Privacy Policy

For the website, self-serve sign-ups, and direct marketing, Air Sound AI acts as a data controller. For enterprise accounts where Air Sound AI processes data on behalf of a Customer, Air Sound AI acts as a processor / service provider under applicable law. Where Air Sound AI acts as a processor / service provider, the Data Processing Addendum (DPA) governs and controls in the event of any conflict with this Privacy Policy.

To better provide you with the products and services offered, Air Sound AI may ask you to provide certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:

• Email address.
• First name and last name.
• Phone number.
• Address, state, province, ZIP / postal code, city.
• Cookies and usage data.

We collect Personal Data that you provide directly (for example, when you sign up, contact us, or make a purchase), as well as certain data collected automatically such as usage data, cookies, and device information. We use this information for, but not limited to, communicating with you in relation to services or products you have requested from us, and sending you newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any or all of these communications by following the unsubscribe link.

AI voice and communications data. If you enable voice features or connect telephony, we may receive audio, transcripts, call metadata, and interaction logs ("Communications Data") for providing services and improving safety. Customers are responsible for obtaining all required notices and consents before providing such data to Air Sound AI. Air Sound AI may use Communications Data in aggregated and de-identified form to improve, train, and enhance its models and services, provided such use does not identify the Customer or end users.

We confirm that we do not use Google Workspace APIs to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models, and we do not retain any data obtained via Google Workspace APIs for such purposes.

Sensitive Personal Data. We do not seek to collect sensitive categories of data unless strictly necessary for the services and expressly provided by you, and where required, with your explicit consent.

Whether you visit our service or use a mobile device to access it, we may gather data from your browser ("Usage Data").

This Usage Data may contain information like the Internet Protocol (IP) address of your computer, the type and version of your browser, the pages you visit on our service, the time and date of your visit, the amount of time you spend on those pages, unique device identifiers, and other diagnostic data.

When accessing the service via a mobile device, we may collect device type, unique device identifiers, IP address, operating system, mobile browser type, and other diagnostic data.

If you grant us permission to do so, we may use and keep track of your location data ("Location Data"). We utilize your information to offer features, enhance, and personalize our service. Whenever you use our service, you have the option to enable or disable location services using your device's settings.

We use cookies and similar tracking technologies to track the activity on our service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags, and scripts to collect and track information and to improve and analyze our service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Examples of cookies we use:

• Session cookies — to operate our service.
• Preference cookies — to remember your preferences and settings.
• Security cookies — for security purposes.
• Advertising cookies — to serve you with advertisements that may be relevant to you and your interests.

We honor Global Privacy Control (GPC) signals where required by applicable law.

Yousea Technology Limited uses the collected data to:

• fulfill the purpose for which you provide it;
• provide and maintain our service;
• notify you about changes to our service;
• allow you to participate in interactive features of our service when you choose to do so;
• provide customer support;
• gather analysis or valuable information so that we can improve our service;
• monitor the usage of our service;
• detect, prevent, and address technical issues;
• carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• provide you with notices about your account or subscription, including expiration and renewal notices, email instructions, etc.;
• provide you with news, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or inquired about, unless you have opted not to receive such information;
• in any other way we may describe when you provide the information;
• for any other purpose with your consent.

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.

Retention criteria. We determine retention periods based on the nature of the data, the purposes for which it is processed, and legal requirements. Where feasible, we anonymize or aggregate data instead of retaining it in a form that identifies you. When data is no longer needed, it will be securely deleted or anonymized.

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Please be aware that if you choose to give us information while you are not in the region where we are established, the data — including Personal Data — will be transferred to and processed in our operating regions.

International transfers and safeguards. Where required, we use safeguards like Standard Contractual Clauses and comparable mechanisms. This includes, where applicable, the UK International Data Transfer Agreement (IDTA) or other approved transfer mechanisms.

We may disclose personal information that we collect or you provide:

• if required to do so by law or in response to valid requests by public authorities.
• where we or our subsidiaries are involved in a merger, acquisition, or asset sale — your Personal Data may be transferred.

We may also disclose your information:

• to our subsidiaries and affiliates;
• to fulfill the purpose for which you provide it;
• for any other purpose disclosed by us when you provide the information;
• with your consent in any other cases;
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Yousea Technology Limited, our customers, or others.

Service providers and sub-processors. We engage third parties with confidentiality agreements and provide notice of material changes via our DPA. Air Sound AI may update its list of sub-processors and provide notice through its DPA.

While recognizing the importance of securing your data, we understand that no method of transmission over the Internet or method of electronic storage is 100% secure. Nevertheless, we will strive to use commercially acceptable means to protect your Personal Data, but we cannot guarantee its absolute security.

Incident notifications. If we become aware of a data breach impacting Personal Data, we will notify affected parties or regulators without undue delay and in any event within the time periods required by applicable law. We implement administrative, technical, and physical safeguards consistent with industry standards (e.g. ISO 27001, SOC 2), where applicable.

From time to time, Air Sound AI may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, or other general communications. In order to improve our services, we may receive a notification when you open an email from Air Sound AI or click on a link therein.

If you would like to stop receiving marketing or promotional communications via email from Air Sound AI, you may opt out of such communications by clicking "unsubscribe".

Transactional vs. marketing. You cannot opt out of essential service-related communications.

11.1 General Data Protection Regulation (GDPR)

If you are a resident of the European Union (EU) or European Economic Area (EEA), you have certain data protection rights covered by GDPR.

