third parties for analytical and/or marketing purposes.

6. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

In compliance with applicable Data Protection Laws, we retain your Personal Information for a duration no longer than necessary for the purpose for which it was collected or as mandated by relevant laws. In some cases, where immediate deletion is not feasible due to technical or legal constraints, we may instead anonymise your data to ensure it can no longer be linked to you, effectively removing all personal identifiers. The anonymised data may be retained solely for analytical and research purposes. However, you understand and agree that certain data related to you may be retained beyond this period if we reasonably believe it is necessary to prevent fraud, mitigate potential abuse, allow us to exercise our legal rights, defend against legal claims, or fulfil other legitimate purposes required by law or for analytical and research purposes. Additionally, we may continue to retain your Personal Information for the following purposes, including but not limited to:
1. Legitimate Business Interest: We may retain your Personal Information as necessary for our legitimate business interests, such as the prevention of money laundering, fraud detection and prevention, and enhancing safety;
2. Legal, Tax, Reporting, and Auditing Obligations: We may retain and use your Personal Information to the extent necessary to comply with our legal, tax, reporting, and auditing obligations;
3. Shared Information: Information you have shared with others, such as reviews and forum postings, may continue to be publicly visible on the App, even after your access/use is restricted; and
4. Residual Copies: Residual copies of your Personal Information may remain in our backup systems for a limited period of time, primarily to ensure compliance with legal obligations and to protect against accidental loss or destruction. We strive to anonymise your data to prevent any personal identifiers from being linked to you. However, in rare cases where legal or operational requirements necessitate it, identifiable information may be retained temporarily. Such retention is strictly limited and governed by Applicable Laws.
Further, when you use AI‑powered tools and features via third‑party service providers integrated into the Platform, the retention of your inputs and outputs may vary depending on the provider. These providers may temporarily store such data for operational purposes, including ensuring service reliability, detecting misuse, and complying with legal or contractual obligations. While we do not control how long such data is retained, we only partner with vendors who are contractually bound to process data in accordance with applicable privacy and security standards. By continuing to use our AI‑enabled features, you acknowledge and agree to these third-party retention practices. We encourage you to consult their respective privacy policies for more detailed or updated information.

7. HOW DO WE PROVIDE FOR THE SECURITY OF YOUR PERSONAL INFORMATION WITH US?

Storage Information: User data is securely stored on our servers and databases, utilising third-party storage partners, including Render, Amazon EC2 and Netify. These servers are strategically located based on the User's location to minimise latency for each User. At present, our servers are located in the United States. However, this may change as we scale and transition to data centres in other jurisdictions, based on operational requirements.
We prioritise the security of your Personal Information and have implemented industry-standard technical and organisational measures to safeguard it. All data transfers to and from our Platform are protected using Secure Sockets Layer (SSL) technology (HTTPS encryption) to prevent interception during transmission. Data stored on our servers is encrypted at rest using AES-256 encryption and hosted within Virtual Private Cloud (VPC) environments to ensure logical isolation. Our infrastructure is maintained on ISO and SOC-compliant cloud providers, ensuring adherence to internationally recognised security frameworks. In addition, we maintain reasonable physical, electronic, and procedural safeguards to ensure the confidentiality and integrity of your data. Access to Account and Personal Information is restricted to authorised personnel only and governed by strict internal protocols to prevent unauthorised access, disclosure, or misuse.
We work to protect the security of your Personal Information during transmission by using encryption protocols. We use multi-layered controls to help protect our infrastructure, constantly monitoring and improving our applications, systems, and processes to meet the growing demands and challenges of security. We ensure that the third parties who provide services to us under appropriate contracts take appropriate security measures to protect your Personal Information in line with our policies. We may update or modify such security measures from time to time, provided that such updates and modifications do not result in the degradation of the overall security of the Service.
The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Platform, like message boards, as the information you share may be viewed by any user of the Platform.
While we take comprehensive measures to safeguard your information, Users acknowledge and accept the inherent security implications of data transmission over the Internet and the World Wide Web. Despite our efforts, complete security cannot be guaranteed,表格 and inherent risks persist. Users bear the responsibility of safeguarding login credentials for their Accounts. Any transmission of Personal Information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Platform. While acknowledging these risks, we remain committed to continually enhancing our security protocols to address emerging threats and maintain the trust of our Users.