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed about what Personal Data we hold about you and you want it to be removed from our systems, please email us at privacy@airsound.ai.

In certain circumstances, you have the following data protection rights:

• the right to access, update, or delete your data on our site;
• the right to rectify your information if that information is inaccurate or incomplete;
• the right to object to the processing of your Personal Data;
• the right to request that the processing of your personal information is restricted;
• the right to request and be provided with a copy of your Personal Data in a structured, machine-readable, and commonly used format;
• the right to withdraw consent at any time where your consent is required to process any of your personal information.

Please note that we may ask you to verify your identity before responding to such requests, as we may not be able to provide service without some necessary data. We will respond to all data subject requests within the time periods required by applicable law (for example, within 30 days under the GDPR or 45 days under the CCPA / CPRA).

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Lawful bases. We rely on contract, legitimate interests, consent, and legal obligations depending on the activity.

Children's data. We do not knowingly collect Personal Data from children under 13 (or under 16 in the EEA) without appropriate consent. If we learn we have collected such data, we will delete it promptly.

11.2 California Online Privacy Protection Act (CalOPPA)

According to CalOPPA, we agree to the following:

• users can visit our site anonymously;
• our Privacy Policy link includes the word "Privacy," and can easily be found on the page specified above on the home page of our website;
• users will be notified of any privacy policy changes on our Privacy Policy page;
• users can change their personal information by emailing us at support@airsound.ai.

Our policy on "Do Not Track" signals. When a "Do Not Track" browser feature is enabled, we respect the signal and do not track, install cookies, or employ advertising. You can tell websites that you do not want to be tracked by using the Do Not Track option on your web browser. Go to your browser's Preferences or Settings page to enable or disable Do Not Track.

11.3 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data, and ask us not to sell (share) it. To exercise your data protection rights, you can ask us:

What personal information we have about you. If you make this request, we will return to you:

• The categories of personal information we have collected about you.
• The categories of sources from which we collect your personal information.
• The business or commercial purpose for collecting or selling your personal information.
• The categories of third parties with whom we share personal information.
• The specific pieces of personal information we have collected about you.
• A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.
• A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.

You are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months.

To delete your personal information. If you make this request, we shall remove from our records any personal information we have on file as of the request date and instruct any service providers to follow suit. De-identification of the information can sometimes be used to achieve deletion. However, you might not be able to utilize some features that depend on your personal information to work if you decide to remove it.

To stop selling your personal information. Your personal information is never sold to other parties for profit. However, in certain situations, a non-monetary transfer of personal data to a third party or another member of our family of businesses can be regarded by California law as a "sale."

We shall cease transferring your personal data if you request that we no longer sell it. If you live in California and would like to request that your personal information not be sold, send an email to support@airsound.ai with the subject "Do Not Sell My Personal Information."

Please be aware that requesting that we remove or cease selling your data may affect how you interact with us and may prevent you from taking advantage of membership services or certain programs that depend on the use of your personal data. However, we would never treat you unfairly just because you are exercising your rights.

To exercise your California data protection rights described above, please send your request(s) to support@airsound.ai.

CPRA enhancements. We do not sell or share Personal Information for cross-context behavioral advertising. California residents may request correction of inaccurate PI, limit use of Sensitive PI, and opt out at any time. We do not use sensitive personal information beyond what is reasonably necessary to provide the services.

We may employ third-party companies and individuals to facilitate our service ("Service Providers"), provide service on our behalf, perform service-related services, or assist us in analyzing how our service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

You can request an up-to-date list of third-party Service Providers by emailing us at compliance@airsound.ai. We provide a non-comprehensive list of our Service Providers below.

A. Analytics

We may use third-party Service Providers to monitor and analyze the use of our service, including providers such as Google Analytics, Cloudflare Analytics, Segment, and Mixpanel. Please consult each provider's privacy policy for details on their data practices.

B. CI/CD tools

We use development platforms such as GitHub to host and review code, manage projects, and build software. Please consult each provider's privacy policy for details.

C. Payments

We provide paid products and services. In that case, we use third-party services for payment processing (e.g. payment processors such as Stripe). Please consult each provider's privacy policy for details.

D. Use of your personal information

Air Sound AI collects and uses your personal information to operate and deliver the services you have requested. Air Sound AI may also use your personally identifiable information to inform you of other products or services available from Air Sound AI and its affiliates.

E. Sharing information with third parties

Air Sound AI does not sell, rent, or lease its customer lists to third parties. Air Sound AI may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Air Sound AI, and they are required to maintain the confidentiality of your information.

Air Sound AI may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Air Sound AI or the site; (b) protect and defend the rights or property of Air Sound AI; or (c) act under exigent circumstances to protect the personal safety of users of Air Sound AI, or the public.

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• delete your personal information from our records; and
• direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

• complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with applicable law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity;
• debug to identify and repair errors that impair existing intended functionality;
• exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• comply with applicable electronic communications privacy laws;
• engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• comply with an existing legal obligation; or
• otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Air Sound AI reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our site, or by updating any privacy information.

Your continued use of the application or services available after such modifications will constitute your (a) acknowledgment of the modified Privacy Policy and (b) agreement to abide and be bound by that Policy.

Where required by law, we will obtain your consent to material changes.

Air Sound AI welcomes your questions or comments regarding this Statement of Privacy. If you believe that Air Sound AI has not adhered to this Statement, please contact us at:

Email: compliance@airsound.ai

This Privacy Policy shall be governed by the laws of the Hong Kong Special Administrative Region, except where otherwise required by applicable law.