8. HOW DO WE HANDLE DATA BREACHES AND SECURITY INCIDENTS?

Pursuant to Clause 7 of this Policy, we strive to prevent data breaches and security incidents to the best of our ability. However, should a data security breach occur, we have an incident response plan (“Incident Response Plan”) in place as outlined in this Clause. In the event of a data breach or security incident, the Company maintains a proactive approach to ensure swift resolution and mitigate potential risks. Additionally, we take appropriate measures to contain the impact of any breach while ensuring compliance with applicable Data Protection Laws.
We have established a comprehensive incident response plan designed to address such occurrences promptly and effectively:
1. Identification: We promptly identify and acknowledge any signs of a data breach or security incident within our systems or infrastructure;
2. Containment: Immediate action is taken to contain the impact of the breach, preventing further unauthorised access or damage to data;
3. Notification: We prioritise transparency by promptly notifying affected parties, including Users and relevant stakeholders, within a reasonable time of discovering the breach. The notifications will be communicated via email and will detail the nature of the breach and its potential impact on their data, along with support resources;
4. Collaboration: We collaborate with relevant authorities, such as regulatory bodies and law enforcement agencies, to report the incident and comply with any legal obligations or regulatory requirements; and
5. Post-Incident Assessment: Following the resolution of the incident, we conduct thorough assessments to evaluate the effectiveness of our response measures and identify areas for improvement. Our employees are trained on the Incident Response Plan to ensure preparedness and effective response.

9. DO WE TRANSFER YOUR PERSONAL INFORMATION ACROSS THE BORDER?

At present, your Personal Information may be stored on servers located outside your country of residence, including in the United States, where our third-party hosting providers operate data centre facilities. Such cross-border transfers may occur in connection with the purposes outlined in this Policy and may involve our infrastructure and storage partners, who help manage and store data on our behalf.
You acknowledge and accept that the laws governing data protection in these other countries may differ and may be less stringent than those in your residential jurisdiction. Consequently, your Personal Information may be subject to the Data Protection Laws of these jurisdictions, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), which could include disclosure requirements to governmental bodies or other entities under Applicable Laws. In addition, a number of countries have agreements with other countries providing for the exchange of information for law enforcement, tax, and other purposes.
Where we transfer your Personal Information internationally, we will use our best endeavours to put in place appropriate controls and safeguards to ensure that your Personal Information is kept accurate, adequately protected, and processed only for specified and reasonable purposes in a manner that is fair, transparent and has a lawful basis, and is stored for no longer than is absolutely necessary.

10. WHO IS THE DATA CONTROLLER AND DATA PROCESSOR OF YOUR PERSONAL INFORMATION?

We will act as the data controller where we make decisions on how your Personal Information is used in connection with the Platform or our Services. We will act as the data processor where we only use your Personal Information as authorised and instructed by a third party in connection with the Platform, our applications or Services.
Where we are acting as the data controller, we are responsible for the obligations of a data controller under Data Protection Laws in connection with the processing of your Personal Information, and we use this Privacy Policy to provide you with information about our use of your Personal Information.
Where we are acting as a data processor, the relevant third party will be acting as a data controller and will be responsible for the obligations of a data controller under Data Protection Laws in connection with the processing of your Personal Information. If you are accessing the Platform or our Services through a third party, you should contact them with queries regarding the processing of your Personal Information or compliance with Data Protection Laws.

11. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

You, as a data subject, may have certain rights to your Personal Information with us, as under:
1. Request access to your Personal Information: This allows you to receive a copy of the Personal Information we hold about you, and to check that we are lawfully processing it;
2. Request the correction of your Personal Information: This allows you to ask for any incomplete or inaccurate information we hold about you to be corrected;
3. Request the erasure of your Personal Information: This allows you to ask us to delete or remove your Personal Information from our systems where there is no good reason for us to continue processing it;
4. Object to the processing of your Personal Information: This allows you to object to our processing of your Personal Information for a specific purpose (for example, for marketing purposes);
5. Request the transfer (data portability) of your Personal Information: This allows you to request the transfer of your Personal Information in a structured, commonly used, machine-readable format, either to you or to a third party designated by you and, if technically feasible, have it transmitted to another controller without any hindrance. This provision is applicable provided that your information is processed by automated means and that the processing is based on your consent, on a contract of which you are a part, or on pre-contractual obligations thereof;
6. Request the restriction: You have the right to request the restriction of the processing of your Personal Information. This means we will store your Personal Information but not further process it, except in limited circumstances (e.g., with your consent or for legal claims);
7. Request further information on the processing of your Personal Information: You have the right to obtain further information on how we process your Personal Information. This includes details about the purposes of the processing, the categories of Personal Information involved, the recipients or categories of recipients with whom the Personal Information has been or will be shared, and the envisaged retention period of the Personal Information.
8. Withdraw your Consent: This right only exists where we are relying on your consent to process your Personal Information. If you withdraw your consent, we may not be able to provide you with access to certain features of the Platform. We will advise you if this is the case at the time you withdraw your Consent.
9. User’s State-Specific Rights:
  1. If you are a citizen of India, you may have additional rights listed in Schedule I. Please refer to Schedule I below for more detailed information on your rights.
  2. If you are a citizen of the European Union, you may have additional rights listed in Schedule II. Please refer to Schedule II below for more detailed information on your rights.
  3. If you are residing in the United Kingdom, you may have rights listed in Schedule III. Please refer to Schedule III below for more detailed information on your rights.
  4. If you are residing in the United States including states such as California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nevada, Oregon, Texas, Utah, Vermont, Virginia, or Washington, or are otherwise protected by privacy or consumer health data laws in those jurisdictions, please refer to Schedule IV that outlines state-specific rights and protections afforded to you.
10. Please note that these Schedules are supplemental to our Privacy Policy.
11. In relation to the above, you can exercise such right by sending us an email with your request to ankur@chaotix.ai along with the necessary proof of identity requirements that we may require prior to processing such a request from you.
12. We are committed to respecting and protecting your privacy and will make every effort to accommodate your requests and address your concerns in accordance with Applicable Laws. It's important to note that we may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. This ensures that your rights are upheld and that we respond to your inquiries promptly and effectively.
13. While we strive to cover the privacy rights of Users in various jurisdictions through this Privacy Policy and the accompanying Schedules, we understand that some Users may be in regions with specific Data Protection Laws that are not explicitly addressed here. If you are a User whose data subject rights are not clearly covered in this Privacy Policy or the Schedules, please reach out to us for assistance at ankur@chaotix.ai. You can contact us to: (a) inquire about the processing of your Personal Information; (b) request access, rectification, or erasure of your Personal Information; (c) restrict or object to the processing of your Personal Information; and (d) exercise any other rights granted under applicable Data Protection Laws in your jurisdiction.
14. Please be aware that these rights are subject to legal restrictions. We will respond to your request as soon as possible, typically within one month at the latest. If you believe that our processing of your Personal Information is unlawful, you have the right to complain to ankur@chaotix.ai. We hope that you will first contact us so that we can assess your objections and clarify any misunderstandings.

12. ARE CHILDREN ALLOWED TO USE OUR PLATFORM AND/OR SERVICES?

This Platform and/or Services are strictly prohibited for use by individuals under the age of eighteen (18) years or the age of majority as defined by the Applicable Laws of their country of residence, unless explicit consent is provided by a parent or legal guardian ("Guardian"). Specifically, individuals under the age of sixteen (16) residing in European Union (EU) countries and those under thirteen (13) years old in the United States or the United Kingdom are also restricted from accessing our Platform and Services (collectively referred to as “Minors”). Accessing or using the Platform and/or Services by Minors constitutes a violation of our Terms of Use and Privacy Policy.
We do not knowingly collect, solicit, or process any Personal Information from Minors. We implement commercially reasonable age verification measures and data protection practices to prevent such unauthorised collection and usage.
If you are a Guardian and believe your child has provided us with Personal Information, we urge you to promptly contact us at ankur@chaotix.ai. Upon verification of your Guardian status, we will promptly take all necessary steps to remove and delete such information from our records.

13. HOW CAN YOU EXPRESS YOUR COMPLAINTS AND CONCERNS?

User satisfaction is one of the key focus areas and an integral part of our Platform’s founding principles and business policies. We strongly believe that User satisfaction is the most important factor in the growth and development of our business, and hence, we have adopted user-centricity as a priority in developing our business processes. The terms below shall constitute our “User Grievance Redressal Policy”, which outlines the framework for addressing User grievances:

Objective: The objective of this Grievance Policy is to provide a framework:
1. to ensure the provision of timely and effective resolution of issues raised by the User; and
2. to keep the User informed about the manner in which they can reach out to us to resolve their queries and grievances.
Governing Principles: The policy on grievance redressal is governed by the following principles:
1. User shall be treated fairly at all times;
2. issues raised by Users are always attended to with courtesy and on time;
3. Users are provided with effective and satisfactory resolution within a reasonable time period; and
4. Users are fully informed of avenues to escalate their issues/ grievances if they are not fully satisfied with the response to their complaints.
Grievance Redressal: Any User can reach out to our Grievance Redressal Officer through electronic mode by way of email communication at ankur@chaotix.ai. Users can expect a reply within 7 days; and
Must Know: You must know and understand that-
1. We DO NOT solicit confidential details like your OTP/CVV/PIN/Card Number/ Bank account details through any means.
2. Scamsters/fraudsters attempt various techniques such as ‘phishing’ to contact, influence, and defraud consumers. We regularly caution our Users against sharing any personal or payment-sensitive information with unknown persons, as such sharing leads to unauthorised use and/or fraud and consequent financial loss.
3. We shall not be liable for any loss, damage, or expense incurred by a User where the User has shared personal and/or payment-sensitive information with scamsters/fraudsters.
4. We also request and encourage our Users to report such attempts or incidents to us at ankur@chaotix.ai to enable us to investigate and explore legal recourse.

14. HOW ARE CHANGES MADE TO THIS POLICY?

This Policy may be updated at our sole discretion or due to changes in the law. Such changes, unless otherwise stated, will be effective from the day and date of posting on the Platform. We reserve the right to update the Policy without obligation to notify Users. It is recommended to regularly review this Policy for any changes, as your continued access and use of the Platform will be considered your approval and acceptance of all modifications to this Policy. In cases where Applicable Law mandates, we may notify you of updates through email. If you do not agree with this Policy governing our Platform, please refrain from using the Platform or the Services provided by us.

15. HOW CAN YOU CONTACT US?

Should you need additional information or have any questions or complaints regarding the handling of your Personal Information, please reach out to us in writing at:

Email: ankur@chaotix.ai

Schedule I- Indian Residents

We are committed to safeguarding the privacy rights of our Users in India. This schedule outlines our compliance with Indian privacy laws, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules), and the Digital Personal Data Protection Act (DPDPA), 2023. These regulations ensure that Personal Data is processed fairly, lawfully, and transparently.

YOUR DATA SUBJECT RIGHTS:

Right to Consent: Your explicit consent is required for the collection and processing of your Sensitive Personal Data or Information (SPDI).
Right to Access: You have the right to access your Personal Data and obtain a copy of it.
Right to Correction: You can request corrections to any inaccurate or incomplete Personal Data.
Right to Withdrawal of Consent: You can withdraw your consent to the processing of your Personal Data at any time.
Right to Review Information: You can review the information you have provided and ensure it is accurate and up-to-date.
Right to Grievance Redressal: You have the right to lodge a complaint regarding the processing of your Personal Data with our Grievance Officer.

DATA RETENTION AND DE-IDENTIFICATION:

We are committed to retaining Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in our main Privacy Policy (see Clause filmy6). We may also take measures to de-identify Personal Information in accordance with Applicable Laws and regulations.

APPEAL PROCESS

If you disagree with the Firm's response to your privacy rights request or believe your rights have not been adequately addressed, you have the right to appeal. You can submit your appeal in writing to our Data Protection Officer at ankur@chaotix.ai with the subject line "Appeal of Privacy Rights Request."

LODGING A COMPLAINT

If you believe your rights have been violated or are dissatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of India (DPIC). The DPIC is responsible for handling complaints related to data protection and ensuring compliance with the DPDPA.

ADDITIONAL INFORMATION:

For more detailed information on how we handle your Personal Information, including our data collection practices, security measures, and third-party disclosures, please refer to our main Privacy Policy available.

Schedule II- European Union Residents

We are committed to ensuring compliance with the European Union General Data Protection Regulation (GDPR).

Although our Privacy Policy explains how we meet all of our obligations for United Kingdom Users, we also have some Users who are habitually located in the European Union (‘EU Residents’) who have additional rights with respect to their Personal Data.

Personal Data is defined as: “Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. The term “Personal Data” should be considered fundamentally interchangeable with the expression “Personal Information” for the purposes of this Privacy Policy.

Under the GDPR, we are the “Data Controller” and “Data Processor” of Personal Data. As part of our GDPR compliance, we provide and operate the App in a way that ensures: Personal Data (i.e. Personal Information) is processed fairly, lawfully, and in a transparent manner; and collected and processed only for specified and lawful purposes.

We ensure that the Personal Data we collect about you is accurate, complete, and used for its intended purpose. You may access, review, correct, and update your Information by contacting us by email at the contact details below.

EUROPEAN UNION RESIDENTS

In certain circumstances, you have certain rights regarding your Personal Information. A summary of each right and how you can exercise it is detailed below. To exercise any of these rights, please contact us at ankur@chaotix.ai. Such requests should include information to allow us to verify your identity (e.g. your name, address, email address, or other information reasonably required).

Where we receive your request to exercise one of these rights, we will respond without undue delay and within the time required by Applicable Law. This may be extended in certain circumstances, e.g. where requests are complex or numerous.

We will provide the information free of charge, except where requests are manifestly unfounded or excessive, e.g. because of their repetitive character. In these circumstances, we may charge a reasonable fee or may refuse to act on the request. We will advise you of any fees prior to proceeding with a request. We may ask for additional information to verify your identity before carrying out a request.

HOW CAN YOU EXERCISE YOUR RIGHT?

Right to access and/or correct your Personal Data
You have the right to access the Personal Data we hold about you, and to be provided with a copy of the information (in most circumstances). You also have the right to correct any information we may hold about you that is inaccurate.
Right to restrict the use of your Personal Data
You have the right to ask us to restrict the processing of your Personal Data where one of the following applies:
- The processing is unlawful, but you want us to restrict the use of the data instead of deleting it;
- Where you contest the accuracy of your Personal Data, the restriction will apply until we have verified the accuracy or corrected your Personal Data;
- We no longer require the Personal Data for the purposes of the processing, but are required to keep it in connection with a legal claim;
- You have exercised your right to object to the processing. The restriction will apply until we have taken steps to verify whether we have compelling legitimate grounds to continue processing.
Right to withdraw consent and request deletion of your Personal Data
- You have the right to ask us to delete your Personal Data in most circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the Personal Data is required to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.
- You may object to our use of your Personal Data for marketing purposes, and you can let us know via the provided email address.
- Further, you may also object to the processing of your Personal Data in cases where we have used legitimate interests as the basis for processing. In such cases, we will stop processing your Personal Data until we verify that we have compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms in asking us to stop processing the data, or in limited cases where we need to continue processing the data for the establishment, exercise, or defence of legal claims.
Data retention and anonymisation
We are committed to retaining Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in our main Privacy Policy (see Clause 6). We may also take measures to de-identify Personal Information in accordance with Applicable Laws and regulations.
Right to data portability
In most cases, you have the right to receive all Personal Data you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another data controller, where technically feasible.
Right to lodge a complaint with a supervisory authority
If you are a resident of the EU, you have the right to make a complaint at any time to the regulator in your jurisdiction. To find out how to contact your local regulator, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.
We will allow and assist Users who are EU Residents to exercise these rights unless we have compelling and legitimate legal grounds not to (e.g. a legal obligation under United Kingdom legislation, or if the Personal Data has been fully anonymised).

Schedule III: United Kingdom (UK) Residents

We are dedicated to upholding the principles of the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

While our Privacy Policy outlines our commitments to European Union Users, we recognise that Users located in the United Kingdom (‘UK Residents’) have additional rights concerning their Personal Data.

YOUR DATA SUBJECT RIGHTS:

You have a number of rights under applicable Data Protection Laws in relation to your Personal Information. Under certain circumstances, you have the right to:

Have access to your Personal Information by submitting a request to us;
Have your Personal Information deleted;
Have your Personal Information corrected if it is wrong;
Have the processing of your Personal Information restricted;
Object to further processing of your Personal Information, including to object to marketing from us;
Make a data portability request;
Withdraw any consent you have provided to us;
Restrict any automatic processing of your Personal Information; and
Complaint to the appropriate supervisory authority.

To exercise any of these rights, please contact us at ankur@chaotix.ai.

1. BASIS FOR PROCESSING:

We will only process your Personal Information when we have a lawful basis to do so, such as consent, contractual necessity, or legitimate interests. Also, please refer to Clause 5 to understand how we process your Personal Information.

2. PROCESS OF APPEAL:

Schedule IV: United States Residents

We are dedicated to adhering to the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA) and other relevant state privacy regulations. If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nevada, Oregon, Texas, Utah, Vermont, Virginia, or Washington, or if you fall under the protections offered by privacy laws in those states, this section serves as an addition to our primary Privacy Policy, detailing your specific rights and protections.

According to the CCPA, "Personal Information" encompasses any data that can identify, relate to, describe, or be reasonably associated with a specific consumer or household. This includes a variety of information types such as names, addresses, and online identifiers, among others.

We make every effort to ensure that the Personal Information we gather is precise, relevant, and utilised correctly. You have the right to access, delete, and request disclosures regarding your Personal Information. For any questions or to exercise these rights, please reach out to us using the contact details provided below.

1. YOUR PRIVACY RIGHTS:

Right to access: You can access the information that has been provided by you by reaching out to us at ankur@chaotix.ai.
Right to withdraw consent: The consent that you provide for the collection, use, and disclosure of your Personal Information will remain valid until such time it is withdrawn by you in writing. If you withdraw your consent, we will stop processing the relevant Personal Information except to the extent that we have other grounds for processing such Personal Information under Applicable Laws. We will respond to your request within a reasonable timeframe. You may withdraw your consent at any time by contacting us; and
Right to Opt-Out: You have the right to opt out of certain processing activities, such as the sale of Personal Information or the use of Personal Information for targeted advertising purposes. Firmli will respect your preferences and refrain from such activities upon your request.
Right to correction: You are responsible for maintaining the accuracy of the information you submit to us, including but not limited to your Contact Information. For any necessary updates or corrections to your Personal Information, Users can easily modify details using the provided App functionalities or by reaching out to us at ankur@chaotix.ai.
Right of Access and Portability: In some jurisdictions, Applicable Law may entitle you to request certain copies of your Personal Information or information about how we handle your Personal Information, request copies of Personal Information that you have provided to us in a structured, commonly used, and machine-readable format, and/or request that we transmit this information to another service provider, where technically feasible.
Right of Erasure: In some jurisdictions, you can request that your Personal Information be deleted.

2. DATA CONTROLLER AND PROCESSOR:

Under various U.S. privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) and other state-specific regulations, we act as the “Data Controller” as well as “Data Processor” of Personal Data. To ensure compliance, we operate our services in a manner that guarantees: Personal Data is processed fairly, lawfully, and transparently; and it is collected and used only for legitimate and specified purposes.

3. APPEAL PROCESS:

4. DATA RETENTION AND DE-IDENTIFICATION:

We are committed to retaining Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in our main Privacy Policy (see Clause 6). We may also take measures to de-identify Personal Information in accordance with Applicable Laws and regulations.

5. LODGING A COMPLAINT

If you believe your rights have been violated or are dissatisfied with our response, you have the right to lodge a complaint with the federal agencies such as the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). You may also contact the State Attorney General’s Office of your residential state. These organisations are responsible for handling complaints related to data protection and ensuring compliance with the privacy laws.